# Latest **URL:** https://discuss.elastic.co/latest.md?page=1770 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1771 --- ## [Mongodb - MongoDB Input threw an exception, restarting {:exception=\>#\ **Author:** [@deepakELKB](https://discuss.elastic.co/u/deepakELKB)\ **Replies:** 0\ **Last updated:** [March 23, 2021, 6:11am UTC](https://discuss.elastic.co/t/mongodb-mongodb-input-threw-an-exception-restarting-exception-bson-003cd541-2dd3-4a8e-89b0-595c74a9e4f9-is-an-invalid-objectid/268045 "2021-03-23T06:11:21Z") Hi I am getting this error during creation of index from mongodb input plugin. I have also integrate filter and remove \_id filed but still getting same error. input { mongodb{ uri =\> "mongodb+srv://localhost:2… --- ## [Logstash does not work under win10](https://discuss.elastic.co/t/logstash-does-not-work-under-win10/268034)
**Author:** [@George\_Lee](https://discuss.elastic.co/u/George_Lee)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 6:00am UTC](https://discuss.elastic.co/t/logstash-does-not-work-under-win10/268034 "2021-03-23T06:00:01Z")
Can someone help me solve it, thank you very much --- ## [Logstash and Lumberjack giving Error](https://discuss.elastic.co/t/logstash-and-lumberjack-giving-error/268044)
**Author:** [@jhanvi](https://discuss.elastic.co/u/jhanvi)\ **Replies:** 0\ **Last updated:** [March 23, 2021, 5:59am UTC](https://discuss.elastic.co/t/logstash-and-lumberjack-giving-error/268044 "2021-03-23T05:59:52Z")
Hello, I am facing this error quite often and it happens randomly too. My logs seem to be flowing fine and then suddenly it stops and I get the below error. \[ERROR\]\[logstash.outputs.lumberjack\]\[main\] All hosts unavaila… --- ## [Not able to display percentage in pie chart creating in vega](https://discuss.elastic.co/t/not-able-to-display-percentage-in-pie-chart-creating-in-vega/267649)
**Author:** [@saumya1](https://discuss.elastic.co/u/saumya1)\ **Replies:** 4\ **Last updated:** [March 23, 2021, 5:35am UTC](https://discuss.elastic.co/t/not-able-to-display-percentage-in-pie-chart-creating-in-vega/267649 "2021-03-23T05:35:11Z")
{ "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "description": "A simple pie chart with labels.", "data": { "values": \[ {"server\_name": "server\_1","status": "up","up":1,"down":0}, {"server\_name… --- ## [How to resolve the below unassigned shards?](https://discuss.elastic.co/t/how-to-resolve-the-below-unassigned-shards/268037)
**Author:** [@Jax\_dev](https://discuss.elastic.co/u/Jax_dev)\ **Replies:** 5\ **Last updated:** [March 23, 2021, 5:22am UTC](https://discuss.elastic.co/t/how-to-resolve-the-below-unassigned-shards/268037 "2021-03-23T05:22:03Z")
How do I resolve the below unassigned shards ? What exactly happened - one of the node in the cluster was down for 2days and I bought the node back again. After above issue - I could see shards got unassigned. Again I… --- ## [Update license](https://discuss.elastic.co/t/update-license/267351)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 16\ **Last updated:** [March 23, 2021, 5:00am UTC](https://discuss.elastic.co/t/update-license/267351 "2021-03-23T05:00:31Z")
right now i using "open-source" license, can i update to "basic" license manually? because i need a map --- ## [Parsing json object](https://discuss.elastic.co/t/parsing-json-object/267446)
**Author:** [@hackercat](https://discuss.elastic.co/u/hackercat)\ **Replies:** 1\ **Last updated:** [March 17, 2021, 4:45pm UTC](https://discuss.elastic.co/t/parsing-json-object/267446 "2021-03-17T16:45:33Z")
Hi there, If someone can help me with this I would be very appreciated. It's so complicated for me. So I have an event like this { "time":"2021-03-12T00:40:57.016Z", "severity":"INFO", "duration\_s":0.02124, … --- ## [Logstash 特定データのみを抽出し、フィールドに複製したい](https://discuss.elastic.co/t/logstash/267943)
**Author:** [@Ryosuke.mm](https://discuss.elastic.co/u/Ryosuke.mm)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 3:48am UTC](https://discuss.elastic.co/t/logstash/267943 "2021-03-23T03:48:45Z")
Logstashのfilterにて、条件を満たす配列の要素を抽出し、別の属性として複製したいです。 inputのデータ { "id" : 1, "custom\_fields" : \[ { "name" : "customField\_1", "id" : A, "value" : "TestValue1" }, { … --- ## [JVM Heap space recommendation on 7.11.2](https://discuss.elastic.co/t/jvm-heap-space-recommendation-on-7-11-2/268017)
**Author:** [@vee](https://discuss.elastic.co/u/vee)\ **Replies:** 8\ **Last updated:** [March 23, 2021, 2:27am UTC](https://discuss.elastic.co/t/jvm-heap-space-recommendation-on-7-11-2/268017 "2021-03-23T02:27:34Z")
Hi, am planning to upgrade elastic from v7.5 to v7.11.2. We currently have heapspace settings in jvm.options using the Xmx and Xms settings, and we do use the OpenJDK that comes with the product. Is the recommendation al… --- ## [Log viewing through Filebeat](https://discuss.elastic.co/t/log-viewing-through-filebeat/267713)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 2\ **Last updated:** [March 18, 2021, 8:38pm UTC](https://discuss.elastic.co/t/log-viewing-through-filebeat/267713 "2021-03-18T20:38:03Z")
Hello there, I am trying to explore the possibility of log viewing through Kibana dashboard. I understand the process of setting up logs location in filebeat.yml file and then create index in kibana and then view logs … --- ## [Elastic-operator-0 CrashLoopBackOff](https://discuss.elastic.co/t/elastic-operator-0-crashloopbackoff/267736)
**Author:** [@SnakeByte](https://discuss.elastic.co/u/SnakeByte)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 1:30am UTC](https://discuss.elastic.co/t/elastic-operator-0-crashloopbackoff/267736 "2021-03-23T01:30:42Z")
Following the instructions here, I only got as far as step 2 before running into trouble :slight\_smile: : Deploy ECK in your Kubernetes cluster elastic-operator-0 is left in a CrashLoogBackOff state, with these three l… --- ## [Search Substring of Log Text Field](https://discuss.elastic.co/t/search-substring-of-log-text-field/267576)
**Author:** [@MCDELTAT](https://discuss.elastic.co/u/MCDELTAT)\ **Replies:** 3\ **Last updated:** [March 23, 2021, 12:08am UTC](https://discuss.elastic.co/t/search-substring-of-log-text-field/267576 "2021-03-23T00:08:54Z")
I know this has been asked a million times, but none of the solutions seem to work. I'm trying to filter for a specific, reproducible error, to find out how long it had been going on. I have the following thus far for KQ… --- ## [ILM policy is notworking](https://discuss.elastic.co/t/ilm-policy-is-notworking/267891)
**Author:** [@Narayan\_Banik](https://discuss.elastic.co/u/Narayan_Banik)\ **Replies:** 5\ **Last updated:** [March 23, 2021, 12:07am UTC](https://discuss.elastic.co/t/ilm-policy-is-notworking/267891 "2021-03-23T00:07:34Z")
I'm using ES 7.1... here is my ILM policy: GET \_ilm/policy/el\_metric\_policy { "el\_metric\_policy" : { "version" : 1, "modified\_date" : "2021-03-20T15:53:20.941Z", "policy" : { "phases" : { "h… --- ## [Bad Request when using scripted field in a table](https://discuss.elastic.co/t/bad-request-when-using-scripted-field-in-a-table/266615)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 12:00am UTC](https://discuss.elastic.co/t/bad-request-when-using-scripted-field-in-a-table/266615 "2021-03-23T00:00:51Z")
Hey, Creating a table visualisation with a scripted field. When I add the field parent\_name.keyword , Scripted, the table showing OK. When I remove the field parent\_name.keyword, I get the error below. Could not find… --- ## [KQL Query with wildcard and space not working (with wildcard type)](https://discuss.elastic.co/t/kql-query-with-wildcard-and-space-not-working-with-wildcard-type/267237)
**Author:** [@Sebastien\_Taniere](https://discuss.elastic.co/u/Sebastien_Taniere)\ **Replies:** 3\ **Last updated:** [March 22, 2021, 11:57pm UTC](https://discuss.elastic.co/t/kql-query-with-wildcard-and-space-not-working-with-wildcard-type/267237 "2021-03-22T23:57:29Z")
Hello, I used a wildcard field in my index mapping in order to be able to use wilcard in my logs. Now, I try to select some lines in my logs which begins with "Request finished" message:Request\* it is working but t… --- ## [Indexing three different documents as logically one](https://discuss.elastic.co/t/indexing-three-different-documents-as-logically-one/267896)
**Author:** [@Marco\_Tedone](https://discuss.elastic.co/u/Marco_Tedone)\ **Replies:** 5\ **Last updated:** [March 22, 2021, 11:55pm UTC](https://discuss.elastic.co/t/indexing-three-different-documents-as-logically-one/267896 "2021-03-22T23:55:59Z")
Hi, I’m new to ES. I want to index OAS APIs. For each of these APIs I’ve got the OAS3 contract, a markdown documentation file as well as a JSON metadata file. I’d like to submit all three or them (for each API) and have … --- ## [Elasticsearch/Kibana 7.10.0 ILM/Rollover](https://discuss.elastic.co/t/elasticsearch-kibana-7-10-0-ilm-rollover/267989)
**Author:** [@Rollup\_eval](https://discuss.elastic.co/u/Rollup_eval)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 11:06pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-7-10-0-ilm-rollover/267989 "2021-03-22T23:06:50Z")
I use elasticsearch 7.10.0 and kibana 7.10.0. I have created a simple ILM/Rollover policy by kibana interface. { "generator" : { "version" : 4, "modified\_date" : "2021-03-22T15:43:56.062Z", "policy" : { … --- ## [Installing MetricBeat with ElasticSearch7.9.0](https://discuss.elastic.co/t/installing-metricbeat-with-elasticsearch7-9-0/267118)
**Author:** [@maheshe](https://discuss.elastic.co/u/maheshe)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 9:45pm UTC](https://discuss.elastic.co/t/installing-metricbeat-with-elasticsearch7-9-0/267118 "2021-03-22T21:45:14Z")
We have a self-managed Elastic EFK stack running. Iam trying to setup metric beats on some of our Linux/UNIX AMIs to monitor their CPU metrics. Referred link: https://www.elastic.co/guide/en/beats/metricbeat/7.x/metric… --- ## [Artifacts.elastic.co forced HTTPS redirect](https://discuss.elastic.co/t/artifacts-elastic-co-forced-https-redirect/267491)
**Author:** [@sfinke0](https://discuss.elastic.co/u/sfinke0)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 9:26pm UTC](https://discuss.elastic.co/t/artifacts-elastic-co-forced-https-redirect/267491 "2021-03-22T21:26:45Z")
Hi there, we recently noticed a forced HTTPS redirect on the artifacts.elastic.co endpoints. Since we use apt-caching (apt-cacher-ng) for more than 1000 hosts this breaks its functionality for plain HTTP proxying and ca… --- ## [Problem with JSON query understanding](https://discuss.elastic.co/t/problem-with-json-query-understanding/268020)
**Author:** [@baka109](https://discuss.elastic.co/u/baka109)\ **Replies:** 0\ **Last updated:** [March 22, 2021, 9:02pm UTC](https://discuss.elastic.co/t/problem-with-json-query-understanding/268020 "2021-03-22T21:02:33Z")
Hello there! I need a little help to understand what I'm doing wrong. I need to modify this index template trying not to rewrite all of this settings and add a value refresh\_interval curl localhost:9200/\_template/test-… --- ## [Painless SHA1 or other hash in scripted field](https://discuss.elastic.co/t/painless-sha1-or-other-hash-in-scripted-field/268018)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 0\ **Last updated:** [March 22, 2021, 8:53pm UTC](https://discuss.elastic.co/t/painless-sha1-or-other-hash-in-scripted-field/268018 "2021-03-22T20:53:30Z")
I have seen a few posts recommending to use sha1() from painless but I'm unable to make it work. I have a scripted field where I take 4 fields and want to turn them into a hash: x = doc\['1'\].value +'&' + doc\['times… --- ## [Elastic Engineer 1 Lab 1.4 Blog Data Indexing Problem](https://discuss.elastic.co/t/elastic-engineer-1-lab-1-4-blog-data-indexing-problem/268013)
**Author:** [@mallen](https://discuss.elastic.co/u/mallen)\ **Replies:** 3\ **Last updated:** [March 22, 2021, 8:37pm UTC](https://discuss.elastic.co/t/elastic-engineer-1-lab-1-4-blog-data-indexing-problem/268013 "2021-03-22T20:37:32Z")
Hello Elastic Training Support, I was working through Lab 1.4 and made it to step 3 before encountering a problem with indexing the required data. Upon issuing the following command: ./logstash-7.8.0/bin/logstash -f da… --- ## [Display data results in Markdown visualization](https://discuss.elastic.co/t/display-data-results-in-markdown-visualization/267986)
**Author:** [@elpiloto100](https://discuss.elastic.co/u/elpiloto100)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 8:31pm UTC](https://discuss.elastic.co/t/display-data-results-in-markdown-visualization/267986 "2021-03-22T20:31:27Z")
Is it possible to display results from a data query in a Markdown visualization to be used in a Kibana dashboard? For example, I want a Markdown to display Temperature: \[temp\] C Pressure: \[pres\] kPa Humidity: \[humid\] %R… --- ## [Elasticsearch speed comparison issue with sql](https://discuss.elastic.co/t/elasticsearch-speed-comparison-issue-with-sql/267947)
**Author:** [@Celal\_Poyraz](https://discuss.elastic.co/u/Celal_Poyraz)\ **Replies:** 9\ **Last updated:** [March 22, 2021, 8:29pm UTC](https://discuss.elastic.co/t/elasticsearch-speed-comparison-issue-with-sql/267947 "2021-03-22T20:29:57Z")
I compare the speed of Sql with ElasticSearch. I have 1.5 million data. But sql query runs faster than elastic search. I don't understand the problem. Why is the word like query coming faster in sql? My code for Sql \< … --- ## [Is there a reason why using the index API like this does not convert data?](https://discuss.elastic.co/t/is-there-a-reason-why-using-the-index-api-like-this-does-not-convert-data/267990)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 8:29pm UTC](https://discuss.elastic.co/t/is-there-a-reason-why-using-the-index-api-like-this-does-not-convert-data/267990 "2021-03-22T20:29:04Z")
Hello If I create a new index from scratch and make the mapping, it understands the data, so the data isnt the issue. But if I do something like this: POST \_reindex { "source": { "index": "myindex-2021.03.21" }, … --- ## [Filebeat Cisco module field type randomly changing](https://discuss.elastic.co/t/filebeat-cisco-module-field-type-randomly-changing/268012)
**Author:** [@JackScripter](https://discuss.elastic.co/u/JackScripter)\ **Replies:** 0\ **Last updated:** [March 22, 2021, 7:57pm UTC](https://discuss.elastic.co/t/filebeat-cisco-module-field-type-randomly-changing/268012 "2021-03-22T19:57:40Z")
Hi ! We use 2 filebeat modules (cisco + checkpoint) running on the same server, so it's basically a syslog server. I configured filebeat to use a custom index. For some reason, some field type are mapped incorrectly, es… --- ## [Data type unsigned long is not showing up as an option in index patterns](https://discuss.elastic.co/t/data-type-unsigned-long-is-not-showing-up-as-an-option-in-index-patterns/267893)
**Author:** [@gbandasha](https://discuss.elastic.co/u/gbandasha)\ **Replies:** 2\ **Last updated:** [March 22, 2021, 7:33pm UTC](https://discuss.elastic.co/t/data-type-unsigned-long-is-not-showing-up-as-an-option-in-index-patterns/267893 "2021-03-22T19:33:55Z")
Hello Team, In Elastic version 7.11, you have added the support for a new Numeric Data type called unsigned long but when I try to set the index template I don't see that option in the drop-down and also I tried to set … --- ## [Highlight synonyms with multi\_match cross\_field search type](https://discuss.elastic.co/t/highlight-synonyms-with-multi-match-cross-field-search-type/268008)
**Author:** [@julioz](https://discuss.elastic.co/u/julioz)\ **Replies:** 0\ **Last updated:** [March 22, 2021, 7:16pm UTC](https://discuss.elastic.co/t/highlight-synonyms-with-multi-match-cross-field-search-type/268008 "2021-03-22T19:16:21Z")
Hi. I'm facing a problem with search highlight. When using cross\_field type of search, the content returned in highlight does not consider synonyms. Example: "settings": { "index": { "analysis": { … --- ## [Parsing a syslog log](https://discuss.elastic.co/t/parsing-a-syslog-log/267651)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 7\ **Last updated:** [March 22, 2021, 6:21pm UTC](https://discuss.elastic.co/t/parsing-a-syslog-log/267651 "2021-03-22T18:21:46Z")
Im receiving the following log (some things changes for privacy, althought the password is literally sent as asterisks) \<134\> 2021/03/18:13:33:41 SYSTEMNAME 0-PPE-0 : default GUI CMD\_EXECUTED 1324333 0 : User invalid… --- ## [Remote cluster monitoring elastic cloud](https://discuss.elastic.co/t/remote-cluster-monitoring-elastic-cloud/266605)
**Author:** [@jugonzalezv](https://discuss.elastic.co/u/jugonzalezv)\ **Replies:** 3\ **Last updated:** [March 22, 2021, 6:18pm UTC](https://discuss.elastic.co/t/remote-cluster-monitoring-elastic-cloud/266605 "2021-03-22T18:18:38Z")
Good evening, I'm trying to create a metric visualization from another cluster and a different user, I have already tried Using one of the clusters as a remote cluster to no avail , my question is: is there anyway to dir… [Previous page](https://discuss.elastic.co/latest.md?page=1769) [Next page](https://discuss.elastic.co/latest.md?page=1771)