# Latest **URL:** https://discuss.elastic.co/latest.md?page=1803 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1804 --- ## [Ways to get all points in shapes / shapes in shapes with Geo query geo\_shape (multiple pre-indexed shape) on big geo-spatial data in ElasticSearch?](https://discuss.elastic.co/t/ways-to-get-all-points-in-shapes-shapes-in-shapes-with-geo-query-geo-shape-multiple-pre-indexed-shape-on-big-geo-spatial-data-in-elasticsearch/266024)
**Author:** [@Florin\_Virdol](https://discuss.elastic.co/u/Florin_Virdol)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 8:04am UTC](https://discuss.elastic.co/t/ways-to-get-all-points-in-shapes-shapes-in-shapes-with-geo-query-geo-shape-multiple-pre-indexed-shape-on-big-geo-spatial-data-in-elasticsearch/266024 "2021-03-04T08:04:15Z")
I have three ElasticSearch indices with geo-spatial data: index-geodoc-geoshape-shapes-1: geographical shapes (e.g.: UK Output Areas with ~200k shapes as documents) each document contains a output area shape and has… --- ## [\_dateparsefailure in Kibana](https://discuss.elastic.co/t/dateparsefailure-in-kibana/266149)
**Author:** [@kund0831](https://discuss.elastic.co/u/kund0831)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 8:02am UTC](https://discuss.elastic.co/t/dateparsefailure-in-kibana/266149 "2021-03-04T08:02:09Z")
Hi, Good evening I'm parsing json logs to elasticsearch using logstash json filter. I'm getting \_dataparsefailure in Kibana dashboard and I couldn't see any error logs in logstash regarding this. time format in logs :… --- ## [Can not view and create snapshots after ELK upgrading](https://discuss.elastic.co/t/can-not-view-and-create-snapshots-after-elk-upgrading/266192)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 7:54am UTC](https://discuss.elastic.co/t/can-not-view-and-create-snapshots-after-elk-upgrading/266192 "2021-03-04T07:54:05Z")
Elasticsearch cluster was upgraded from 7.3.1 to 7.10.1. Now can't view and can not create a snapshot on existing repositories. Got the following error. --- ## [Logstash json filter fail to send to elasticearch when parse json error](https://discuss.elastic.co/t/logstash-json-filter-fail-to-send-to-elasticearch-when-parse-json-error/266190)
**Author:** [@stwang](https://discuss.elastic.co/u/stwang)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 7:48am UTC](https://discuss.elastic.co/t/logstash-json-filter-fail-to-send-to-elasticearch-when-parse-json-error/266190 "2021-03-04T07:48:47Z")
Hi there, I have a logstash filter to pass my log, my log contain json and non-json log, I want both send to elastic search no matter json parse success or failed. I found from logstash, for the failed parse log, it sh… --- ## [Failing \_reindex: IndexOutOfBoundsException after 40.000 documents](https://discuss.elastic.co/t/failing-reindex-indexoutofboundsexception-after-40-000-documents/266174)
**Author:** [@btellier](https://discuss.elastic.co/u/btellier)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 1:19am UTC](https://discuss.elastic.co/t/failing-reindex-indexoutofboundsexception-after-40-000-documents/266174 "2021-03-04T01:19:44Z")
Hey there, I am a contributor for the Apache James project, we rely on emails for searching emails. As part of the 3.6.0 release we updated our mapping, implying a \_reindex data. We did run the procedure \[1\] on severa… --- ## [Displaying numbers in Guage as 1M,1B,1K in kibana](https://discuss.elastic.co/t/displaying-numbers-in-guage-as-1m-1b-1k-in-kibana/266073)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 2\ **Last updated:** [March 4, 2021, 6:38am UTC](https://discuss.elastic.co/t/displaying-numbers-in-guage-as-1m-1b-1k-in-kibana/266073 "2021-03-04T06:38:28Z")
I have a dataset of Bank, I want to sum total amount But it is so large. Can someone help me how to convert it into Million or Billion. --- ## [Unable to sort term aggregation based on score calculated via script in sub aggregation](https://discuss.elastic.co/t/unable-to-sort-term-aggregation-based-on-score-calculated-via-script-in-sub-aggregation/266184)
**Author:** [@AadarshKumayan](https://discuss.elastic.co/u/AadarshKumayan)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 6:21am UTC](https://discuss.elastic.co/t/unable-to-sort-term-aggregation-based-on-score-calculated-via-script-in-sub-aggregation/266184 "2021-03-04T06:21:54Z")
I have index of stores at various location. With each store I have a nested list of discount coupon. Now I have query to get list of all unique coupons in a x km of radius sorted by the distance of the nearest applicabl… --- ## [Limit number of shards on a particular Elasticsearch node](https://discuss.elastic.co/t/limit-number-of-shards-on-a-particular-elasticsearch-node/263943)
**Author:** [@Nitish\_Goyal](https://discuss.elastic.co/u/Nitish_Goyal)\ **Replies:** 2\ **Last updated:** [March 4, 2021, 3:45am UTC](https://discuss.elastic.co/t/limit-number-of-shards-on-a-particular-elasticsearch-node/263943 "2021-03-04T03:45:32Z")
I have a huge 300 node Elasticsearch cluster and the machines added over the years are with different configuration. By default, elasticsearch tries to make sure equal number of shards exists on each and every node of t… --- ## [Click on bars in a bar chart and go to another dashboard](https://discuss.elastic.co/t/click-on-bars-in-a-bar-chart-and-go-to-another-dashboard/266059)
**Author:** [@kasun](https://discuss.elastic.co/u/kasun)\ **Replies:** 4\ **Last updated:** [March 4, 2021, 3:08am UTC](https://discuss.elastic.co/t/click-on-bars-in-a-bar-chart-and-go-to-another-dashboard/266059 "2021-03-04T03:08:23Z")
Hi all, I have different dashboards named as leave,time.... for each row in the above chart . Is it possible to go to the relevant dashboard when click on a bar? As an example when click on the leave bar it should r… --- ## [Indicator Match Detection Rule Not Matched and Mapped to Intel Feeds](https://discuss.elastic.co/t/indicator-match-detection-rule-not-matched-and-mapped-to-intel-feeds/262446)
**Author:** [@ikbal](https://discuss.elastic.co/u/ikbal)\ **Replies:** 16\ **Last updated:** [March 4, 2021, 3:06am UTC](https://discuss.elastic.co/t/indicator-match-detection-rule-not-matched-and-mapped-to-intel-feeds/262446 "2021-03-04T03:06:22Z")
Hi guys, We are using ES 7.10.1 altogether with Logstash and Kibana. We have ingested TI feeds from MISP and index named as filebeat and we wanted to map and match it to Zscaler logs. We have tested tens of times just… --- ## [Optinal way to index and search data](https://discuss.elastic.co/t/optinal-way-to-index-and-search-data/266179)
**Author:** [@ekrx](https://discuss.elastic.co/u/ekrx)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 2:57am UTC](https://discuss.elastic.co/t/optinal-way-to-index-and-search-data/266179 "2021-03-04T02:57:53Z")
Lets say that I am creating an application that will search text from a huge data set. Say my document is something like this: { "type": "string", "message": "String" ....... } The type field is used to limit my sear… --- ## [Elasticsearch's APM with nodejs lambda](https://discuss.elastic.co/t/elasticsearchs-apm-with-nodejs-lambda/266053)
**Author:** [@shifenglim](https://discuss.elastic.co/u/shifenglim)\ **Replies:** 2\ **Last updated:** [March 4, 2021, 1:49am UTC](https://discuss.elastic.co/t/elasticsearchs-apm-with-nodejs-lambda/266053 "2021-03-04T01:49:59Z")
I noticed that AWS Lambda's APM page states that it is deprecated: Would it still be possible to run APM on lambda services developed in nodejs? Elasticsearch version: 7.8 APM Server version: 7.8 --- ## [Break up large index into multiple smaller equally sized indexes?](https://discuss.elastic.co/t/break-up-large-index-into-multiple-smaller-equally-sized-indexes/265745)
**Author:** [@stevedwray](https://discuss.elastic.co/u/stevedwray)\ **Replies:** 22\ **Last updated:** [March 4, 2021, 12:45am UTC](https://discuss.elastic.co/t/break-up-large-index-into-multiple-smaller-equally-sized-indexes/265745 "2021-03-04T00:45:31Z")
Whats the best way to break up large index into multiple smaller equally sized indexes? I've looked at using reindex with a query but it seems extremely slow: XPOST localhost:9200/\_reindex { "source": { … --- ## [Contributing to Fleet with Community Integrations](https://discuss.elastic.co/t/contributing-to-fleet-with-community-integrations/265591)
**Author:** [@rwatts3](https://discuss.elastic.co/u/rwatts3)\ **Replies:** 2\ **Last updated:** [March 4, 2021, 12:42am UTC](https://discuss.elastic.co/t/contributing-to-fleet-with-community-integrations/265591 "2021-03-04T00:42:44Z")
Greetings, Are there plans or discussions to allow community built integrations, or the ability to load custom built integrations. The Elastic Agent feature is really nice and it would be great if we could build an Int… --- ## [Logstash мониторинг file input](https://discuss.elastic.co/t/logstash-file-input/264934)
**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\ **Replies:** 10\ **Last updated:** [March 4, 2021, 12:18am UTC](https://discuss.elastic.co/t/logstash-file-input/264934 "2021-03-04T00:18:30Z")
Добрый день, подскажите, кто нибудь сталкивался с мониторингом входящих данных? Есть несколько серверов которые каждый день по sftp скидывают логи в директорию на сервер logstash, можно ли настроить мониторинг файлов на… --- ## [Push/pop element to array (PATCH request)](https://discuss.elastic.co/t/push-pop-element-to-array-patch-request/266136)
**Author:** [@Lautaro](https://discuss.elastic.co/u/Lautaro)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 12:00am UTC](https://discuss.elastic.co/t/push-pop-element-to-array-patch-request/266136 "2021-03-04T00:00:15Z")
How can I add or delete elements from an array without having to query the document to update them programmatically (modifying the queried document to update the array with a back-end language)? The documentation does n… --- ## [Elasticsearch OSS Image and X-Pack Plugin](https://discuss.elastic.co/t/elasticsearch-oss-image-and-x-pack-plugin/266169)
**Author:** [@robinhood\_lko](https://discuss.elastic.co/u/robinhood_lko)\ **Replies:** 8\ **Last updated:** [March 3, 2021, 10:51pm UTC](https://discuss.elastic.co/t/elasticsearch-oss-image-and-x-pack-plugin/266169 "2021-03-03T22:51:50Z")
Hi All, I am trying to deploy following Elasticsearch OSS image and facing issue while using x-pack security. Is there any possibility that this plugin can be deployed explicitly ? Thanks "docker.elastic.co/elasticsear… --- ## [Mapping Location By Mailing Address](https://discuss.elastic.co/t/mapping-location-by-mailing-address/266154)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 10:51pm UTC](https://discuss.elastic.co/t/mapping-location-by-mailing-address/266154 "2021-03-03T22:51:16Z")
Is it possible to map a location by it's mailing address or does Kibana only map by lat/long coordinates? --- ## [ILM not deleting indicies](https://discuss.elastic.co/t/ilm-not-deleting-indicies/265799)
**Author:** [@jamesp220291](https://discuss.elastic.co/u/jamesp220291)\ **Replies:** 5\ **Last updated:** [March 3, 2021, 10:26pm UTC](https://discuss.elastic.co/t/ilm-not-deleting-indicies/265799 "2021-03-03T22:26:19Z")
Hi i have some ILM with a delete phase after 7/30 days. However the indexs are not being deleted. ### Index lifecycle management \*\*Lifecycle policy\*\* \[apm-rollover-30-days\] \*\*Current action\*\* complete \*\*Failed st… --- ## [Logs are not reflecting in Kibana](https://discuss.elastic.co/t/logs-are-not-reflecting-in-kibana/265684)
**Author:** [@roh689](https://discuss.elastic.co/u/roh689)\ **Replies:** 9\ **Last updated:** [March 3, 2021, 10:25pm UTC](https://discuss.elastic.co/t/logs-are-not-reflecting-in-kibana/265684 "2021-03-03T22:25:33Z")
In our ELK environment, we are not seeing any issues on elasticsearch and Logstash server. We can also see logs are receiving on Logstash side, but it is not reflecting in index on Kibana side. Can anyone suggest what w… --- ## [ELK stack Upgrade from 7.10 to 7.11 Memory Usage](https://discuss.elastic.co/t/elk-stack-upgrade-from-7-10-to-7-11-memory-usage/265834)
**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\ **Replies:** 3\ **Last updated:** [March 3, 2021, 10:24pm UTC](https://discuss.elastic.co/t/elk-stack-upgrade-from-7-10-to-7-11-memory-usage/265834 "2021-03-03T22:24:56Z")
On Debian 10, I just now ran an update which upgraded our ELK stack from 7.10 to 7.11. Prior to the upgrade, our system had been using approximately 2-3GB or RAM. Immediately upon reboot after the upgrade, we are notic… --- ## [Filter on Nested Values - Not Contains](https://discuss.elastic.co/t/filter-on-nested-values-not-contains/266168)
**Author:** [@ankitshah692](https://discuss.elastic.co/u/ankitshah692)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 10:07pm UTC](https://discuss.elastic.co/t/filter-on-nested-values-not-contains/266168 "2021-03-03T22:07:45Z")
Hello All , I have a problem where i need to find a parent document which doesnt have a specific value in any of its nested documents. In below example - i need to ignore this below document if any of its children have … --- ## [Suggest: No results with anything I've tried (term, phrase, simple\_phrase, collate)](https://discuss.elastic.co/t/suggest-no-results-with-anything-ive-tried-term-phrase-simple-phrase-collate/266159)
**Author:** [@Mark\_Petersen](https://discuss.elastic.co/u/Mark_Petersen)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 8:57pm UTC](https://discuss.elastic.co/t/suggest-no-results-with-anything-ive-tried-term-phrase-simple-phrase-collate/266159 "2021-03-03T20:57:06Z")
Hi everyone, I'm new to Elasticsearch and I've been trying for some time to get a suggest search to return me anything at all and I really need help. Requirement Suggest article titles based on incomplete or misspelled… --- ## [Elasticsearch portuguese stemmer inconsistency](https://discuss.elastic.co/t/elasticsearch-portuguese-stemmer-inconsistency/266153)
**Author:** [@Mathulbrich](https://discuss.elastic.co/u/Mathulbrich)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 7:52pm UTC](https://discuss.elastic.co/t/elasticsearch-portuguese-stemmer-inconsistency/266153 "2021-03-03T19:52:44Z")
Hi, recently I noticed an strange behavior by using the portuguese stemmers. First of all, I'm using light\_portuguese stemmer in production environment and have some problems stemming the word "comissões" (is equivalent … --- ## [Use var\_set in markdown and conditional coloring for markdown](https://discuss.elastic.co/t/use-var-set-in-markdown-and-conditional-coloring-for-markdown/266110)
**Author:** [@Mike\_Clarke](https://discuss.elastic.co/u/Mike_Clarke)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 7:59pm UTC](https://discuss.elastic.co/t/use-var-set-in-markdown-and-conditional-coloring-for-markdown/266110 "2021-03-03T19:59:21Z")
I am attempting to do the following: var\_set name="total" value={filters | timefilter column="createDate" from ={string "now-" {var "queryTimeframe"} "h"} to="now" | escount index"queries\*" query="source:test"} | var\_se… --- ## [Could not communicate with Checking API](https://discuss.elastic.co/t/could-not-communicate-with-checking-api/266132)
**Author:** [@dmitryyankowski](https://discuss.elastic.co/u/dmitryyankowski)\ **Replies:** 7\ **Last updated:** [March 3, 2021, 7:55pm UTC](https://discuss.elastic.co/t/could-not-communicate-with-checking-api/266132 "2021-03-03T19:55:31Z")
Hi guy's i'm setting up an elastic-agent on a Windows machine... and looking through the logs i'm seeing the following error: {"log.level":"error","@timestamp":"2021-03-03T09:41:49.593-0500","log.origin":{"file.name":"a… --- ## [Filebeat 7.6.2\_linux\_x86\_64 is not keeping up with the log entries added to .log files](https://discuss.elastic.co/t/filebeat-7-6-2-linux-x86-64-is-not-keeping-up-with-the-log-entries-added-to-log-files/266016)
**Author:** [@bjarvis](https://discuss.elastic.co/u/bjarvis)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 7:23pm UTC](https://discuss.elastic.co/t/filebeat-7-6-2-linux-x86-64-is-not-keeping-up-with-the-log-entries-added-to-log-files/266016 "2021-03-03T19:23:56Z")
My filebeat instance does send logs, but nowhere enough volume to keep up with the number of log entries that are being added to my log files. The log files grow very quickly, like 2.7-ish Gigabytes per 24 hours. Kafka… --- ## [Fleet 0.0.0.0 address after Elastic Agent install](https://discuss.elastic.co/t/fleet-0-0-0-0-address-after-elastic-agent-install/265698)
**Author:** [@Cosmin\_Ciobanu1](https://discuss.elastic.co/u/Cosmin_Ciobanu1)\ **Replies:** 4\ **Last updated:** [March 3, 2021, 7:46pm UTC](https://discuss.elastic.co/t/fleet-0-0-0-0-address-after-elastic-agent-install/265698 "2021-03-03T19:46:22Z")
Hi! I've installed Elastci Agent with 10.10.10.19 address for both Kibana and Elasticsearch. However, after is starts I get this error "fail to checkin to fleet: Post "https://0.0.0.0:5601/api/fleet/agents/ID/checkin?"… --- ## [Deprication logs dump WARN message even after setting deprication log level to ERROR](https://discuss.elastic.co/t/deprication-logs-dump-warn-message-even-after-setting-deprication-log-level-to-error/265879)
**Author:** [@abhinavk](https://discuss.elastic.co/u/abhinavk)\ **Replies:** 1\ **Last updated:** [March 3, 2021, 7:45pm UTC](https://discuss.elastic.co/t/deprication-logs-dump-warn-message-even-after-setting-deprication-log-level-to-error/265879 "2021-03-03T19:45:21Z")
Hi All We're running ES cluster (version6.8.6) with the following settings. PUT /\_cluster/settings { "persistent" : { "logger.\_root": "DEBUG", "logger.org.elasticsearch.deprecation": "ERROR" } } B… --- ## [Unable to parse correctly a filter as part of a custom URL when field values contain apostrophe characters](https://discuss.elastic.co/t/unable-to-parse-correctly-a-filter-as-part-of-a-custom-url-when-field-values-contain-apostrophe-characters/264789)
**Author:** [@Gerardo\_Marcotrigian](https://discuss.elastic.co/u/Gerardo_Marcotrigian)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 7:32pm UTC](https://discuss.elastic.co/t/unable-to-parse-correctly-a-filter-as-part-of-a-custom-url-when-field-values-contain-apostrophe-characters/264789 "2021-03-03T19:32:26Z")
Hi Everyone, I’m struggling to create a link (from a table visualization) to a drill-down dashboard using scripted fields with the URL format template. This is the following: s/my\_kibana\_space/app/kibana#/dashboard/c2d… [Previous page](https://discuss.elastic.co/latest.md?page=1802) [Next page](https://discuss.elastic.co/latest.md?page=1804)