# Latest **URL:** https://discuss.elastic.co/latest.md?page=1814 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1815 --- ## [Index Mapping- Update API](https://discuss.elastic.co/t/index-mapping-update-api/265515)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 2\ **Last updated:** [February 26, 2021, 2:42am UTC](https://discuss.elastic.co/t/index-mapping-update-api/265515 "2021-02-26T02:42:32Z")
We found an error in our index mapping and have successfully fixed the issue- all future indices will have the correct mapping; however, we are now looking to go back and fix all the old indices that have the incorrect m… --- ## [Failed to start LSB, and Elasticsearch startup script does not exist or is not executable](https://discuss.elastic.co/t/failed-to-start-lsb-and-elasticsearch-startup-script-does-not-exist-or-is-not-executable/265351)
**Author:** [@PSandusky](https://discuss.elastic.co/u/PSandusky)\ **Replies:** 7\ **Last updated:** [February 26, 2021, 1:22am UTC](https://discuss.elastic.co/t/failed-to-start-lsb-and-elasticsearch-startup-script-does-not-exist-or-is-not-executable/265351 "2021-02-26T01:22:51Z")
I've been having a rough time getting Elasticsearch to start at all. On the most recent attempt, I got a response that the startup script did not exist or was not executable. When I pulled systemctl status and then journ… --- ## [Spanish stemming not working with 4 or less letter words](https://discuss.elastic.co/t/spanish-stemming-not-working-with-4-or-less-letter-words/265554)
**Author:** [@eperezf](https://discuss.elastic.co/u/eperezf)\ **Replies:** 0\ **Last updated:** [February 26, 2021, 12:11am UTC](https://discuss.elastic.co/t/spanish-stemming-not-working-with-4-or-less-letter-words/265554 "2021-02-26T00:11:59Z")
Hello! When trying to do stemming in spanish of 4 or less letter words, the stemming algorithm ignores them completely. For example, "roja" should return the following token "roj" due to the feminine/masculine form of … --- ## [Field's name](https://discuss.elastic.co/t/fields-name/265313)
**Author:** [@NourBM](https://discuss.elastic.co/u/NourBM)\ **Replies:** 10\ **Last updated:** [February 25, 2021, 11:47pm UTC](https://discuss.elastic.co/t/fields-name/265313 "2021-02-25T23:47:55Z")
Hi, i'm new with Kibana and Vega, I visualizated data that i entered manually and i noticed that when i enter a field name containing a dot (.) the visualization doesn't show up but when i remove the dot it works fine. … --- ## [TIme series based index strategy](https://discuss.elastic.co/t/time-series-based-index-strategy/265445)
**Author:** [@Kalpa](https://discuss.elastic.co/u/Kalpa)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 11:06pm UTC](https://discuss.elastic.co/t/time-series-based-index-strategy/265445 "2021-02-25T23:06:59Z")
Hi All, I was looking into Indexint Strategy for multitenancy, i see that 1) user based index with shared index and big customers isolated index strategy. 2) time series based. any thought on clubbiing time based inde… --- ## [If I want Q&A system, should I use Elasticsearch or IBM Watson Discovery?](https://discuss.elastic.co/t/if-i-want-q-a-system-should-i-use-elasticsearch-or-ibm-watson-discovery/265469)
**Author:** [@Cloud9Clone](https://discuss.elastic.co/u/Cloud9Clone)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 11:05pm UTC](https://discuss.elastic.co/t/if-i-want-q-a-system-should-i-use-elasticsearch-or-ibm-watson-discovery/265469 "2021-02-25T23:05:23Z")
Hello everyone, I am new to the elasticsearch and as such I would like to ask you for your meaning. In front of me stays a project where I save Q&A pairs in a database and then when a question is asked I would like to r… --- ## [Running Elasticsearch on Eclipse OpenJ9 JVM](https://discuss.elastic.co/t/running-elasticsearch-on-eclipse-openj9-jvm/265523)
**Author:** [@Naoshad\_Mehta](https://discuss.elastic.co/u/Naoshad_Mehta)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 11:03pm UTC](https://discuss.elastic.co/t/running-elasticsearch-on-eclipse-openj9-jvm/265523 "2021-02-25T23:03:58Z")
We have been using Elasticsearch with AdoptJDK11 + Eclipse OpenJ9 JVM and it has worked well for the most part. We have lately been seeing some weird issues related to Garbage Collection and so were wondering why Elastic… --- ## [Does not match the certificate subject provided by the peer](https://discuss.elastic.co/t/does-not-match-the-certificate-subject-provided-by-the-peer/265484)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 3\ **Last updated:** [February 25, 2021, 10:57pm UTC](https://discuss.elastic.co/t/does-not-match-the-certificate-subject-provided-by-the-peer/265484 "2021-02-25T22:57:35Z")
Host name 'localhost' does not match the certificate subject provided by the peer (CN=elasticsearch) How can I deal with it? Can I just verify certificate? I don't want hardcode any IP etc. In /etc/logstash/logstash.ym… --- ## [Filtering for certain Hostname in Lens](https://discuss.elastic.co/t/filtering-for-certain-hostname-in-lens/265478)
**Author:** [@quixter](https://discuss.elastic.co/u/quixter)\ **Replies:** 5\ **Last updated:** [February 25, 2021, 10:57pm UTC](https://discuss.elastic.co/t/filtering-for-certain-hostname-in-lens/265478 "2021-02-25T22:57:10Z")
Been trying to figure out something that I thought would be simple but yet I can't seem to get it to work. I'm working on a lens with y axis is cpu percentage and x axis is host.name. I need it to only return a group of… --- ## [Aggregate sum wrong with huge datasets](https://discuss.elastic.co/t/aggregate-sum-wrong-with-huge-datasets/265549)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 10:05pm UTC](https://discuss.elastic.co/t/aggregate-sum-wrong-with-huge-datasets/265549 "2021-02-25T22:05:20Z")
Hi all and sorry for my poor english. Hi have data like that: { "\_index": "statistic", "\_type": "\_doc", "\_id": "df5d295f-99bf-49b3-b640-a9000461de3a", "\_score": 1.0, "\_source":{ "\_class": "com.x.dsp.elasticssearc… --- ## [HTTP input plugin customize response-header](https://discuss.elastic.co/t/http-input-plugin-customize-response-header/265547)
**Author:** [@stemons](https://discuss.elastic.co/u/stemons)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 9:54pm UTC](https://discuss.elastic.co/t/http-input-plugin-customize-response-header/265547 "2021-02-25T21:54:02Z")
Hello! I'm working with logstash and the http input plugin. I've a datasource that send a data stream to logstash and require as response header content-type =\> application/json. I'm using the following configuration, bu… --- ## [Logstash on EKS and AWS elastic - 401 auth errors](https://discuss.elastic.co/t/logstash-on-eks-and-aws-elastic-401-auth-errors/265507)
**Author:** [@kyleh31](https://discuss.elastic.co/u/kyleh31)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 9:29pm UTC](https://discuss.elastic.co/t/logstash-on-eks-and-aws-elastic-401-auth-errors/265507 "2021-02-25T21:29:35Z")
Hi we are getting 401 auth errors as of mid January. We have reached out to AWS support team and they were unable to help. We have had logstash running in production environment for ~6 months, but when we went to update … --- ## [ECS Tooling to HttpTriggered Azure Function](https://discuss.elastic.co/t/ecs-tooling-to-httptriggered-azure-function/265544)
**Author:** [@mxu](https://discuss.elastic.co/u/mxu)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 9:13pm UTC](https://discuss.elastic.co/t/ecs-tooling-to-httptriggered-azure-function/265544 "2021-02-25T21:13:44Z")
Hi, we have been using ECS Tooling to generate index templates with custom schemas. We plan to have that as HttpTriggered Azure Function which takes in custom schema in the request and generates template dynamically. … --- ## [Pre-filtering for \_termvectors API to get statistics on a subset of documents](https://discuss.elastic.co/t/pre-filtering-for-termvectors-api-to-get-statistics-on-a-subset-of-documents/265540)
**Author:** [@bbaronas](https://discuss.elastic.co/u/bbaronas)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 8:42pm UTC](https://discuss.elastic.co/t/pre-filtering-for-termvectors-api-to-get-statistics-on-a-subset-of-documents/265540 "2021-02-25T20:42:33Z")
Is there a way to pre-filter documents for the \_termvector API to get statistics limited to a subset of the documents in an index? I would like to use the term vector API to look at tf/idf, etc. for items in my index, b… --- ## [Search for \* in data](https://discuss.elastic.co/t/search-for-in-data/265413)
**Author:** [@jfromm](https://discuss.elastic.co/u/jfromm)\ **Replies:** 3\ **Last updated:** [February 25, 2021, 8:43pm UTC](https://discuss.elastic.co/t/search-for-in-data/265413 "2021-02-25T20:43:20Z")
I have an application where in dictated results, the string "\*\*\*" is put in to indicate that a dictated word can not be understood. I have a text field containing the output of the dictation, and when I look at the stri… --- ## [Can I upgrade my kibana node thats running 7.6.1 to 7.11 without upgrading my elasticsearch and logstash nodes which are running 7.6.1?](https://discuss.elastic.co/t/can-i-upgrade-my-kibana-node-thats-running-7-6-1-to-7-11-without-upgrading-my-elasticsearch-and-logstash-nodes-which-are-running-7-6-1/265538)
**Author:** [@deep9300](https://discuss.elastic.co/u/deep9300)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 8:24pm UTC](https://discuss.elastic.co/t/can-i-upgrade-my-kibana-node-thats-running-7-6-1-to-7-11-without-upgrading-my-elasticsearch-and-logstash-nodes-which-are-running-7-6-1/265538 "2021-02-25T20:24:34Z")
I have a 5 node ELK cluster. I have kibana 7.6.1 running on a single node. Elasticsearch 7.6.1 on 3 other nodes. Logstash 7.6.1 on the last node. Can I upgrade kibana without upgrading elasticsearch and logstash to 7.11… --- ## [For the same data with date format search works in Elasticsearch 6.x.But, it do not work on 7.x](https://discuss.elastic.co/t/for-the-same-data-with-date-format-search-works-in-elasticsearch-6-x-but-it-do-not-work-on-7-x/265536)
**Author:** [@Bharath\_Italapur](https://discuss.elastic.co/u/Bharath_Italapur)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 8:12pm UTC](https://discuss.elastic.co/t/for-the-same-data-with-date-format-search-works-in-elasticsearch-6-x-but-it-do-not-work-on-7-x/265536 "2021-02-25T20:12:53Z")
Hi, The search with timestamp is not working for the 12-hour date format on 7.X . Please help me understand or fix the issue posted below. Thank you for the help. ------- This is the date format we are using. PUT test … --- ## [Where did the field refresh icon go in 7.11?](https://discuss.elastic.co/t/where-did-the-field-refresh-icon-go-in-7-11/265532)
**Author:** [@rmoff](https://discuss.elastic.co/u/rmoff)\ **Replies:** 3\ **Last updated:** [February 25, 2021, 8:15pm UTC](https://discuss.elastic.co/t/where-did-the-field-refresh-icon-go-in-7-11/265532 "2021-02-25T20:15:02Z")
In 7.11 I don't see a button to refresh the fields in my index pattern any more. It used to be up there in the top-right with the delete icon, but no longer. Has it been removed by design, and if so, how do I refresh… --- ## [Save Objects API often results in 503 Timeout](https://discuss.elastic.co/t/save-objects-api-often-results-in-503-timeout/265123)
**Author:** [@gdoctor](https://discuss.elastic.co/u/gdoctor)\ **Replies:** 8\ **Last updated:** [February 25, 2021, 7:33pm UTC](https://discuss.elastic.co/t/save-objects-api-often-results-in-503-timeout/265123 "2021-02-25T19:33:02Z")
Elasticsearch version: 7.10.0 Kibana version: 7.10.0 All POST API calls to the endpoint https://kibana-our-host.cisco.com/api/saved\_objects/query/Example%20Query result in the following 503 Error, no matter the conten… --- ## [Add deep nesting support](https://discuss.elastic.co/t/add-deep-nesting-support/265499)
**Author:** [@Lautaro](https://discuss.elastic.co/u/Lautaro)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 7:31pm UTC](https://discuss.elastic.co/t/add-deep-nesting-support/265499 "2021-02-25T19:31:17Z")
Hi, It would be great to add support for deep nesting. My app needs that modelling (and flat fields are not suitable for all the fields). For some fields that can not be flattened I have to query my API to get some fie… --- ## [Filebeat dynamic indices name](https://discuss.elastic.co/t/filebeat-dynamic-indices-name/265363)
**Author:** [@Alex\_Doe](https://discuss.elastic.co/u/Alex_Doe)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 7:30pm UTC](https://discuss.elastic.co/t/filebeat-dynamic-indices-name/265363 "2021-02-25T19:30:08Z")
Good day. I would like to configure dynamic naming for indices. My filebeat instance is writing data to logastash which is writing to elasticsearch. My configuration is looking like that: output.logstash: hosts: - el… --- ## [Using variable in timefilter](https://discuss.elastic.co/t/using-variable-in-timefilter/265528)
**Author:** [@Mike\_Clarke](https://discuss.elastic.co/u/Mike_Clarke)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 7:24pm UTC](https://discuss.elastic.co/t/using-variable-in-timefilter/265528 "2021-02-25T19:24:22Z")
I am attempting to use a variable defined in the workpad in the timefilter but I can't seem to figure it out. timefilter column="dates.createDate" from="now-{var \\"query\_timeframe\\"}h" to="now" Use of the variable does … --- ## [Logstash warning](https://discuss.elastic.co/t/logstash-warning/265416)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 7:12pm UTC](https://discuss.elastic.co/t/logstash-warning/265416 "2021-02-25T19:12:47Z")
I am have metricbeat running on few systems. and getting this error message on and off. can't put my fingure on about which event is generating this error. is there a way to find out? Basically metricbeat is running f… --- ## [Conundrum with repositories](https://discuss.elastic.co/t/conundrum-with-repositories/265247)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 5\ **Last updated:** [February 25, 2021, 6:08pm UTC](https://discuss.elastic.co/t/conundrum-with-repositories/265247 "2021-02-25T18:08:15Z")
when I query my repositories using the API I get a list of the repositories as expected: http://localhost:9200/\_snapshot/\*?pretty { "version6" : { "type" : "fs", "settings" : { "location" : "/data/elast… --- ## [Parse Json Logs using logstash](https://discuss.elastic.co/t/parse-json-logs-using-logstash/265517)
**Author:** [@Yashkumar\_Dabhi](https://discuss.elastic.co/u/Yashkumar_Dabhi)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 5:36pm UTC](https://discuss.elastic.co/t/parse-json-logs-using-logstash/265517 "2021-02-25T17:36:03Z")
Hi, I'm trying to parse logs in logstash, My logs are in Json, {"timestamp":"2021-02-25T15:20:38.490Z","logLevel":"INFO","serviceName":"xxx","transactionId":"0000-0000-000","elapsedTime":820,"endTime":"","url":"","statu… --- ## [How to setup elasticsearch warm node](https://discuss.elastic.co/t/how-to-setup-elasticsearch-warm-node/264805)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 5:30pm UTC](https://discuss.elastic.co/t/how-to-setup-elasticsearch-warm-node/264805 "2021-02-25T17:30:37Z")
I have 8 node elasticsearch cluster (3 Master+3Hot data node+2Warm data node).At beginning all the indices like metricbeat and system indices were on hot node and warm node after sometime i ran the following query. PUT… --- ## [ILM policy trigerring late](https://discuss.elastic.co/t/ilm-policy-trigerring-late/265436)
**Author:** [@maheshe](https://discuss.elastic.co/u/maheshe)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 5:27pm UTC](https://discuss.elastic.co/t/ilm-policy-trigerring-late/265436 "2021-02-25T17:27:19Z")
Hi : I am trying to dev test the ILM template by specifying the below... The rollover happens after a few minutes and after it reaches like 750KB instead of 10 KB as mentioned in ILM. Why is it not rolling over as soon… --- ## [All Rules are showing Failed](https://discuss.elastic.co/t/all-rules-are-showing-failed/264318)
**Author:** [@emmett.carey](https://discuss.elastic.co/u/emmett.carey)\ **Replies:** 28\ **Last updated:** [February 25, 2021, 5:16pm UTC](https://discuss.elastic.co/t/all-rules-are-showing-failed/264318 "2021-02-25T17:16:15Z")
Hi, I've recently set up Elastic Search and Kibana 7.11 and enrolled a VM via Fleet and Agent. In the process I set up a Policy and Assigned some detection rules as well as added the Security Endpoint Integration as we… --- ## [Visualization shard errors](https://discuss.elastic.co/t/visualization-shard-errors/265258)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 4\ **Last updated:** [February 25, 2021, 4:46pm UTC](https://discuss.elastic.co/t/visualization-shard-errors/265258 "2021-02-25T16:46:28Z")
We originally had "Shard errors: X of Y shards failed- your data may not be complete" We corrected our scripted field and now when we search data from the Discovery tab those errors are no longer present. (we had to te… --- ## [Sequentially execute filter plugins on listed file inputs](https://discuss.elastic.co/t/sequentially-execute-filter-plugins-on-listed-file-inputs/265496)
**Author:** [@pratz](https://discuss.elastic.co/u/pratz)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 4:22pm UTC](https://discuss.elastic.co/t/sequentially-execute-filter-plugins-on-listed-file-inputs/265496 "2021-02-25T16:22:48Z")
I have two files that I input in logstash using the file plugin Is there a way that the first file is parsed first? input { file { path =\> "abc.txt" type =\> "first" } file { path =\> … [Previous page](https://discuss.elastic.co/latest.md?page=1813) [Next page](https://discuss.elastic.co/latest.md?page=1815)