# Latest **URL:** https://discuss.elastic.co/latest.md?page=1819 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1820 --- ## [XML Filter example](https://discuss.elastic.co/t/xml-filter-example/264698)
**Author:** [@Rabin\_Bhattacharya](https://discuss.elastic.co/u/Rabin_Bhattacharya)\ **Replies:** 4\ **Last updated:** [February 24, 2021, 1:20pm UTC](https://discuss.elastic.co/t/xml-filter-example/264698 "2021-02-24T13:20:23Z")
Hi, I have a requirement where in the a XML message is picked up from TIBCO EMS with the help of logstash and then is viewed in Kibana. I want to parse this message element individually for example conversationid,eventi… --- ## [ML - Datafeed is encountering errors extracting data: all shards failed](https://discuss.elastic.co/t/ml-datafeed-is-encountering-errors-extracting-data-all-shards-failed/264994)
**Author:** [@cezar996](https://discuss.elastic.co/u/cezar996)\ **Replies:** 23\ **Last updated:** [February 24, 2021, 12:59pm UTC](https://discuss.elastic.co/t/ml-datafeed-is-encountering-errors-extracting-data-all-shards-failed/264994 "2021-02-24T12:59:10Z")
Hi! I have created a ML job, but when I select Start Datafeed, I get this error: Datafeed is encountering errors extracting data: all shards failed, as in the image below. I really dont have any idea why I get this. … --- ## [Update data](https://discuss.elastic.co/t/update-data/265339)
**Author:** [@Liliana\_Novais](https://discuss.elastic.co/u/Liliana_Novais)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 12:56pm UTC](https://discuss.elastic.co/t/update-data/265339 "2021-02-24T12:56:41Z")
Hello, I am new in elastic search. I have a csv file that I want to upload to elastic search in order to use in kibana. The file is saved in my laptop and I want to update the data. I am not the administrator of the la… --- ## [Special character handlling in the alert message](https://discuss.elastic.co/t/special-character-handlling-in-the-alert-message/265285)
**Author:** [@Piyush\_Gandhi](https://discuss.elastic.co/u/Piyush_Gandhi)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 12:53pm UTC](https://discuss.elastic.co/t/special-character-handlling-in-the-alert-message/265285 "2021-02-24T12:53:35Z")
Hi, I would like to print the request made value in my alerting messaging, however, when I formed the alert message, I was getting the ASCII values in my alert message. Extraction query response: { "\_shards": { … --- ## [Query related logs that contain a keyword](https://discuss.elastic.co/t/query-related-logs-that-contain-a-keyword/264529)
**Author:** [@dandrejvv](https://discuss.elastic.co/u/dandrejvv)\ **Replies:** 6\ **Last updated:** [February 24, 2021, 12:44pm UTC](https://discuss.elastic.co/t/query-related-logs-that-contain-a-keyword/264529 "2021-02-24T12:44:14Z")
I have a need to query the logs in Elasticsearch through Kibana in a certain way that I will explain soon. I'll try my best to explain what I'm looking for and hopefully someone can tell me if it is possible via Kibana o… --- ## [Abandon/Cancel a transaction](https://discuss.elastic.co/t/abandon-cancel-a-transaction/263911)
**Author:** [@freeranger](https://discuss.elastic.co/u/freeranger)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 12:42pm UTC](https://discuss.elastic.co/t/abandon-cancel-a-transaction/263911 "2021-02-24T12:42:51Z")
Hi We are capturing metrics on queue throughput in one of our apps. There are often periods of no activity followed by periods of intense activity. In the quiet periods with nothing going on, we want to abandon the tr… --- ## [Failed to parse mapping \[\_doc\]: properties must be a map type](https://discuss.elastic.co/t/failed-to-parse-mapping-doc-properties-must-be-a-map-type/263103)
**Author:** [@coudenysj](https://discuss.elastic.co/u/coudenysj)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 12:35pm UTC](https://discuss.elastic.co/t/failed-to-parse-mapping-doc-properties-must-be-a-map-type/263103 "2021-02-24T12:35:56Z")
I'm trying to update the routing allocation of index templates, but with the new 7.10 release, I get strange errors. For the other version, I just GET the index template, alter the routing key, and PUT it back to the AP… --- ## [Can not restart logstash service after configured syslog.conf](https://discuss.elastic.co/t/can-not-restart-logstash-service-after-configured-syslog-conf/265335)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 12:03pm UTC](https://discuss.elastic.co/t/can-not-restart-logstash-service-after-configured-syslog-conf/265335 "2021-02-24T12:03:28Z")
I was able to install logstash on the ubuntu server. Then I configued the syslog.conf file to get the traffic to elasticsearch(installed in same server). Then tried to restart the logstash service, but unable to restar… --- ## [Rally: Errror: Cannot update teams in /root/.rally/benchmarks/teams/default](https://discuss.elastic.co/t/rally-errror-cannot-update-teams-in-root-rally-benchmarks-teams-default/265332)
**Author:** [@LuisSchaefer](https://discuss.elastic.co/u/LuisSchaefer)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 11:38am UTC](https://discuss.elastic.co/t/rally-errror-cannot-update-teams-in-root-rally-benchmarks-teams-default/265332 "2021-02-24T11:38:30Z")
Hi guys, I use Rally 1.4.1, RHEL 7.9, offline. I didnt't find any similiar topic so I hope somebody could help me. Thanks Input: esrally --distribution-version=7.10.2 --track-path=/root/.rally/benchmarks/tracks/defa… --- ## [How can i read logs event in logstash from siem system?](https://discuss.elastic.co/t/how-can-i-read-logs-event-in-logstash-from-siem-system/265151)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 11:20am UTC](https://discuss.elastic.co/t/how-can-i-read-logs-event-in-logstash-from-siem-system/265151 "2021-02-24T11:20:30Z")
How can i read logs from siem system in logstash? --- ## [Kibana Error](https://discuss.elastic.co/t/kibana-error/265243)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 10:32am UTC](https://discuss.elastic.co/t/kibana-error/265243 "2021-02-24T10:32:44Z")
Hello!!! please i have a follow Error in Kibana controls. i resolve it like but i have the same info.. how i can resolve it --- ## [org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin\]](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-java-lang-illegalstateexception-failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/265319)
**Author:** [@karthik\_m2](https://discuss.elastic.co/u/karthik_m2)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 10:31am UTC](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-java-lang-illegalstateexception-failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/265319 "2021-02-24T10:31:31Z")
Hello Team, We have recently upgraded oracle JAVA version to below java version "1.8.0\_281" Java(TM) SE Runtime Environment (build 1.8.0\_281-b09) Java HotSpot(TM) 64-Bit Server VM (build 25.281-b09, mixed mode) Afte… --- ## [Reverse geo distance search](https://discuss.elastic.co/t/reverse-geo-distance-search/263524)
**Author:** [@Fatih\_Kurnaz](https://discuss.elastic.co/u/Fatih_Kurnaz)\ **Replies:** 9\ **Last updated:** [February 24, 2021, 10:30am UTC](https://discuss.elastic.co/t/reverse-geo-distance-search/263524 "2021-02-24T10:30:34Z")
Hi everyone; There are 2 indices at my system. One of them is people and another one is houses. There is location criteria for each person at people indice like this. { "locationName": "london", "distance": 1,… --- ## [How to uninstall Logstash](https://discuss.elastic.co/t/how-to-uninstall-logstash/265280)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 10:20am UTC](https://discuss.elastic.co/t/how-to-uninstall-logstash/265280 "2021-02-24T10:20:10Z")
I want to know how to uninstall Logstash in the Ubuntu server? --- ## [How to configure elastic APM in c# web api .Net Framework?](https://discuss.elastic.co/t/how-to-configure-elastic-apm-in-c-web-api-net-framework/265314)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 10:16am UTC](https://discuss.elastic.co/t/how-to-configure-elastic-apm-in-c-web-api-net-framework/265314 "2021-02-24T10:16:27Z")
Hi All I want to setup elastic APM in c# web API .Net Framework 4.7. Can any help with the setup I couldn't found any resource related to .NET framework all are for ASp.Net core. --- ## [Heap usage of suggestor field](https://discuss.elastic.co/t/heap-usage-of-suggestor-field/265312)
**Author:** [@JF2018](https://discuss.elastic.co/u/JF2018)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 9:59am UTC](https://discuss.elastic.co/t/heap-usage-of-suggestor-field/265312 "2021-02-24T09:59:17Z")
Hi I am using Elastic Version "7.5.2". I would like to know how much of the heap, my completion suggestor field takes. The mapping is as this { "type": "completion", "pres… --- ## [How to specify names of different files in metricbeat.config.modules.path config option in metricbeat](https://discuss.elastic.co/t/how-to-specify-names-of-different-files-in-metricbeat-config-modules-path-config-option-in-metricbeat/265224)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 9:48am UTC](https://discuss.elastic.co/t/how-to-specify-names-of-different-files-in-metricbeat-config-modules-path-config-option-in-metricbeat/265224 "2021-02-24T09:48:13Z")
I want to specify different names of files separately in metricbeat.config.modules.path configuration. Actually, I have some yml files in a folders for each module but I want to reload only yml files of few modules. How … --- ## [How to make a field hold an array, and how to put values in there, and how to loop through an array?](https://discuss.elastic.co/t/how-to-make-a-field-hold-an-array-and-how-to-put-values-in-there-and-how-to-loop-through-an-array/265311)
**Author:** [@Khalil\_SLEIMI](https://discuss.elastic.co/u/Khalil_SLEIMI)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 9:46am UTC](https://discuss.elastic.co/t/how-to-make-a-field-hold-an-array-and-how-to-put-values-in-there-and-how-to-loop-through-an-array/265311 "2021-02-24T09:46:39Z")
Hi there, I'm new to the elk stack, and want some advice concerning how to manipulate json objects. long story short, I have a json that I extracted from an xml, and now, want to change the json of the output, that's why… --- ## [X-Pack Platinum License Update](https://discuss.elastic.co/t/x-pack-platinum-license-update/265296)
**Author:** [@abhabhishek](https://discuss.elastic.co/u/abhabhishek)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 9:32am UTC](https://discuss.elastic.co/t/x-pack-platinum-license-update/265296 "2021-02-24T09:32:45Z")
I am having elastic 6.2 on-prem platinum license which was issued to "abc" and now it is about to expire(will expire on 1March 2021) and hence we have purchased same license but for differe uid&issuesto- "xyz" once I go… --- ## [Filebeat Logstash Module](https://discuss.elastic.co/t/filebeat-logstash-module/265297)
**Author:** [@radu990](https://discuss.elastic.co/u/radu990)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 9:13am UTC](https://discuss.elastic.co/t/filebeat-logstash-module/265297 "2021-02-24T09:13:54Z")
Hi guys, I'm trying to add a log to Logstash module in Filebeat, but can't succeed. Can anybody please give me some hint what's wrong in my config? Example of Log Entry 2021-02-23T12:44:49.000Z,Warning,1 2021-02-23T1… --- ## [Is it possible to sort a field that contains a hexadecimal string?](https://discuss.elastic.co/t/is-it-possible-to-sort-a-field-that-contains-a-hexadecimal-string/265295)
**Author:** [@htang](https://discuss.elastic.co/u/htang)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 9:08am UTC](https://discuss.elastic.co/t/is-it-possible-to-sort-a-field-that-contains-a-hexadecimal-string/265295 "2021-02-24T09:08:46Z")
I have a mapping as keyword which contains a hexadecimal string like: 5f4b455cf6b841508fb1fa24 which is a 12 byte object. Is it possible to ask ES to sort on this field by value? I don't want lexicographic order. Fo… --- ## [Elastic Cloud OIDC error](https://discuss.elastic.co/t/elastic-cloud-oidc-error/265200)
**Author:** [@Basilis\_Ch](https://discuss.elastic.co/u/Basilis_Ch)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 8:43am UTC](https://discuss.elastic.co/t/elastic-cloud-oidc-error/265200 "2021-02-24T08:43:27Z")
Using ES 7.10 7.10.1 and 7.10.2 in different clusters, I received below errors applying known working configs with Azure AD realm exposed via OIDC. \[instance-0000000009\] Received Token Response from OP with status \[UN… --- ## [Index Pattern refresh](https://discuss.elastic.co/t/index-pattern-refresh/264760)
**Author:** [@UniverseX](https://discuss.elastic.co/u/UniverseX)\ **Replies:** 4\ **Last updated:** [February 24, 2021, 8:05am UTC](https://discuss.elastic.co/t/index-pattern-refresh/264760 "2021-02-24T08:05:36Z")
It seems that with 7.11 release the Index Pattern refresh functionality has been replaced. However, I can't find anything in the manual, it seems still to be the old one where Refresh button was on the page. Could someon… --- ## [Reindexing throughput degrades over time](https://discuss.elastic.co/t/reindexing-throughput-degrades-over-time/265279)
**Author:** [@htang](https://discuss.elastic.co/u/htang)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 7:54am UTC](https://discuss.elastic.co/t/reindexing-throughput-degrades-over-time/265279 "2021-02-24T07:54:14Z")
My reindex operation has slowed considerably over time - what can explain this trend of decrease in throughput? Please see attached. While reindexing is happening, the search latency has also gone up too. See attac… --- ## [Search through all document fields (nested and root document) in one multi match query](https://discuss.elastic.co/t/search-through-all-document-fields-nested-and-root-document-in-one-multi-match-query/265180)
**Author:** [@Nexonus](https://discuss.elastic.co/u/Nexonus)\ **Replies:** 3\ **Last updated:** [February 23, 2021, 3:21pm UTC](https://discuss.elastic.co/t/search-through-all-document-fields-nested-and-root-document-in-one-multi-match-query/265180 "2021-02-23T15:21:22Z")
Let's assume these basic documents as an example: { "name": "shirt", "description": "with stripes", "items": \[ { "color": "red", "size": "44" }, { "color": "blue", "size": "38" … --- ## [Kibana doesn\`t start](https://discuss.elastic.co/t/kibana-doesn-t-start/265206)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 7:34am UTC](https://discuss.elastic.co/t/kibana-doesn-t-start/265206 "2021-02-24T07:34:04Z")
Hi I want to run a Kibana in my cluster but faced with a problem and can not run it. When I use service kibana start or systemctl start kibana , it seems to be ok and kibana is running and also the port 5601 is listen… --- ## [Setup well know user / roles / credentials on cluster setup](https://discuss.elastic.co/t/setup-well-know-user-roles-credentials-on-cluster-setup/265218)
**Author:** [@Aiqu4poo](https://discuss.elastic.co/u/Aiqu4poo)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 7:23am UTC](https://discuss.elastic.co/t/setup-well-know-user-roles-credentials-on-cluster-setup/265218 "2021-02-24T07:23:18Z")
I set up a cluster by using Elastic Cloud on Kubernetes. I want t provide our predefined custom users / roles as well as predefined credentials for the elastic user. Setup the password for the elastic user by providing… --- ## [Is it good that memory usage is high like over 90%?](https://discuss.elastic.co/t/is-it-good-that-memory-usage-is-high-like-over-90/265144)
**Author:** [@CHU\_XU](https://discuss.elastic.co/u/CHU_XU)\ **Replies:** 5\ **Last updated:** [February 24, 2021, 6:10am UTC](https://discuss.elastic.co/t/is-it-good-that-memory-usage-is-high-like-over-90/265144 "2021-02-24T06:10:42Z")
Hi experts, I know that es node uses memory both for jvm and file cache. If I have an node with 50GB memory and set jvm using 25GB, is that expected when the total memory usage is high like 48GB and never go down? Will… --- ## [Setting up passwords with elasticsearch-setup-passwords interactive](https://discuss.elastic.co/t/setting-up-passwords-with-elasticsearch-setup-passwords-interactive/265208)
**Author:** [@Archie\_Crawford](https://discuss.elastic.co/u/Archie_Crawford)\ **Replies:** 4\ **Last updated:** [February 24, 2021, 6:04am UTC](https://discuss.elastic.co/t/setting-up-passwords-with-elasticsearch-setup-passwords-interactive/265208 "2021-02-24T06:04:28Z")
Im having an issue with enabling security on my cluster when Im trying to add the passwords to the bulit in users: I have 6 nodes atl-deves01.com atl-deves02.com atl-deves03.com met-deves01.com met-deves02.com met… --- ## [Suggestions for a better text based query - using match\_phrase but it's too precise](https://discuss.elastic.co/t/suggestions-for-a-better-text-based-query-using-match-phrase-but-its-too-precise/265138)
**Author:** [@M\_Gibbs](https://discuss.elastic.co/u/M_Gibbs)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 5:36am UTC](https://discuss.elastic.co/t/suggestions-for-a-better-text-based-query-using-match-phrase-but-its-too-precise/265138 "2021-02-24T05:36:24Z")
Hi there, My title probably doesn't elaborate that well. We have a significant dataset, where our end-users can search base don a job\_title. Currently I'm using: bool should match\_phrase We also include "minimum\_s… [Previous page](https://discuss.elastic.co/latest.md?page=1818) [Next page](https://discuss.elastic.co/latest.md?page=1820)