# Latest **URL:** https://discuss.elastic.co/latest.md?page=1866 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1867 --- ## [Absolute beginner in elasticsearch](https://discuss.elastic.co/t/absolute-beginner-in-elasticsearch/262763)
**Author:** [@Werner](https://discuss.elastic.co/u/Werner)\ **Replies:** 6\ **Last updated:** [January 31, 2021, 11:36pm UTC](https://discuss.elastic.co/t/absolute-beginner-in-elasticsearch/262763 "2021-01-31T23:36:43Z")
Hallo ! :slight\_smile: I am an absolute beginner in elasticsearch and after some hours of reading and watching tutorial-videos I got the impression, that it needs a lot of knowledge and preparation, before I can make a … --- ## [Location type geo\_point](https://discuss.elastic.co/t/location-type-geo-point/262059)
**Author:** [@Elves\_Ribeiro](https://discuss.elastic.co/u/Elves_Ribeiro)\ **Replies:** 2\ **Last updated:** [January 31, 2021, 10:48pm UTC](https://discuss.elastic.co/t/location-type-geo-point/262059 "2021-01-31T22:48:12Z")
Hi, I am trying to create a map on my environment, but I am not able to create the field location type geo\_point. I am using version 7.10.2 My logstash conf geoip { source =\> "ip\_client" } mutate { add\_field =\> … --- ## [Showing document fields as tooltips](https://discuss.elastic.co/t/showing-document-fields-as-tooltips/262760)
**Author:** [@stexxen](https://discuss.elastic.co/u/stexxen)\ **Replies:** 3\ **Last updated:** [January 31, 2021, 8:07pm UTC](https://discuss.elastic.co/t/showing-document-fields-as-tooltips/262760 "2021-01-31T20:07:11Z")
I'm missing something obvious here, I know I am, but I have struggled to find an answer. I have a small index of 20 documents in ES 7.10.2 with a GeoPoint in the top level, with other fields stored as objects and nested… --- ## [Remapping an index](https://discuss.elastic.co/t/remapping-an-index/262400)
**Author:** [@DavidoffX](https://discuss.elastic.co/u/DavidoffX)\ **Replies:** 2\ **Last updated:** [January 31, 2021, 7:38pm UTC](https://discuss.elastic.co/t/remapping-an-index/262400 "2021-01-31T19:38:43Z")
I've followed is guide in an attempt to apply a new (reduced) mapping to an existing index : I realise that this is a very old blog post. The "atomic" step which is said to re-index , doesn't seem to index any documen… --- ## [Help with reducing mapping](https://discuss.elastic.co/t/help-with-reducing-mapping/262394)
**Author:** [@DavidoffX](https://discuss.elastic.co/u/DavidoffX)\ **Replies:** 9\ **Last updated:** [January 31, 2021, 7:36pm UTC](https://discuss.elastic.co/t/help-with-reducing-mapping/262394 "2021-01-31T19:36:35Z")
Hi All. I'm new to the ELK stack, and am hoping I'm not trying to re-invent the wheel. Steep learning curve at the moment and am just after some help and guidance really. I'm using FileBeat to send logs out from our Ku… --- ## [Dynamic mapping setting not honoured](https://discuss.elastic.co/t/dynamic-mapping-setting-not-honoured/262551)
**Author:** [@DavidoffX](https://discuss.elastic.co/u/DavidoffX)\ **Replies:** 1\ **Last updated:** [January 31, 2021, 7:32pm UTC](https://discuss.elastic.co/t/dynamic-mapping-setting-not-honoured/262551 "2021-01-31T19:32:24Z")
If I create new index with a mapping definition eg. { "mappings": { "dynamic": "false", "properties": { ...} } } and then send data to it with fields that aren't included in the mapping, they ar… --- ## [GPG Key](https://discuss.elastic.co/t/gpg-key/261891)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 3\ **Last updated:** [January 31, 2021, 6:52pm UTC](https://discuss.elastic.co/t/gpg-key/261891 "2021-01-31T18:52:29Z")
hi guys, i wanna ask something about installation elastic and beats, because they need GPG-key and my server can't access public internet. how can i add a GPG Key manually? thanks --- ## [Elasticsearch configuration in a shared server/node](https://discuss.elastic.co/t/elasticsearch-configuration-in-a-shared-server-node/262729)
**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\ **Replies:** 1\ **Last updated:** [January 31, 2021, 5:32pm UTC](https://discuss.elastic.co/t/elasticsearch-configuration-in-a-shared-server-node/262729 "2021-01-31T17:32:45Z")
I do know it's better to have separate server for each job, but I have a shared server between Elasticsearch and MySQL, with a total 8 Gig RAM. we should avoid swapping in Elasticsearch, so I set bootstrap.memory\_lock: … --- ## [Multiple values match query in Update by query](https://discuss.elastic.co/t/multiple-values-match-query-in-update-by-query/262757)
**Author:** [@sarvendras](https://discuss.elastic.co/u/sarvendras)\ **Replies:** 1\ **Last updated:** [January 31, 2021, 5:16pm UTC](https://discuss.elastic.co/t/multiple-values-match-query-in-update-by-query/262757 "2021-01-31T17:16:30Z")
Hi All, I have to update one field based on match of multiple values of a field.I want to update field amt as 9000 based on query of multiple values of RRN but multiple values are not supported and giving error. Is the… --- ## [Monitoring/tasks consistently running task](https://discuss.elastic.co/t/monitoring-tasks-consistently-running-task/262754)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 1\ **Last updated:** [January 31, 2021, 4:25pm UTC](https://discuss.elastic.co/t/monitoring-tasks-consistently-running-task/262754 "2021-01-31T16:25:19Z")
Can anyone explain these lines in the cat/tasks? should we be worried about them? --- ## [Creating new user in Kibana, login fine but unable to view logs](https://discuss.elastic.co/t/creating-new-user-in-kibana-login-fine-but-unable-to-view-logs/262747)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 4\ **Last updated:** [January 31, 2021, 2:03pm UTC](https://discuss.elastic.co/t/creating-new-user-in-kibana-login-fine-but-unable-to-view-logs/262747 "2021-01-31T14:03:21Z")
Hello all i created new use in kibana with kibana\_admin,kibana\_system rules but when i login to kibana with the new user, I cant view the logs which i can view with the default user of kibana . i can see all the filt… --- ## [I want to except results on a specific date from elastic aggregation](https://discuss.elastic.co/t/i-want-to-except-results-on-a-specific-date-from-elastic-aggregation/262741)
**Author:** [@e997cd7e8d9915436150](https://discuss.elastic.co/u/e997cd7e8d9915436150)\ **Replies:** 0\ **Last updated:** [January 31, 2021, 7:58am UTC](https://discuss.elastic.co/t/i-want-to-except-results-on-a-specific-date-from-elastic-aggregation/262741 "2021-01-31T07:58:42Z")
This is my query that returns results on 19th Oct. GET apachelog/\_search { "size": 0, "aggs": { "NAME": { "terms": { "field": "ext.keyword", "size": 10 } } }, "query": { … --- ## [Advice for a beginner](https://discuss.elastic.co/t/advice-for-a-beginner/262749)
**Author:** [@Shivansh\_Mishra](https://discuss.elastic.co/u/Shivansh_Mishra)\ **Replies:** 1\ **Last updated:** [January 31, 2021, 11:59am UTC](https://discuss.elastic.co/t/advice-for-a-beginner/262749 "2021-01-31T11:59:41Z")
Hi all, I am trying to learn java and want to know about how the enterprise code works so I was thinking of contributing to elastic search so that I can get some mentorship. I am well versed in c# and I wanted to know … --- ## [Protect the enterprise search login page](https://discuss.elastic.co/t/protect-the-enterprise-search-login-page/262319)
**Author:** [@tonytsangln](https://discuss.elastic.co/u/tonytsangln)\ **Replies:** 6\ **Last updated:** [January 31, 2021, 9:28am UTC](https://discuss.elastic.co/t/protect-the-enterprise-search-login-page/262319 "2021-01-31T09:28:16Z")
Hi all, I am currently setting up the enterprise search free version in my server, I would like to ask is there any way can help to protect the login page? E.g only limit some IP can access the /login path. Thank you, … --- ## [How to create a custom field formatter plugin in 7.9.x?](https://discuss.elastic.co/t/how-to-create-a-custom-field-formatter-plugin-in-7-9-x/262093)
**Author:** [@nrt.krishna](https://discuss.elastic.co/u/nrt.krishna)\ **Replies:** 2\ **Last updated:** [January 31, 2021, 6:06am UTC](https://discuss.elastic.co/t/how-to-create-a-custom-field-formatter-plugin-in-7-9-x/262093 "2021-01-31T06:06:49Z")
Could somebody provide me an example how to create a plugin for custom field formatters? I had one for 6.x but since the architecture of the plugins changed in 7.9.x I am looking for some help to register my plugin wher… --- ## [Cloud deployment constantly going unhealthy](https://discuss.elastic.co/t/cloud-deployment-constantly-going-unhealthy/262423)
**Author:** [@Supernovasports](https://discuss.elastic.co/u/Supernovasports)\ **Replies:** 17\ **Last updated:** [January 30, 2021, 8:59pm UTC](https://discuss.elastic.co/t/cloud-deployment-constantly-going-unhealthy/262423 "2021-01-30T20:59:35Z")
Hi everyone, I have a deployment which today went unhealthy and after a full restart it works for a few minutes and then goes unhealthy again. From what I can see I haven't filled my storage capacity and I haven't increa… --- ## [Elasticsearch Node Roles Abbreviation](https://discuss.elastic.co/t/elasticsearch-node-roles-abbreviation/262724)
**Author:** [@vishakh](https://discuss.elastic.co/u/vishakh)\ **Replies:** 1\ **Last updated:** [January 30, 2021, 7:46pm UTC](https://discuss.elastic.co/t/elasticsearch-node-roles-abbreviation/262724 "2021-01-30T19:46:03Z")
Currently, I'm running ELK-Stack: 7.10 cluster On my cluster-nodes, I see "cdhilmrstw" as node roles Can anyone please explain/denote what these individual node abbreviations stands for? --- ## [Heap 50% of 30GB no docs yet](https://discuss.elastic.co/t/heap-50-of-30gb-no-docs-yet/261938)
**Author:** [@chrislinx](https://discuss.elastic.co/u/chrislinx)\ **Replies:** 4\ **Last updated:** [January 30, 2021, 6:51pm UTC](https://discuss.elastic.co/t/heap-50-of-30gb-no-docs-yet/261938 "2021-01-30T18:51:00Z")
3 physical Elasticsearch nodes in a cluster. Each node 8 core 64gb ram ubuntu svr 20.04 lts with 2TB M2 storage. 30gb Heap. 600 shards, 1 replica. I will eventually index 10TB on this cluster so 20GB per shard ~12TB. M… --- ## [Elasticsearch fails to start on ubuntu 20.04](https://discuss.elastic.co/t/elasticsearch-fails-to-start-on-ubuntu-20-04/262684)
**Author:** [@josephthejoe](https://discuss.elastic.co/u/josephthejoe)\ **Replies:** 6\ **Last updated:** [January 30, 2021, 6:28pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-on-ubuntu-20-04/262684 "2021-01-30T18:28:58Z")
There seems to be a lot of these types of posts ive gone through a ton of them and havent been able to find one spitting out similar errors to what I have. No logs just the output from systemctl status. lab@siem:~$ syst… --- ## [Suricata - ELK stack](https://discuss.elastic.co/t/suricata-elk-stack/262715)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 3\ **Last updated:** [January 30, 2021, 6:26pm UTC](https://discuss.elastic.co/t/suricata-elk-stack/262715 "2021-01-30T18:26:17Z")
Hi! I need to implement a IDS solution. I already have suriata running on a powerful physical serve, but i need to have the ELK stack on a different machine. Do you guys recommend any minimum system requirements for th… --- ## [How to get only one field from elasticsearch in the output](https://discuss.elastic.co/t/how-to-get-only-one-field-from-elasticsearch-in-the-output/261379)
**Author:** [@devil\_hacks](https://discuss.elastic.co/u/devil_hacks)\ **Replies:** 2\ **Last updated:** [January 30, 2021, 6:18pm UTC](https://discuss.elastic.co/t/how-to-get-only-one-field-from-elasticsearch-in-the-output/261379 "2021-01-30T18:18:41Z")
I am having my log data pushed into elasticssearch looks like given below: { "took": 5, "timed\_out": false, "\_shards": { "total": 1, "successful": 1, "skipped": 0, "failed": 0 }… --- ## [Unable to search nested object with correct format](https://discuss.elastic.co/t/unable-to-search-nested-object-with-correct-format/262615)
**Author:** [@ycbencheng](https://discuss.elastic.co/u/ycbencheng)\ **Replies:** 1\ **Last updated:** [January 30, 2021, 5:39pm UTC](https://discuss.elastic.co/t/unable-to-search-nested-object-with-correct-format/262615 "2021-01-30T17:39:46Z")
Hi ELK community, I'm unable to get the nested prospects obj within the vehicle index. Here is the suppose index obj - { "\_index" : "vehicles", "\_type" : "\_doc", "\_id" : "3MZBxxxxxxx", … --- ## [Text '24/07/2018 11:04' could not be parsed at index 0](https://discuss.elastic.co/t/text-24-07-2018-11-04-could-not-be-parsed-at-index-0/262597)
**Author:** [@yash\_watwani](https://discuss.elastic.co/u/yash_watwani)\ **Replies:** 1\ **Last updated:** [January 30, 2021, 5:31pm UTC](https://discuss.elastic.co/t/text-24-07-2018-11-04-could-not-be-parsed-at-index-0/262597 "2021-01-30T17:31:26Z")
My row kinda look like this Opened\_Date 25/07/2017 16:01 02/11/2017 13:49 06/11/2017 20:36 09/11/2017 18:46 13/11/2017 13:51 22/11/2017 08:26 22/11/2017 09:16 24/11/2017 09:31 I am trying to run this query SELECT DATE… --- ## [Vega: Handle a situation where data-set returned is empty](https://discuss.elastic.co/t/vega-handle-a-situation-where-data-set-returned-is-empty/262210)
**Author:** [@ege](https://discuss.elastic.co/u/ege)\ **Replies:** 14\ **Last updated:** [January 30, 2021, 3:10pm UTC](https://discuss.elastic.co/t/vega-handle-a-situation-where-data-set-returned-is-empty/262210 "2021-01-30T15:10:06Z")
When querying for data, there are situations where the returned data-set is empty for certain time ranges. Such a situation occurred in Vega (returned an empty array) and I tried to create a condition using expressions t… --- ## [Code location pointer](https://discuss.elastic.co/t/code-location-pointer/262688)
**Author:** [@mbenitez](https://discuss.elastic.co/u/mbenitez)\ **Replies:** 2\ **Last updated:** [January 30, 2021, 2:34pm UTC](https://discuss.elastic.co/t/code-location-pointer/262688 "2021-01-30T14:34:35Z")
Hello, I was wondering if someone here in the community could help me with some code location pointers. I am working on a project, and as part of the project I am looking at the Elasticsearch source code. I am interest… --- ## [How do i get the message field?](https://discuss.elastic.co/t/how-do-i-get-the-message-field/262711)
**Author:** [@walid\_lakehal](https://discuss.elastic.co/u/walid_lakehal)\ **Replies:** 4\ **Last updated:** [January 30, 2021, 2:05pm UTC](https://discuss.elastic.co/t/how-do-i-get-the-message-field/262711 "2021-01-30T14:05:37Z")
Hello , i am trying to get the "message" field to use it in a web site dashboard , in this example it's just the result of an ls command --- ## [Metricbeat/mysql module data not showing](https://discuss.elastic.co/t/metricbeat-mysql-module-data-not-showing/262648)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 2\ **Last updated:** [January 30, 2021, 1:15pm UTC](https://discuss.elastic.co/t/metricbeat-mysql-module-data-not-showing/262648 "2021-01-30T13:15:32Z")
I have the mysql module enabled on a number of mysql hosts. I see this appearing in the logs: "metricbeat":{"mysql":{"status":{"events":7,"success":7}}} When I go to kibana and search for mysql I don't see any values i… --- ## [Theoretical IMPORTANT questions about architecture of elasticsearch](https://discuss.elastic.co/t/theoretical-important-questions-about-architecture-of-elasticsearch/262596)
**Author:** [@111433](https://discuss.elastic.co/u/111433)\ **Replies:** 6\ **Last updated:** [January 30, 2021, 9:47am UTC](https://discuss.elastic.co/t/theoretical-important-questions-about-architecture-of-elasticsearch/262596 "2021-01-30T09:47:06Z")
Hello, we are developing a searching engine with elasticsearch and already have 3 nodes on dedicated servers for each. We almost have read the documentation, but faced to a couple of problems. about our servers: we ha… --- ## [Cat allocation disk.indices higher than disk.used or disk.total](https://discuss.elastic.co/t/cat-allocation-disk-indices-higher-than-disk-used-or-disk-total/262709)
**Author:** [@LJRamsey](https://discuss.elastic.co/u/LJRamsey)\ **Replies:** 0\ **Last updated:** [January 30, 2021, 9:24am UTC](https://discuss.elastic.co/t/cat-allocation-disk-indices-higher-than-disk-used-or-disk-total/262709 "2021-01-30T09:24:01Z")
Hello, We have a cluster that was upgraded priori this week from version 5.6.16 to version 6.8.13 and upgrade succeeded and everything was running as expected. One day later one of the data node reached disk watermark … --- ## [Where in kibana i can analyze logs coming from logstash , logs that are off line](https://discuss.elastic.co/t/where-in-kibana-i-can-analyze-logs-coming-from-logstash-logs-that-are-off-line/262705)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 2\ **Last updated:** [January 30, 2021, 9:11am UTC](https://discuss.elastic.co/t/where-in-kibana-i-can-analyze-logs-coming-from-logstash-logs-that-are-off-line/262705 "2021-01-30T09:11:12Z")
Hello all i have elastic search which have 2 modes or 2 streams of logs first is the filebeat real-time logs which i can analyze in the kibana logs section. The second is online logs that are uploaded to s3 and they a… [Previous page](https://discuss.elastic.co/latest.md?page=1865) [Next page](https://discuss.elastic.co/latest.md?page=1867)