# Latest **URL:** https://discuss.elastic.co/latest.md?page=1908 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1909 --- ## [“\[geo\_distance\] malformed query, expected \[END\_OBJECT\] but found \[FIELD\_NAME\]”](https://discuss.elastic.co/t/geo-distance-malformed-query-expected-end-object-but-found-field-name/260341)
**Author:** [@learn\_and\_try](https://discuss.elastic.co/u/learn_and_try)\ **Replies:** 1\ **Last updated:** [January 6, 2021, 1:28pm UTC](https://discuss.elastic.co/t/geo-distance-malformed-query-expected-end-object-but-found-field-name/260341 "2021-01-06T13:28:05Z")
I am tried to create search queary with a values in 15m radios and between 3 weeks. I tried to execute this query: \> "query": { \> "bool": { \> "must": { \> "match\_all": {} \> } \> , "filter": \[ \> { \> "geo… --- ## [Boolean parameters in token filters are stringified, breaking elasticsearch\_dsl analysis comparison](https://discuss.elastic.co/t/boolean-parameters-in-token-filters-are-stringified-breaking-elasticsearch-dsl-analysis-comparison/260342)
**Author:** [@LeoMcA](https://discuss.elastic.co/u/LeoMcA)\ **Replies:** 0\ **Last updated:** [January 6, 2021, 12:59pm UTC](https://discuss.elastic.co/t/boolean-parameters-in-token-filters-are-stringified-breaking-elasticsearch-dsl-analysis-comparison/260342 "2021-01-06T12:59:50Z")
Heya, I'm not sure if this is a bug with elastic itself or with the elasticsearch\_dsl python library, so posting here before filing an issue on github. If you set up a token filter with a boolean parameter, that paramet… --- ## [Automatic alerting on forcast (machine learning)](https://discuss.elastic.co/t/automatic-alerting-on-forcast-machine-learning/260248)
**Author:** [@Landry](https://discuss.elastic.co/u/Landry)\ **Replies:** 3\ **Last updated:** [January 6, 2021, 12:59pm UTC](https://discuss.elastic.co/t/automatic-alerting-on-forcast-machine-learning/260248 "2021-01-06T12:59:28Z")
Hello, How can we automate machine learning forcast execution in order to notify customers when some unusual events will occurs in the next days. We have a machine learning job that detect anomalies on our datas. Actua… --- ## [Encoded bytes are incorrect length issue](https://discuss.elastic.co/t/encoded-bytes-are-incorrect-length-issue/260228)
**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\ **Replies:** 2\ **Last updated:** [January 6, 2021, 10:01am UTC](https://discuss.elastic.co/t/encoded-bytes-are-incorrect-length-issue/260228 "2021-01-06T10:01:49Z")
Hi, my elasticsearch 7.7.1 sometimes returns encoded bytes are incorrect length error with 400. It's only sometimes, can you tell me the meaning? What can be couse of it? --- ## [So many variables in logstash filters](https://discuss.elastic.co/t/so-many-variables-in-logstash-filters/260325)
**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\ **Replies:** 0\ **Last updated:** [January 6, 2021, 10:35am UTC](https://discuss.elastic.co/t/so-many-variables-in-logstash-filters/260325 "2021-01-06T10:35:57Z")
Hi, I'm planning to convert to a new logstash config to remodel my indexing and i added an if/if else/else filter to logstash. Right now the cluster has around 85 active indices which roll daily. Almost half of it will b… --- ## [Enrichment file for threat feeds in logstash](https://discuss.elastic.co/t/enrichment-file-for-threat-feeds-in-logstash/260258)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 2\ **Last updated:** [January 6, 2021, 10:07am UTC](https://discuss.elastic.co/t/enrichment-file-for-threat-feeds-in-logstash/260258 "2021-01-06T10:07:36Z")
Hello, I'm sending threat feeds to elasticsearch from a linux machine. I created a patern feeds index in kibana. Logstash receives Fortinet logs continuously. I created a patern fortinet index in kibana. My goal is … --- ## [Negative epoch\_millis sometimes throw error while indexing](https://discuss.elastic.co/t/negative-epoch-millis-sometimes-throw-error-while-indexing/260239)
**Author:** [@JulienNemo](https://discuss.elastic.co/u/JulienNemo)\ **Replies:** 3\ **Last updated:** [January 6, 2021, 9:15am UTC](https://discuss.elastic.co/t/negative-epoch-millis-sometimes-throw-error-while-indexing/260239 "2021-01-06T09:15:43Z")
Hi, version: 7.10.1 Have a"dateOfBirth": { "type": "date" } field. I can't index the document with the dateOfBirth:-1555200000 error : “reason”:“date\_time\_exception: Invalid value for Year (vali… --- ## [S3 Repository Plugin - curl: (52) Empty reply from server](https://discuss.elastic.co/t/s3-repository-plugin-curl-52-empty-reply-from-server/259447)
**Author:** [@bigbansal](https://discuss.elastic.co/u/bigbansal)\ **Replies:** 5\ **Last updated:** [January 6, 2021, 8:34am UTC](https://discuss.elastic.co/t/s3-repository-plugin-curl-52-empty-reply-from-server/259447 "2021-01-06T08:34:59Z")
Hi All, I am struggling to put data node's data to S3 Bucket and getting empty response from server. can u please suggest what could be the reason ? --elasticsearch.yml has path.repo: $s3\_Bucket/$s3\_Prefix/docroot --… --- ## [Cross-field atleast functionality (return documents where a term has x occurrences)](https://discuss.elastic.co/t/cross-field-atleast-functionality-return-documents-where-a-term-has-x-occurrences/260294)
**Author:** [@Daantie](https://discuss.elastic.co/u/Daantie)\ **Replies:** 0\ **Last updated:** [January 6, 2021, 8:23am UTC](https://discuss.elastic.co/t/cross-field-atleast-functionality-return-documents-where-a-term-has-x-occurrences/260294 "2021-01-06T08:23:22Z")
Hello! I'm working for a client in the patent domain. We have a feature called atleast that returns all documents where a term has a minimum of x occurrences. In the past a plugin was written for this (also mentioned he… --- ## [Dec 16th, 2020: \[FR\] Monitorer les tâches et pipelines Tekton avec Elastic Observability](https://discuss.elastic.co/t/dec-16th-2020-fr-monitorer-les-taches-et-pipelines-tekton-avec-elastic-observability/258847)
**Author:** [@mgreau](https://discuss.elastic.co/u/mgreau)\ **Replies:** 0\ **Last updated:** [January 6, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-16th-2020-fr-monitorer-les-taches-et-pipelines-tekton-avec-elastic-observability/258847 "2021-01-06T08:00:04Z")
English Version Savez-vous que Elastic a delivre 21 releases en 2020? Chaque fois qu'une version est delivree, ce sont 500+ artifacts publiés dans multiplies emplacements publics (bucket, registres Docker, Maven Centra… --- ## [Initial\_master\_nodes case-sensitive to capitalized hostnames on Windows for v7.7.1](https://discuss.elastic.co/t/initial-master-nodes-case-sensitive-to-capitalized-hostnames-on-windows-for-v7-7-1/260264)
**Author:** [@cjcjameson](https://discuss.elastic.co/u/cjcjameson)\ **Replies:** 2\ **Last updated:** [January 6, 2021, 6:39am UTC](https://discuss.elastic.co/t/initial-master-nodes-case-sensitive-to-capitalized-hostnames-on-windows-for-v7-7-1/260264 "2021-01-06T06:39:36Z")
Hi there, We have a cluster on Windows where we're trying to launch Elasticsearch v7.7.1 . We are using cluster.initial\_master\_nodes , setting it to the host-names (we think). We are not setting node.name . We are being… --- ## [Elasticsearch Cardinality aggregation with condition](https://discuss.elastic.co/t/elasticsearch-cardinality-aggregation-with-condition/260275)
**Author:** [@rohitc.11](https://discuss.elastic.co/u/rohitc.11)\ **Replies:** 0\ **Last updated:** [January 6, 2021, 6:35am UTC](https://discuss.elastic.co/t/elasticsearch-cardinality-aggregation-with-condition/260275 "2021-01-06T06:35:04Z")
I want to do cardinality aggregation with condition. I want to count all the unique sellers whose sell sum should be greater than 100 for product list. Is there any way to do this using cardinality or anything else? I… --- ## [Kibana Granted document query for multiple filter](https://discuss.elastic.co/t/kibana-granted-document-query-for-multiple-filter/258607)
**Author:** [@anjali28](https://discuss.elastic.co/u/anjali28)\ **Replies:** 3\ **Last updated:** [January 6, 2021, 6:31am UTC](https://discuss.elastic.co/t/kibana-granted-document-query-for-multiple-filter/258607 "2021-01-06T06:31:25Z")
Hello, I have an requirement of creating a role which has limited permission of data in index privileges using granted document query. For example: User1 should be restricted when installation id: 1 and stageid:2 d ma… --- ## [Universal search across all Indices on Kibana?](https://discuss.elastic.co/t/universal-search-across-all-indices-on-kibana/260176)
**Author:** [@mohamed.farhan](https://discuss.elastic.co/u/mohamed.farhan)\ **Replies:** 2\ **Last updated:** [January 6, 2021, 4:59am UTC](https://discuss.elastic.co/t/universal-search-across-all-indices-on-kibana/260176 "2021-01-06T04:59:41Z")
Hello, I am trying to search/query to make sure I get the results regardless of indices. How can I do universal search ( across multiple indices ) in Kibana? Is it even possible? --- ## [Getting error while enabled tls](https://discuss.elastic.co/t/getting-error-while-enabled-tls/257525)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 14\ **Last updated:** [January 6, 2021, 4:22am UTC](https://discuss.elastic.co/t/getting-error-while-enabled-tls/257525 "2021-01-06T04:22:26Z")
Enabled tls certs in elasticsearch and kibana.Using custom certificates and passed the secrets in elasticsearch.yaml. Elasticsearch pods are running. But kibana pod is not in running state. Below are the kibana logs: {… --- ## [Elastic Endpoint not showing up error](https://discuss.elastic.co/t/elastic-endpoint-not-showing-up-error/259327)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 5\ **Last updated:** [January 6, 2021, 3:53am UTC](https://discuss.elastic.co/t/elastic-endpoint-not-showing-up-error/259327 "2021-01-06T03:53:06Z")
Hi all I have been trying out the elastic endpoint security since yesterday and i have been having some issue with it. So there are a few question i have to address in order to work this out: How to set the ssl to sen… --- ## [Question regarding ES distribution of incoming requests](https://discuss.elastic.co/t/question-regarding-es-distribution-of-incoming-requests/260268)
**Author:** [@Amlan\_Kumar\_Rath](https://discuss.elastic.co/u/Amlan_Kumar_Rath)\ **Replies:** 0\ **Last updated:** [January 6, 2021, 3:19am UTC](https://discuss.elastic.co/t/question-regarding-es-distribution-of-incoming-requests/260268 "2021-01-06T03:19:53Z")
I have a 3 node cluster with 6 indices of 1 shard each and 2 replicas, in short the full copy of an index on each node. Now I know that when I make a search call by calling a particular node of the cluster with a query, … --- ## [Elasticsearch complaining about Shard limit](https://discuss.elastic.co/t/elasticsearch-complaining-about-shard-limit/260266)
**Author:** [@SteveHodges](https://discuss.elastic.co/u/SteveHodges)\ **Replies:** 4\ **Last updated:** [January 6, 2021, 2:59am UTC](https://discuss.elastic.co/t/elasticsearch-complaining-about-shard-limit/260266 "2021-01-06T02:59:44Z")
I have had this problem every other month. I just go in and close the oldest 2 months of indexes. That has been solving the problem up until this week. Even though the Elasticsearch stats pages tells me that I only h… --- ## [\[ERROR\]\[logstash.config.sourceloader\] No configuration found in the configured sources](https://discuss.elastic.co/t/error-logstash-config-sourceloader-no-configuration-found-in-the-configured-sources/260238)
**Author:** [@aandrewsllp](https://discuss.elastic.co/u/aandrewsllp)\ **Replies:** 2\ **Last updated:** [January 6, 2021, 2:35am UTC](https://discuss.elastic.co/t/error-logstash-config-sourceloader-no-configuration-found-in-the-configured-sources/260238 "2021-01-06T02:35:34Z")
help me!!!! --- ## [Take input from elk index and need to send notification over email against invalid inputs](https://discuss.elastic.co/t/take-input-from-elk-index-and-need-to-send-notification-over-email-against-invalid-inputs/260223)
**Author:** [@Maahi\_Gupta](https://discuss.elastic.co/u/Maahi_Gupta)\ **Replies:** 3\ **Last updated:** [January 6, 2021, 2:25am UTC](https://discuss.elastic.co/t/take-input-from-elk-index-and-need-to-send-notification-over-email-against-invalid-inputs/260223 "2021-01-06T02:25:56Z")
Hi, I m a newbie in elk and i have been trying the below code from quite sometime. This is the configuration file i have input { elasticsearch { hosts =\> 'localhost' index =\> 'filebeat-\*' } } output… --- ## [Send a notification mail for invalid inputs made to the index (filebeat)](https://discuss.elastic.co/t/send-a-notification-mail-for-invalid-inputs-made-to-the-index-filebeat/260227)
**Author:** [@nottyheadedboss](https://discuss.elastic.co/u/nottyheadedboss)\ **Replies:** 1\ **Last updated:** [January 6, 2021, 2:22am UTC](https://discuss.elastic.co/t/send-a-notification-mail-for-invalid-inputs-made-to-the-index-filebeat/260227 "2021-01-06T02:22:58Z")
HI, I have been trying to work on the code to send an email to the support team for any invalid inputs such as (Invalid Credentials) into the system. A case being, when I try to use Putty and invalid credentials are ent… --- ## [Enrich Processor is slow on multi nodes](https://discuss.elastic.co/t/enrich-processor-is-slow-on-multi-nodes/260245)
**Author:** [@Mike\_Connor](https://discuss.elastic.co/u/Mike_Connor)\ **Replies:** 9\ **Last updated:** [January 6, 2021, 2:21am UTC](https://discuss.elastic.co/t/enrich-processor-is-slow-on-multi-nodes/260245 "2021-01-06T02:21:57Z")
Hello, I am helping with a project that is using an ingest pipeline, specifically the enrich processor. The enrich processor is pulling from a source index that is fairly small (300k records, ~25MB). The documents that … --- ## [Not all errors/exceptions are reported by the Java APM agent](https://discuss.elastic.co/t/not-all-errors-exceptions-are-reported-by-the-java-apm-agent/260157)
**Author:** [@bbking](https://discuss.elastic.co/u/bbking)\ **Replies:** 2\ **Last updated:** [January 6, 2021, 12:28am UTC](https://discuss.elastic.co/t/not-all-errors-exceptions-are-reported-by-the-java-apm-agent/260157 "2021-01-06T00:28:59Z")
I set up the apm Java agent with Tomcat server, but I notice there are some transactions(Http request) that return 5xx errors but they don't have exception stack traces(I couldn't find them in APM Errors by searching the… --- ## [Windows Perfmon (DHCP) Dashboard](https://discuss.elastic.co/t/windows-perfmon-dhcp-dashboard/260263)
**Author:** [@efaile](https://discuss.elastic.co/u/efaile)\ **Replies:** 0\ **Last updated:** [January 6, 2021, 12:26am UTC](https://discuss.elastic.co/t/windows-perfmon-dhcp-dashboard/260263 "2021-01-06T00:26:52Z")
I'm new to the Elastic Stack - forgive me if this is a "Captain Obvious" question. We want to monitor some key services such as DHCP Declines that can be indicative of trouble. I installed the metricbeat on our Windows… --- ## [Stopping Elastic Endpoint service](https://discuss.elastic.co/t/stopping-elastic-endpoint-service/260027)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 3\ **Last updated:** [January 6, 2021, 12:19am UTC](https://discuss.elastic.co/t/stopping-elastic-endpoint-service/260027 "2021-01-06T00:19:58Z")
Hello, While testing with Elastic Endpoint on my home Windows 10, I noticed I can stop the service with no issue at all. Service Name: ElasticEndpoint What would stop a bad actor from stopping the service? if I rememb… --- ## [How to make the changes in filebeat effective](https://discuss.elastic.co/t/how-to-make-the-changes-in-filebeat-effective/260143)
**Author:** [@aagarwal3](https://discuss.elastic.co/u/aagarwal3)\ **Replies:** 21\ **Last updated:** [January 5, 2021, 8:59pm UTC](https://discuss.elastic.co/t/how-to-make-the-changes-in-filebeat-effective/260143 "2021-01-05T20:59:17Z")
Hello all, I am trying to use the filebeat.yml file for the first time. Since, the logs are being logged in a different country and sometimes I see an abrupt jump in the logs visibility. It might be (not sure) because p… --- ## [Elasticsearch-py support for search after](https://discuss.elastic.co/t/elasticsearch-py-support-for-search-after/260222)
**Author:** [@zuanni](https://discuss.elastic.co/u/zuanni)\ **Replies:** 1\ **Last updated:** [January 5, 2021, 10:40pm UTC](https://discuss.elastic.co/t/elasticsearch-py-support-for-search-after/260222 "2021-01-05T22:40:20Z")
Hi All, First time here, I apologize in case I post in the wrong way or area. I'm searching news about the support for https://www.elastic.co/guide/en/elasticsearch/reference/current/paginate-search-results.html#search… --- ## [Unable to access field outside \_source in Painless ingest processor](https://discuss.elastic.co/t/unable-to-access-field-outside-source-in-painless-ingest-processor/260247)
**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\ **Replies:** 0\ **Last updated:** [January 5, 2021, 5:14pm UTC](https://discuss.elastic.co/t/unable-to-access-field-outside-source-in-painless-ingest-processor/260247 "2021-01-05T17:14:57Z")
Hi I can not figure out how to access a field that is outside the \_source. The grok processor with the field nested I can't access, or the rename processor too. Tried to access the data with ctx, \_source, \_index. Don't k… --- ## [Cannot do command to debug in logstash](https://discuss.elastic.co/t/cannot-do-command-to-debug-in-logstash/260259)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 0\ **Last updated:** [January 5, 2021, 9:39pm UTC](https://discuss.elastic.co/t/cannot-do-command-to-debug-in-logstash/260259 "2021-01-05T21:39:39Z")
I can no longer make the following command: tail -f /var/log/logstash/logstash-plain.log I checked in / var / log / logstash / logstash-plain.log file no longer exists How can I fix this problem? --- ## [Handling high task count on daily index rollover](https://discuss.elastic.co/t/handling-high-task-count-on-daily-index-rollover/260214)
**Author:** [@OranShuster](https://discuss.elastic.co/u/OranShuster)\ **Replies:** 3\ **Last updated:** [January 5, 2021, 9:21pm UTC](https://discuss.elastic.co/t/handling-high-task-count-on-daily-index-rollover/260214 "2021-01-05T21:21:19Z")
Some stats about the cluster Version 6.5.0 3 master nodes 12 hot data+ingest nodes 16 vCPU 32GB mem (16GB heap) each 12 warm data+ingest nodes 8 vCPU 32GB mem (16GB heap) each 1 ingest node (added recently for tes… [Previous page](https://discuss.elastic.co/latest.md?page=1907) [Next page](https://discuss.elastic.co/latest.md?page=1909)