# Latest **URL:** https://discuss.elastic.co/latest.md?page=1952 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1953 --- ## [Version mismatch between Elasticsearch and Logstash, beats](https://discuss.elastic.co/t/version-mismatch-between-elasticsearch-and-logstash-beats/257982)
**Author:** [@ksaha](https://discuss.elastic.co/u/ksaha)\ **Replies:** 4\ **Last updated:** [December 8, 2020, 1:53pm UTC](https://discuss.elastic.co/t/version-mismatch-between-elasticsearch-and-logstash-beats/257982 "2020-12-08T13:53:23Z")
Hi, We have AWS Elasticsearch service with version 7.4 We want to make it centralized Elasticsearch. We have one standalone ELK stack (version: 7.6.2) with filebeat, metricbeat configured. We are planning to point th… --- ## [Do I need a Gold license if I am using the Elastic Cloud Gold Subscription?](https://discuss.elastic.co/t/do-i-need-a-gold-license-if-i-am-using-the-elastic-cloud-gold-subscription/257998)
**Author:** [@kunalyadav](https://discuss.elastic.co/u/kunalyadav)\ **Replies:** 3\ **Last updated:** [December 8, 2020, 1:47pm UTC](https://discuss.elastic.co/t/do-i-need-a-gold-license-if-i-am-using-the-elastic-cloud-gold-subscription/257998 "2020-12-08T13:47:38Z")
Is it possible to run an ELK deployment on Elastic Cloud with the Gold subscription without having the Gold license? I have seen that for self-managed ELK we need to get the Gold license. Is that the same case with Ela… --- ## [Way to send dictionary file to multiple nodes in multiple server machines](https://discuss.elastic.co/t/way-to-send-dictionary-file-to-multiple-nodes-in-multiple-server-machines/257948)
**Author:** [@Dahea\_Moon](https://discuss.elastic.co/u/Dahea_Moon)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 1:38pm UTC](https://discuss.elastic.co/t/way-to-send-dictionary-file-to-multiple-nodes-in-multiple-server-machines/257948 "2020-12-08T13:38:00Z")
Hello, Elastic Team. I'm using one cluster with three nodes in two server machines. Is there any method to update user / synonym dictionary file at once? Unfortunately, machines cannot use shared folder. For now, we … --- ## [Elasticsearch query search sort return null](https://discuss.elastic.co/t/elasticsearch-query-search-sort-return-null/256064)
**Author:** [@magesh\_kumar](https://discuss.elastic.co/u/magesh_kumar)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 10:19am UTC](https://discuss.elastic.co/t/elasticsearch-query-search-sort-return-null/256064 "2020-12-08T10:19:25Z")
I'm recently upgrade elasticsearch to 7.9.3 version. All are good but sort not working in one of my index called user\_products. searched query curl -X GET "localhost:9200/user\_products/\_search?pretty" -H 'Content-Typ… --- ## [Communication between ruby and translate plugin in logstash filter](https://discuss.elastic.co/t/communication-between-ruby-and-translate-plugin-in-logstash-filter/257828)
**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\ **Replies:** 4\ **Last updated:** [December 8, 2020, 1:01pm UTC](https://discuss.elastic.co/t/communication-between-ruby-and-translate-plugin-in-logstash-filter/257828 "2020-12-08T13:01:00Z")
Hi all, Do you have any idea or example how in ruby plugin (in logstash filter) invoke translate plugin and then collect and use the translated data again in ruby plugin? Thank. Best regards --- ## [Logstash filter error "mapper \[@version\] cannot be changed from type \[keyword\] to \[text\]"](https://discuss.elastic.co/t/logstash-filter-error-mapper-version-cannot-be-changed-from-type-keyword-to-text/257409)
**Author:** [@rrcoudian](https://discuss.elastic.co/u/rrcoudian)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 12:05pm UTC](https://discuss.elastic.co/t/logstash-filter-error-mapper-version-cannot-be-changed-from-type-keyword-to-text/257409 "2020-12-08T12:05:48Z")
Greetings, and thank you in advance for your support! Could you please help us with the syntax of our ES 7.10 logstash.conf file to parse an application log file via filebeat that was tested on ES 6.6, but we are now us… --- ## [Adding body in elastic heartbeat configuration](https://discuss.elastic.co/t/adding-body-in-elastic-heartbeat-configuration/257958)
**Author:** [@amr\_ibrahim](https://discuss.elastic.co/u/amr_ibrahim)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 11:09am UTC](https://discuss.elastic.co/t/adding-body-in-elastic-heartbeat-configuration/257958 "2020-12-08T11:09:11Z")
Hello Kindly we need to add api to elastic heartbeat configuration and we need to pass post body json object in the configuration so how can we do that http://url-api { "GetFees": { "CRNumber": "5555555", "Transaction… --- ## [How often does logstash send data to google cloud storage?](https://discuss.elastic.co/t/how-often-does-logstash-send-data-to-google-cloud-storage/257973)
**Author:** [@iooi](https://discuss.elastic.co/u/iooi)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 11:06am UTC](https://discuss.elastic.co/t/how-often-does-logstash-send-data-to-google-cloud-storage/257973 "2020-12-08T11:06:03Z")
Config pipeline.yml output { stdout { codec =\> rubydebug } google\_cloud\_storage { bucket =\> "my\_nginx" json\_key\_file =\> "/my/secret/path/credentials.json" temp\_directory… --- ## [How to show last n records in ascending order in kibana dashboard](https://discuss.elastic.co/t/how-to-show-last-n-records-in-ascending-order-in-kibana-dashboard/257323)
**Author:** [@ajain16](https://discuss.elastic.co/u/ajain16)\ **Replies:** 7\ **Last updated:** [December 8, 2020, 10:49am UTC](https://discuss.elastic.co/t/how-to-show-last-n-records-in-ascending-order-in-kibana-dashboard/257323 "2020-12-08T10:49:22Z")
Hi All, We have data and time field in X axis and we are showing data on X axis from today to today+25 records. e.g 3Dec, 2 Dec, 1 Dec, 30 Nov, 29 Nov etc. We need to show total 25 data count in reverse order. e.g 25 … --- ## [Parse dotnet logs to filebeat](https://discuss.elastic.co/t/parse-dotnet-logs-to-filebeat/257968)
**Author:** [@walter.franssen](https://discuss.elastic.co/u/walter.franssen)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 10:32am UTC](https://discuss.elastic.co/t/parse-dotnet-logs-to-filebeat/257968 "2020-12-08T10:32:18Z")
Hi, We running dotnet applications in k8s and I see that the log from our dotnet application are parse on a single line instead adding more lines to one line of log. What is the best solution for getting multiply lines… --- ## [Machine Learning - Categorization status changed to warn](https://discuss.elastic.co/t/machine-learning-categorization-status-changed-to-warn/257841)
**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 10:27am UTC](https://discuss.elastic.co/t/machine-learning-categorization-status-changed-to-warn/257841 "2020-12-08T10:27:13Z")
Hi, I created a categorization ml job, and I get this message a lot: Categorization status changed to 'warn' for 'client\_event\_key' '\*\*\*\*' after 1186 buckets I quote the following from the documentation If the cate… --- ## [How to change my data to kv in Logstash](https://discuss.elastic.co/t/how-to-change-my-data-to-kv-in-logstash/257449)
**Author:** [@Mick1](https://discuss.elastic.co/u/Mick1)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 10:15am UTC](https://discuss.elastic.co/t/how-to-change-my-data-to-kv-in-logstash/257449 "2020-12-08T10:15:56Z")
The source data format cannot be changed First stroke： {value=12123, key=ABC2}, {value=2223, key=AB21C}, {value=1243, key=A4B1C}, {value=15223, key=AB35C}, {value=122123, key=A24BC}, {value=122213, key=AB33C}, {value=2… --- ## [Exisisting field doesn't show on Dashboard filters, but it does in discover and visualizations](https://discuss.elastic.co/t/exisisting-field-doesnt-show-on-dashboard-filters-but-it-does-in-discover-and-visualizations/257691)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 3\ **Last updated:** [December 8, 2020, 10:14am UTC](https://discuss.elastic.co/t/exisisting-field-doesnt-show-on-dashboard-filters-but-it-does-in-discover-and-visualizations/257691 "2020-12-08T10:14:55Z")
Hi a specific field doesn't show on the filter of the dashboards, but it exists and can be found in discovery and in the visualizations I have reloaded the index pattern, checked his existance through a month, but … --- ## [Improving search query time](https://discuss.elastic.co/t/improving-search-query-time/257880)
**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 8:39am UTC](https://discuss.elastic.co/t/improving-search-query-time/257880 "2020-12-08T08:39:19Z")
Hi, Setup: Elasticseach 6.3.0, 2 shards, 4 replicas on 5 dedicated data nodes. I have a 10,000,000 products feed index - each document represent a product and look like: { "id": 123, "active": true… --- ## [Kibana 7.10 Dashboard Drilldown - filter on fewer values in destination dashbaord)](https://discuss.elastic.co/t/kibana-7-10-dashboard-drilldown-filter-on-fewer-values-in-destination-dashbaord/257821)
**Author:** [@AndyH](https://discuss.elastic.co/u/AndyH)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 9:16am UTC](https://discuss.elastic.co/t/kibana-7-10-dashboard-drilldown-filter-on-fewer-values-in-destination-dashbaord/257821 "2020-12-08T09:16:21Z")
I've been playing with the new Create Drilldown feature available in Kibana 7.10 dashboards. On the parent dashboard I have a stacked horizontal bar chart: The y-axis (i.e. bar label) is a "Site Name" The x-axis (i.e.… --- ## [Elasticsearch take snapshot then clean indices which older than 7 days](https://discuss.elastic.co/t/elasticsearch-take-snapshot-then-clean-indices-which-older-than-7-days/257957)
**Author:** [@KA3AXCTAH](https://discuss.elastic.co/u/KA3AXCTAH)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 9:09am UTC](https://discuss.elastic.co/t/elasticsearch-take-snapshot-then-clean-indices-which-older-than-7-days/257957 "2020-12-08T09:09:15Z")
I have Elasticsearch 7.4.1 cluster for storing logs, and i have this SLM pattern applied in my cluster curl -X PUT "afghanistan-01.elastic:9200/\_slm/policy/nightly-snapshots?pretty" -H 'Content-Type: application/json' -… --- ## [Unbalanced disk usage ES 7.9.2](https://discuss.elastic.co/t/unbalanced-disk-usage-es-7-9-2/257955)
**Author:** [@111266](https://discuss.elastic.co/u/111266)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 8:53am UTC](https://discuss.elastic.co/t/unbalanced-disk-usage-es-7-9-2/257955 "2020-12-08T08:53:17Z")
Hello. Have cluster with 3 nodes and on each node the disk is busy in different ways: node1 - free space 955.8gb node3 - free space 1.9tb node2 - free space 581.9gb All nodes have 5tb disk space and equal resourc… --- ## [Failed to execute 'Download CSV'](https://discuss.elastic.co/t/failed-to-execute-download-csv/257603)
**Author:** [@t98907](https://discuss.elastic.co/u/t98907)\ **Replies:** 6\ **Last updated:** [December 8, 2020, 8:52am UTC](https://discuss.elastic.co/t/failed-to-execute-download-csv/257603 "2020-12-08T08:52:02Z")
Hi there, Kibana: 7.8.0 'Download CSV' failed even though I am logged in as 'elastic' user. Must '\_source' be enabled on the index to run 'Download CSV'? --- ## [Elastic search stack upgradation on Kubernetes](https://discuss.elastic.co/t/elastic-search-stack-upgradation-on-kubernetes/257952)
**Author:** [@anand\_kumar2](https://discuss.elastic.co/u/anand_kumar2)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 8:15am UTC](https://discuss.elastic.co/t/elastic-search-stack-upgradation-on-kubernetes/257952 "2020-12-08T08:15:49Z")
Dear Techies, I am planning to upgrade EFK stack to upgrade on Kubernetes, while reading the blogs before upgradation I get to know about EFK stack should be upgrade on same version. At present version we are running … --- ## [Elasticsearch unwanted lowercase when indexing](https://discuss.elastic.co/t/elasticsearch-unwanted-lowercase-when-indexing/257954)
**Author:** [@bogdan\_copocean](https://discuss.elastic.co/u/bogdan_copocean)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 8:42am UTC](https://discuss.elastic.co/t/elasticsearch-unwanted-lowercase-when-indexing/257954 "2020-12-08T08:42:02Z")
Hi there, I have an indexing problem with Elasticsearch. I have a field with the type "text" that makes its value lowercase. I'm using Hot-Warm-Architecture policy with index templates where I specify shard settings an… --- ## [ElasticSerach Not Working](https://discuss.elastic.co/t/elasticserach-not-working/257950)
**Author:** [@Shashank\_Tripathi](https://discuss.elastic.co/u/Shashank_Tripathi)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 8:36am UTC](https://discuss.elastic.co/t/elasticserach-not-working/257950 "2020-12-08T08:36:52Z")
running : /opt/elk/elasticsearch-7.10.0/bin/elasticsearch on RHEL Instance. I Have tried all possible ways to run elastic search on my RHEL instance but still i am not getting the desired result. when i hit elk server… --- ## [Span\_near fails to work as expected](https://discuss.elastic.co/t/span-near-fails-to-work-as-expected/257171)
**Author:** [@Kasper\_Kooijman](https://discuss.elastic.co/u/Kasper_Kooijman)\ **Replies:** 3\ **Last updated:** [December 8, 2020, 8:34am UTC](https://discuss.elastic.co/t/span-near-fails-to-work-as-expected/257171 "2020-12-08T08:34:57Z")
I have an Elasticsearch index structured as follows: Example entry: { 'ID': '1', 'creator': 'Sam', 'instance': 'court of cassation', 'text': \[ { 'depth': 0, 'role': 'introduction', 'caseText… --- ## [Dec 8th, 2020 \[RU\] Rank features для поиска в e-commerce](https://discuss.elastic.co/t/dec-8th-2020-ru-rank-features-e-commerce/256527)
**Author:** [@mayya](https://discuss.elastic.co/u/mayya)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-8th-2020-ru-rank-features-e-commerce/256527 "2020-12-08T08:00:01Z")
English version Современный поиск для электронной коммерции должен быть быстрым, релевантным и иметь возможность продвижения определенных результатов. Это статья расскажет как типы полей elasticsearch rank\_feature и ran… --- ## [Dec 8th, 2020 \[EN\] Rank features for e-commerce search](https://discuss.elastic.co/t/dec-8th-2020-en-rank-features-for-e-commerce-search/256525)
**Author:** [@mayya](https://discuss.elastic.co/u/mayya)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-8th-2020-en-rank-features-for-e-commerce-search/256525 "2020-12-08T08:00:01Z")
Русская версия Introduction Modern e-commerce search is expected to be fast, relevant and provide an opportunity for promoting certain results. This article demonstrates how rank\_feature and rank\_features field types of… --- ## [Elasticsearch Cluster - Difference is storage usage between nodes](https://discuss.elastic.co/t/elasticsearch-cluster-difference-is-storage-usage-between-nodes/257934)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 7\ **Last updated:** [December 8, 2020, 7:20am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-difference-is-storage-usage-between-nodes/257934 "2020-12-08T07:20:53Z")
Hi Im having 3 node cluster with / partition has 32 GB. ES data folder is /var/lib/elasticsearch which is below / partition. Before I run load testing, I had 8 Million records and "used storage" details is below node … --- ## [kafka.consumer.bytes.consumed.total=NaN causes Error sending data to APM server: Server returned HTTP response code: 400](https://discuss.elastic.co/t/kafka-consumer-bytes-consumed-total-nan-causes-error-sending-data-to-apm-server-server-returned-http-response-code-400/257544)
**Author:** [@antonro](https://discuss.elastic.co/u/antonro)\ **Replies:** 4\ **Last updated:** [December 7, 2020, 7:27pm UTC](https://discuss.elastic.co/t/kafka-consumer-bytes-consumed-total-nan-causes-error-sending-data-to-apm-server-server-returned-http-response-code-400/257544 "2020-12-07T19:27:23Z")
Hi, We started using Java APM agent and observe following errors in log files of our Java services with enabled agent. I see that some metrics are reported with NaN value which causes error with "expected number, but go… --- ## [Elastic ingest pipeline grok filter error](https://discuss.elastic.co/t/elastic-ingest-pipeline-grok-filter-error/257706)
**Author:** [@vsv0001](https://discuss.elastic.co/u/vsv0001)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 3:05am UTC](https://discuss.elastic.co/t/elastic-ingest-pipeline-grok-filter-error/257706 "2020-12-08T03:05:03Z")
hi, I am trying to to build an ingest pipeline using grok processor my grok filter works on the Kibana-\>console . grok filter ^%{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{TIME}.%{LOGLEVEL:log-level} : \\\[%{DATA:user}\] \\\[%{DATA:… --- ## [How to get index to refresh automatically, even when not receiving queries?](https://discuss.elastic.co/t/how-to-get-index-to-refresh-automatically-even-when-not-receiving-queries/257929)
**Author:** [@redec](https://discuss.elastic.co/u/redec)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 2:49am UTC](https://discuss.elastic.co/t/how-to-get-index-to-refresh-automatically-even-when-not-receiving-queries/257929 "2020-12-08T02:49:45Z")
Is there any way to get elasticsearch to automatically refresh an index even if it never gets any queries? The reason I need to do this is I have a process which is constantly running, updating my index with delta updat… --- ## [Is there a snapshot limit for your hosted solution?](https://discuss.elastic.co/t/is-there-a-snapshot-limit-for-your-hosted-solution/257925)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 2:00am UTC](https://discuss.elastic.co/t/is-there-a-snapshot-limit-for-your-hosted-solution/257925 "2020-12-08T02:00:54Z")
I have ES installed on your cloud enterprise service. Previously there was a snapshot tab that yo could choose how frequently to create snapshots (and there was a max limit of the total amount of snapshots you could have… --- ## [Error while starting logstash](https://discuss.elastic.co/t/error-while-starting-logstash/257895)
**Author:** [@Lipi\_Lapsiwala](https://discuss.elastic.co/u/Lipi_Lapsiwala)\ **Replies:** 6\ **Last updated:** [December 8, 2020, 1:32am UTC](https://discuss.elastic.co/t/error-while-starting-logstash/257895 "2020-12-08T01:32:56Z")
I am trying to integrate Elastic stack (Logstash, ElasticSearch and Kibana) with IBM websphere liberty profile. I have successfully created and configured server.xml file in wlp and able to start and access the server. I… [Previous page](https://discuss.elastic.co/latest.md?page=1951) [Next page](https://discuss.elastic.co/latest.md?page=1953)