# Latest **URL:** https://discuss.elastic.co/latest.md?page=1986 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1987 --- ## [JSON data won't upload](https://discuss.elastic.co/t/json-data-wont-upload/256041)
**Author:** [@codewriterguy](https://discuss.elastic.co/u/codewriterguy)\ **Replies:** 3\ **Last updated:** [November 20, 2020, 3:00pm UTC](https://discuss.elastic.co/t/json-data-wont-upload/256041 "2020-11-20T15:00:42Z")
Hi, First time user here so apologies if I'm not doing things correctly. I am trying to upload a JSON file, which consists of an array of JSON elements, the longest being \< 3100 characters. For whatever reason, the Data… --- ## [Scripted field for same month data](https://discuss.elastic.co/t/scripted-field-for-same-month-data/256121)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 3\ **Last updated:** [November 20, 2020, 2:57pm UTC](https://discuss.elastic.co/t/scripted-field-for-same-month-data/256121 "2020-11-20T14:57:34Z")
Hi All, We are trying to build a dashboard for a new scenario,like we are ingesting data from servicenow using logstash, the data has ticket information like opened and closed, we want to build a dashboard for monthly… --- ## [Kibana search appearing as json object?](https://discuss.elastic.co/t/kibana-search-appearing-as-json-object/255289)
**Author:** [@sandeep1-0](https://discuss.elastic.co/u/sandeep1-0)\ **Replies:** 4\ **Last updated:** [November 20, 2020, 2:48pm UTC](https://discuss.elastic.co/t/kibana-search-appearing-as-json-object/255289 "2020-11-20T14:48:30Z")
Hi, I have metricbeat data indexing to kibana but the same is appearing as json object object instead of showing it as different field. Is this due to some template issue or missed any setting. Currently coming in the … --- ## [Replicas allocation issue in a hot cold architecture](https://discuss.elastic.co/t/replicas-allocation-issue-in-a-hot-cold-architecture/255953)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 6\ **Last updated:** [November 20, 2020, 2:45pm UTC](https://discuss.elastic.co/t/replicas-allocation-issue-in-a-hot-cold-architecture/255953 "2020-11-20T14:45:29Z")
Hello ! I have the following cluster : node1 with attributes box\_type: hot and zone: zone1 node2 with attributes box\_type: hot and zone: zone1 node3 with attributes box\_type: hot and zone: zone2 node4 with attributes b… --- ## [Grok filter not working](https://discuss.elastic.co/t/grok-filter-not-working/256077)
**Author:** [@Ajinkya\_1](https://discuss.elastic.co/u/Ajinkya_1)\ **Replies:** 1\ **Last updated:** [November 20, 2020, 2:20pm UTC](https://discuss.elastic.co/t/grok-filter-not-working/256077 "2020-11-20T14:20:55Z")
My Grok filter is not working in logstash Even though it is working in grok debugger below is the grok string: \\((?\%{DAY} %{MONTH} %{MONTHNUM} %{TIME} %{YEAR})\\) \\\[(?\(.\*))\\\] \\\[%{DATA:function}\\\] \\(%… --- ## [How can I create the visualization of filling a glass regarding margins and the current value](https://discuss.elastic.co/t/how-can-i-create-the-visualization-of-filling-a-glass-regarding-margins-and-the-current-value/255701)
**Author:** [@borisllona](https://discuss.elastic.co/u/borisllona)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 1:48pm UTC](https://discuss.elastic.co/t/how-can-i-create-the-visualization-of-filling-a-glass-regarding-margins-and-the-current-value/255701 "2020-11-20T13:48:16Z")
I need to create the visualization of filling a glass regarding margins with the current value, but I can't find any tutorial on how to do that. --- ## [How to create a field that indicates value gain (for example temperature) compared to yesterday](https://discuss.elastic.co/t/how-to-create-a-field-that-indicates-value-gain-for-example-temperature-compared-to-yesterday/255699)
**Author:** [@borisllona](https://discuss.elastic.co/u/borisllona)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 1:47pm UTC](https://discuss.elastic.co/t/how-to-create-a-field-that-indicates-value-gain-for-example-temperature-compared-to-yesterday/255699 "2020-11-20T13:47:47Z")
So I need a text that could say, Today is +3°C more than yesterday. Thanks in advance --- ## [Matching multiple phrases to specific fields in Nest](https://discuss.elastic.co/t/matching-multiple-phrases-to-specific-fields-in-nest/256124)
**Author:** [@adiksl](https://discuss.elastic.co/u/adiksl)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 1:47pm UTC](https://discuss.elastic.co/t/matching-multiple-phrases-to-specific-fields-in-nest/256124 "2020-11-20T13:47:19Z")
I have built an application in C# which searches my Elasticsearch documents and this all works fine using this code.... List\ resultsList = Client.SearchAsync\(s =\> s .From(0) .Take(noRows) … --- ## [No cached mapping for this field after upgrading to 7.10](https://discuss.elastic.co/t/no-cached-mapping-for-this-field-after-upgrading-to-7-10/256123)
**Author:** [@datawrangler](https://discuss.elastic.co/u/datawrangler)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 1:29pm UTC](https://discuss.elastic.co/t/no-cached-mapping-for-this-field-after-upgrading-to-7-10/256123 "2020-11-20T13:29:35Z")
Hello all, I had some issues when upgrading to 7.9.3 that I had to upgrade to 7.10 and unfortunately I had to delete my "filebeat-\*" index pattern. After recreating the filebeat-\* index pattern, I am now unable to upda… --- ## [How can rename logstash fields](https://discuss.elastic.co/t/how-can-rename-logstash-fields/254867)
**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\ **Replies:** 6\ **Last updated:** [November 20, 2020, 1:17pm UTC](https://discuss.elastic.co/t/how-can-rename-logstash-fields/254867 "2020-11-20T13:17:26Z")
rename fields: Thanks --- ## [Rollup Fail: Existing mapping for field must be of type object](https://discuss.elastic.co/t/rollup-fail-existing-mapping-for-field-must-be-of-type-object/256122)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 1:13pm UTC](https://discuss.elastic.co/t/rollup-fail-existing-mapping-for-field-must-be-of-type-object/256122 "2020-11-20T13:13:00Z")
Our rollup job will not run and we are getting the following error log: \[991\]: index \[issues-prod1\], type \[\_doc\], id \[issues-prod1$ONEl7qIplbk6ayAuSYbUkA\], message \[MapperParsingException\[Could not dynamically add mappi… --- ## [Master not discovered or elected yet, an election requires 2 nodes with ids](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-2-nodes-with-ids/256116)
**Author:** [@xziten](https://discuss.elastic.co/u/xziten)\ **Replies:** 1\ **Last updated:** [November 20, 2020, 12:42pm UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-2-nodes-with-ids/256116 "2020-11-20T12:42:00Z")
Hi, I'm trying to setup an elasticsearch Cluster. I know that this is a common topic but I would like to understand what I'm doing wrong. Here are some informations : OS : RHEL 7.8 ES Version : 7.10 Nodes : 3 Mast… --- ## [Logstash with mongo input adding a default "document" field onto ElasticSearch Output index](https://discuss.elastic.co/t/logstash-with-mongo-input-adding-a-default-document-field-onto-elasticsearch-output-index/256120)
**Author:** [@MDuarte](https://discuss.elastic.co/u/MDuarte)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 12:23pm UTC](https://discuss.elastic.co/t/logstash-with-mongo-input-adding-a-default-document-field-onto-elasticsearch-output-index/256120 "2020-11-20T12:23:47Z")
Hi there, I'm new to ELK stack. Although, I've done quite some extensive research and wasn't able to find the answer to my current problem, so I was hoping someone could help me. I've been trying to ingest documents fr… --- ## [Get more UserInfos after Openid Login](https://discuss.elastic.co/t/get-more-userinfos-after-openid-login/256079)
**Author:** [@thetell75](https://discuss.elastic.co/u/thetell75)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 12:15pm UTC](https://discuss.elastic.co/t/get-more-userinfos-after-openid-login/256079 "2020-11-20T12:15:19Z")
Hi folks, I just implemented the OpenID Login with AZURE Login. I also added Claims for personal informatione about the user logging in, like Family\_Name, Given\_Name and Email. But after Login I just do see that I am l… --- ## [Aggregation bucket in Vega returns an object not a bucket](https://discuss.elastic.co/t/aggregation-bucket-in-vega-returns-an-object-not-a-bucket/255906)
**Author:** [@Maria20](https://discuss.elastic.co/u/Maria20)\ **Replies:** 4\ **Last updated:** [November 20, 2020, 12:01pm UTC](https://discuss.elastic.co/t/aggregation-bucket-in-vega-returns-an-object-not-a-bucket/255906 "2020-11-20T12:01:33Z")
Hi, I am following a tutorial on Vega visualization on Kibana. The tutorial is similar to draw a graph of bars using aggregation. I followed the steps mentioned in this thread. However, my graph is not displayed, when I… --- ## [Unexpected exception \[\_license\] error](https://discuss.elastic.co/t/unexpected-exception-license-error/256106)
**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\ **Replies:** 1\ **Last updated:** [November 20, 2020, 11:49am UTC](https://discuss.elastic.co/t/unexpected-exception-license-error/256106 "2020-11-20T11:49:29Z")
Hello, everyone! We have strange error in our elasticsearch log: \[2020-11-20T15:41:59,294\]\[ERROR\]\[c.a.o.s.f.OpenDistroSecurityFilter\] \[\\] Unexpected exception \[\_license\] InvalidIndexNameException\[Invalid index… --- ## [APM - distirubted tracing in microservice-architectures](https://discuss.elastic.co/t/apm-distirubted-tracing-in-microservice-architectures/255970)
**Author:** [@ChristianB](https://discuss.elastic.co/u/ChristianB)\ **Replies:** 3\ **Last updated:** [November 20, 2020, 11:47am UTC](https://discuss.elastic.co/t/apm-distirubted-tracing-in-microservice-architectures/255970 "2020-11-20T11:47:09Z")
Hello everyone. I really like APM and what you can do with it, but in my opinion there is something missing when it comes to distributed tracing in a microservices architeture. This is due to the fact, that traces are n… --- ## [Multiple logs to different index - Filebeat](https://discuss.elastic.co/t/multiple-logs-to-different-index-filebeat/256003)
**Author:** [@Charakterny](https://discuss.elastic.co/u/Charakterny)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 9:09am UTC](https://discuss.elastic.co/t/multiple-logs-to-different-index-filebeat/256003 "2020-11-20T09:09:38Z")
Hello, I have in one filebeat.yml two paths for two different logs and it works fine but I need to divide to two index. I tried as below: filebeat.inputs: - type: log enabled: true paths: - /var/log/nginx/\*.lo… --- ## [Why metricbeat is not picking up keystore entries?](https://discuss.elastic.co/t/why-metricbeat-is-not-picking-up-keystore-entries/256011)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 11:19am UTC](https://discuss.elastic.co/t/why-metricbeat-is-not-picking-up-keystore-entries/256011 "2020-11-20T11:19:10Z")
Hi, I am using elastic stack 7.9. I have a 3 node cluster and https is I have created certificates using elasticsearch-certutil command, which are generic, and I am using it across all nodes. I have the below files; e… --- ## [How to show fields value on Data table Columns?](https://discuss.elastic.co/t/how-to-show-fields-value-on-data-table-columns/255964)
**Author:** [@rmrodrigues](https://discuss.elastic.co/u/rmrodrigues)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 11:11am UTC](https://discuss.elastic.co/t/how-to-show-fields-value-on-data-table-columns/255964 "2020-11-20T11:11:05Z")
Hi there, I'm a newbie here on Elastic. Just to give you some context about my journey here, I'm trying elastic to build a business analytics system. I have an index where the document is something like this: { … --- ## [Execute Cosine Similarity inside script\_score function if field is present in the document](https://discuss.elastic.co/t/execute-cosine-similarity-inside-script-score-function-if-field-is-present-in-the-document/253006)
**Author:** [@SatyaAditya](https://discuss.elastic.co/u/SatyaAditya)\ **Replies:** 3\ **Last updated:** [November 20, 2020, 10:56am UTC](https://discuss.elastic.co/t/execute-cosine-similarity-inside-script-score-function-if-field-is-present-in-the-document/253006 "2020-11-20T10:56:10Z")
I am trying to use cosine similarity in script\_score function. The query is breaking when the dense vector field is missing in the document against which I am trying to measure similarity is missing. I spent a lot of ti… --- ## [How to change the display name of elastic field in kibana dashboard?](https://discuss.elastic.co/t/how-to-change-the-display-name-of-elastic-field-in-kibana-dashboard/254380)
**Author:** [@ramashish](https://discuss.elastic.co/u/ramashish)\ **Replies:** 3\ **Last updated:** [November 20, 2020, 10:56am UTC](https://discuss.elastic.co/t/how-to-change-the-display-name-of-elastic-field-in-kibana-dashboard/254380 "2020-11-20T10:56:06Z")
We are facing the following two issues in Kibana(v7.6) while creating a dashboard: How to change the display name of field in kibana. Usually in elastic search we have created fields like docketNo,bookingDate,actualWe… --- ## [Unable to start Elastic search when i delete jar from lang-mustache and place it in lib](https://discuss.elastic.co/t/unable-to-start-elastic-search-when-i-delete-jar-from-lang-mustache-and-place-it-in-lib/256090)
**Author:** [@rakeshdkaatkar](https://discuss.elastic.co/u/rakeshdkaatkar)\ **Replies:** 3\ **Last updated:** [November 20, 2020, 9:06am UTC](https://discuss.elastic.co/t/unable-to-start-elastic-search-when-i-delete-jar-from-lang-mustache-and-place-it-in-lib/256090 "2020-11-20T09:06:21Z")
Im getting below error java.lang.IllegalStateException: Plugin \[lang-mustache\] must reference a class loader local Plugin class \[org.elasticsearch.script.mustache.MustachePlugin\] (class loader \[sun.misc.Launcher$AppClas… --- ## [Managing "is\_write\_index"](https://discuss.elastic.co/t/managing-is-write-index/256089)
**Author:** [@koos](https://discuss.elastic.co/u/koos)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 8:50am UTC](https://discuss.elastic.co/t/managing-is-write-index/256089 "2020-11-20T08:50:38Z")
Hi there, We've created a Lambda function (python) in order to steam logs from AWS CloudWatch to our ELK stack. I'm also making use of life cycle policies to rotate the index on a specific size and delete after the spe… --- ## [Find documents which is older then specified date range based on list of ids](https://discuss.elastic.co/t/find-documents-which-is-older-then-specified-date-range-based-on-list-of-ids/255843)
**Author:** [@sibasish.palo](https://discuss.elastic.co/u/sibasish.palo)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 8:23am UTC](https://discuss.elastic.co/t/find-documents-which-is-older-then-specified-date-range-based-on-list-of-ids/255843 "2020-11-20T08:23:13Z")
After searching for sometime and seeing some answer not able to quite figure out the query for my requirement My requirement is i have a list of document ids, what i need to find is the documents which are older than a … --- ## [Index status Open but in Delete phase](https://discuss.elastic.co/t/index-status-open-but-in-delete-phase/256043)
**Author:** [@PhilA](https://discuss.elastic.co/u/PhilA)\ **Replies:** 4\ **Last updated:** [November 20, 2020, 8:14am UTC](https://discuss.elastic.co/t/index-status-open-but-in-delete-phase/256043 "2020-11-20T08:14:46Z")
Hi I have recently been working on a new data source for Threat Intel data to make use of the Indicator Match detection. My plan was to ingest the TI data in to an index and then roll that index over every 12hrs in to … --- ## [Add \_routing via document not query string](https://discuss.elastic.co/t/add-routing-via-document-not-query-string/255458)
**Author:** [@pcb](https://discuss.elastic.co/u/pcb)\ **Replies:** 1\ **Last updated:** [November 20, 2020, 8:11am UTC](https://discuss.elastic.co/t/add-routing-via-document-not-query-string/255458 "2020-11-20T08:11:08Z")
Hi ya, I'm attempting to use Elasticsearch custom routing in conjunction with Confluent's Kafka Elasticsearch Sink. Every thing is going well until I've run into custom routing which it doesn't seem to support. I can't… --- ## [Ingest pipeline with enrich policy that matches by \_id - not supported?](https://discuss.elastic.co/t/ingest-pipeline-with-enrich-policy-that-matches-by-id-not-supported/255543)
**Author:** [@djmcgreal](https://discuss.elastic.co/u/djmcgreal)\ **Replies:** 1\ **Last updated:** [November 20, 2020, 8:08am UTC](https://discuss.elastic.co/t/ingest-pipeline-with-enrich-policy-that-matches-by-id-not-supported/255543 "2020-11-20T08:08:41Z")
Hi, I'd like to deduplicate data. We're hashing a subset of fields of the events into the document identifier. To do this in an ingest pipeline, I'd like to have an enrich policy like so: PUT /\_enrich/policy/event-… --- ## [Sql query giving null ouput](https://discuss.elastic.co/t/sql-query-giving-null-ouput/255945)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 5\ **Last updated:** [November 20, 2020, 7:44am UTC](https://discuss.elastic.co/t/sql-query-giving-null-ouput/255945 "2020-11-20T07:44:52Z")
Hi All, I am stuck with sql query output, can anyone please help POST \_sql?format=txt { "query": "SELECT SERVICE\_NAME,CASE WHEN MSA\_STATUS.keyword ='PUBLISH' AND MSA\_FLOW\_DIR.keyword ='EAI - SCRM specific processing' … --- ## [Logstash on cifs mounted windows drive](https://discuss.elastic.co/t/logstash-on-cifs-mounted-windows-drive/256070)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 0\ **Last updated:** [November 20, 2020, 7:14am UTC](https://discuss.elastic.co/t/logstash-on-cifs-mounted-windows-drive/256070 "2020-11-20T07:14:45Z")
I have to pull in some logs which will be dumped on a shared windows drive. The files are small. But their number will be high. There is no chance of files appearing again once they have been processed and deleted. The… [Previous page](https://discuss.elastic.co/latest.md?page=1985) [Next page](https://discuss.elastic.co/latest.md?page=1987)