# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1002

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1003

---

## [Kibana 7.9 Index Patterns Do Not Pick Up Source Fields](https://discuss.elastic.co/t/kibana-7-9-index-patterns-do-not-pick-up-source-fields/268220)

<div class="topic-metadata">

**Author:** [@SKRYMr](https://discuss.elastic.co/u/SKRYMr)\
**Replies:** 8\
**Last updated:** [March 25, 2021, 11:01am UTC](https://discuss.elastic.co/t/kibana-7-9-index-patterns-do-not-pick-up-source-fields/268220 "2021-03-25T11:01:16Z")

</div>

Hello, I was trying to set up some visualizations for our data so I created an index pattern to match all our production indices. What happens is that the indices are matched correctly but only "root" fields are picked …

---

## [Detection threshold rule problem](https://discuss.elastic.co/t/detection-threshold-rule-problem/268079)

<div class="topic-metadata">

**Author:** [@Jorge7](https://discuss.elastic.co/u/Jorge7)\
**Replies:** 5\
**Last updated:** [March 25, 2021, 10:23am UTC](https://discuss.elastic.co/t/detection-threshold-rule-problem/268079 "2021-03-25T10:23:27Z")

</div>

Hi everyone, I'm try to create a personalize rule with the threshold parameter detection. I am using a handmade index with personal fields. This is the mapping: { "login-000001" : { "mappings" : { "properti…

---

## [ECS fields not applied from index template](https://discuss.elastic.co/t/ecs-fields-not-applied-from-index-template/267056)

<div class="topic-metadata">

**Author:** [@jfs1](https://discuss.elastic.co/u/jfs1)\
**Replies:** 6\
**Last updated:** [March 25, 2021, 10:01am UTC](https://discuss.elastic.co/t/ecs-fields-not-applied-from-index-template/267056 "2021-03-25T10:01:02Z")

</div>

I'm trying to reformat my index template to migrate to ECS. I think I'm missing something because the field format for the multi-level keys is not taken into account. My index template looks like this : { "te…

---

## [Recommendation to use search after instead of scrolling](https://discuss.elastic.co/t/recommendation-to-use-search-after-instead-of-scrolling/268293)

<div class="topic-metadata">

**Author:** [@prelator](https://discuss.elastic.co/u/prelator)\
**Replies:** 4\
**Last updated:** [March 25, 2021, 9:58am UTC](https://discuss.elastic.co/t/recommendation-to-use-search-after-instead-of-scrolling/268293 "2021-03-25T09:58:20Z")

</div>

Hello everybody If you want to read an index completely, you can read in the documentation that the search after function should be used from 10,000 documents (instead of scroll). We have now tested this and unfortunat…

---

## [BulkProcessor using BulkRequest with wait\_for](https://discuss.elastic.co/t/bulkprocessor-using-bulkrequest-with-wait-for/268308)

<div class="topic-metadata">

**Author:** [@jbalaguero](https://discuss.elastic.co/u/jbalaguero)\
**Replies:** 2\
**Last updated:** [March 25, 2021, 9:49am UTC](https://discuss.elastic.co/t/bulkprocessor-using-bulkrequest-with-wait-for/268308 "2021-03-25T09:49:24Z")

</div>

Hello, We are trying to set a "wait\_for" refresh policy for every bulk request we are performing. It seems the only way is setting this policy on the 'beforeBulk' method on the bulk listener in this way: public void be…

---

## [Hourly rate pricing](https://discuss.elastic.co/t/hourly-rate-pricing/268231)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 5\
**Last updated:** [March 25, 2021, 9:15am UTC](https://discuss.elastic.co/t/hourly-rate-pricing/268231 "2021-03-25T09:15:39Z")

</div>

Hi, I've created a new account in Elastic Cloud, with a trial period. Out of curiosity I wanted to check the "Billing" section and I noticed a strange cost. $ 0.2714 of "hourly rate" for "Cloud Standard Data High I…

---

## [Server](https://discuss.elastic.co/t/server/268274)

<div class="topic-metadata">

**Author:** [@amazonas\_ecommerce](https://discuss.elastic.co/u/amazonas_ecommerce)\
**Replies:** 2\
**Last updated:** [March 25, 2021, 8:39am UTC](https://discuss.elastic.co/t/server/268274 "2021-03-25T08:39:48Z")

</div>

I installed Elasticsearch 7 on the ubunto AWS Lightsail. It's working perfectly on localhost. However, I have Magento2.4 on another EC2 AWS server, but I don't know how to use Elasticsearch on another server, I have alr…

---

## [Kibana Export and Import not working](https://discuss.elastic.co/t/kibana-export-and-import-not-working/268204)

<div class="topic-metadata">

**Author:** [@Automation\_Scripts](https://discuss.elastic.co/u/Automation_Scripts)\
**Replies:** 4\
**Last updated:** [March 25, 2021, 8:10am UTC](https://discuss.elastic.co/t/kibana-export-and-import-not-working/268204 "2021-03-25T08:10:16Z")

</div>

Hi guys, Exported some Kibana dashboards and vizualizations from one computer to another and I got the same error while importing the ndjson ==\> Sorry, there was an error The file could not be processed due to error:…

---

## [What is the correct way to specify mappings for "geo point" data type to index geo information documents in an elasticsearch index?](https://discuss.elastic.co/t/what-is-the-correct-way-to-specify-mappings-for-geo-point-data-type-to-index-geo-information-documents-in-an-elasticsearch-index/268200)

<div class="topic-metadata">

**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\
**Replies:** 6\
**Last updated:** [March 25, 2021, 8:08am UTC](https://discuss.elastic.co/t/what-is-the-correct-way-to-specify-mappings-for-geo-point-data-type-to-index-geo-information-documents-in-an-elasticsearch-index/268200 "2021-03-25T08:08:52Z")

</div>

I have configured a logstash pipeline in which I have used filter "logstash-filter-geoip" for getting geo information about the IP Address.I have specified mapping before indexing documents into elasticsearch but it is s…

---

## [Combine windows registry and log file](https://discuss.elastic.co/t/combine-windows-registry-and-log-file/268236)

<div class="topic-metadata">

**Author:** [@ahmetnash](https://discuss.elastic.co/u/ahmetnash)\
**Replies:** 1\
**Last updated:** [March 25, 2021, 2:46am UTC](https://discuss.elastic.co/t/combine-windows-registry-and-log-file/268236 "2021-03-25T02:46:39Z")

</div>

In my windows computer, i am using filebeat to read the content of the application server logs. On the same machine, In the registry field i have also store the version of the application. I want to combine these two da…

---

## [Kibana: Service map not display connections](https://discuss.elastic.co/t/kibana-service-map-not-display-connections/268161)

<div class="topic-metadata">

**Author:** [@jialipassion](https://discuss.elastic.co/u/jialipassion)\
**Replies:** 1\
**Last updated:** [March 25, 2021, 2:36am UTC](https://discuss.elastic.co/t/kibana-service-map-not-display-connections/268161 "2021-03-25T02:36:53Z")

</div>

I am using Kibana/ElasticSearch/APM 7.11.1. And I am not working on http server, so I am using nodejs agent to create the custom transactions. I have two services, producer and consumer. The trace sequence is: produc…

---

## [New plugin - Unformatted Code Detector](https://discuss.elastic.co/t/new-plugin-unformatted-code-detector/268275)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 0\
**Last updated:** [March 24, 2021, 10:55pm UTC](https://discuss.elastic.co/t/new-plugin-unformatted-code-detector/268275 "2021-03-24T22:55:59Z")

</div>

We recently enabled this plugin across the forums. What it means is you will get a pop up if you try to enter what looks like code but isn't formatted as such. We appreciate this might be seen as an annoyance for some u…

---

## [How to retrieve only latest index](https://discuss.elastic.co/t/how-to-retrieve-only-latest-index/268264)

<div class="topic-metadata">

**Author:** [@harper\_S](https://discuss.elastic.co/u/harper_S)\
**Replies:** 7\
**Last updated:** [March 24, 2021, 10:51pm UTC](https://discuss.elastic.co/t/how-to-retrieve-only-latest-index/268264 "2021-03-24T22:51:30Z")

</div>

I have created a python api which will accept the \*.json file. for ex: abc.json { "service\_name": "httpd", "service\_status": "DOWN", "host\_name": "host1", "time": "1616600149.014236" } and, push the da…

---

## [Logstash MongoDB Output Plugin - command insert requires authentication](https://discuss.elastic.co/t/logstash-mongodb-output-plugin-command-insert-requires-authentication/268265)

<div class="topic-metadata">

**Author:** [@christiancj](https://discuss.elastic.co/u/christiancj)\
**Replies:** 1\
**Last updated:** [March 24, 2021, 9:29pm UTC](https://discuss.elastic.co/t/logstash-mongodb-output-plugin-command-insert-requires-authentication/268265 "2021-03-24T21:29:32Z")

</div>

I'm using logstash 7.10.2 with MongoDB logstash-output plugin (tested 2 diff versions), I'm trying to write documents from elastic to mongodb, however I'm getting the following errors for each version, plugin version l…

---

## [Elasticsearch 7.2.0 Cluster - Performance Recovery Help](https://discuss.elastic.co/t/elasticsearch-7-2-0-cluster-performance-recovery-help/267472)

<div class="topic-metadata">

**Author:** [@Owen\_Watson](https://discuss.elastic.co/u/Owen_Watson)\
**Replies:** 3\
**Last updated:** [March 24, 2021, 8:13pm UTC](https://discuss.elastic.co/t/elasticsearch-7-2-0-cluster-performance-recovery-help/267472 "2021-03-24T20:13:39Z")

</div>

I am new to elasticsearch management and have some issues with a cluster I am working with. Currently, the cluster is recovering from a node failure, but I would like to stop the recovery and delete a handful of indices…

---

## [Import mapping via index template](https://discuss.elastic.co/t/import-mapping-via-index-template/267393)

<div class="topic-metadata">

**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Replies:** 4\
**Last updated:** [March 24, 2021, 6:52pm UTC](https://discuss.elastic.co/t/import-mapping-via-index-template/267393 "2021-03-24T18:52:06Z")

</div>

I want to import an index template with a mapping for the fields of the index pmdata\* in order to set as type of the field counter\_value float. After the import of the template with counter\_value type float, I imported …

---

## [Reindexing with new nested property changes dot to json representation](https://discuss.elastic.co/t/reindexing-with-new-nested-property-changes-dot-to-json-representation/268256)

<div class="topic-metadata">

**Author:** [@makmnr](https://discuss.elastic.co/u/makmnr)\
**Replies:** 0\
**Last updated:** [March 24, 2021, 6:49pm UTC](https://discuss.elastic.co/t/reindexing-with-new-nested-property-changes-dot-to-json-representation/268256 "2021-03-24T18:49:19Z")

</div>

I am trying to reindex in order to make field renames. But there are a lot of challenges as the fields to be renamed and old fields are objects. Following is a sample code to represent the issue: Processor Simulate@POST…

---

## [Splunk data ingestion into Elasticsearch via Logstash behind NLB](https://discuss.elastic.co/t/splunk-data-ingestion-into-elasticsearch-via-logstash-behind-nlb/267654)

<div class="topic-metadata">

**Author:** [@vijay.gvg](https://discuss.elastic.co/u/vijay.gvg)\
**Replies:** 3\
**Last updated:** [March 24, 2021, 6:41pm UTC](https://discuss.elastic.co/t/splunk-data-ingestion-into-elasticsearch-via-logstash-behind-nlb/267654 "2021-03-24T18:41:24Z")

</div>

Hi, We wanted to integrate logs from Splunk system into Elasticsearch via Logstash. Following are the steps we used to do the same: Create a Network Load Balancer (NLB) URL with Logstash as backend Configure Splunk for…

---

## [Fleet Agent Goes from Online to Offline](https://discuss.elastic.co/t/fleet-agent-goes-from-online-to-offline/266745)

<div class="topic-metadata">

**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\
**Replies:** 1\
**Last updated:** [March 24, 2021, 6:04pm UTC](https://discuss.elastic.co/t/fleet-agent-goes-from-online-to-offline/266745 "2021-03-24T18:04:11Z")

</div>

I enrolled my agent, but after a few minutes it goes offline .I found errors in my endpoint agent logs The error is "Error \[SSL certificate problem: self signed certificate in certificate chain\]". I was able to bypass th…

---

## [Logstash shipping issue](https://discuss.elastic.co/t/logstash-shipping-issue/268227)

<div class="topic-metadata">

**Author:** [@jcor](https://discuss.elastic.co/u/jcor)\
**Replies:** 1\
**Last updated:** [March 24, 2021, 4:18pm UTC](https://discuss.elastic.co/t/logstash-shipping-issue/268227 "2021-03-24T16:18:53Z")

</div>

Hey folks, I'm having a weird issue that I cant seem to solve. I have multiple winlogbeats shipping event logs to a logstash server which then forwards it to an elastic ingestion node which servers the cluster. Recentl…

---

## [Store and visualise key value pairs](https://discuss.elastic.co/t/store-and-visualise-key-value-pairs/268005)

<div class="topic-metadata">

**Author:** [@Crystal](https://discuss.elastic.co/u/Crystal)\
**Replies:** 2\
**Last updated:** [March 24, 2021, 3:04pm UTC](https://discuss.elastic.co/t/store-and-visualise-key-value-pairs/268005 "2021-03-24T15:04:11Z")

</div>

Hello, I have a set of key value pairs returned from an external API that I would like to store in Elastic and be able to visualize in Kibana. The data is returned from the external API as a JSON object containing mult…

---

## [Ingest pipeline with update\_by\_query on failure causes version\_conflict\_engine\_exception](https://discuss.elastic.co/t/ingest-pipeline-with-update-by-query-on-failure-causes-version-conflict-engine-exception/266816)

<div class="topic-metadata">

**Author:** [@nuketro0p3r](https://discuss.elastic.co/u/nuketro0p3r)\
**Replies:** 1\
**Last updated:** [March 24, 2021, 1:19pm UTC](https://discuss.elastic.co/t/ingest-pipeline-with-update-by-query-on-failure-causes-version-conflict-engine-exception/266816 "2021-03-24T13:19:32Z")

</div>

Situation: I set the "on\_failure" statement to an existing pipeline like follows (for the whole pipeline): "on\_failure" : \[ { "set" : { "field" : "\_index", "value" : "failed-{{ \_in…

---

## [Group Results of terms aggs in "parent" bucket](https://discuss.elastic.co/t/group-results-of-terms-aggs-in-parent-bucket/268205)

<div class="topic-metadata">

**Author:** [@Leander1](https://discuss.elastic.co/u/Leander1)\
**Replies:** 0\
**Last updated:** [March 24, 2021, 11:57am UTC](https://discuss.elastic.co/t/group-results-of-terms-aggs-in-parent-bucket/268205 "2021-03-24T11:57:14Z")

</div>

Hey, I'm trying to group results which I get after doing the terms aggregation. I'm getting the following results: hospital 1, doc\_count 20; hospital 2, doc\_count 32; hospital 3, doc\_count 21; facility 1, doc\_count 11;…

---

## [Data source Not Sending Data](https://discuss.elastic.co/t/data-source-not-sending-data/267787)

<div class="topic-metadata">

**Author:** [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\
**Replies:** 3\
**Last updated:** [March 24, 2021, 11:41am UTC](https://discuss.elastic.co/t/data-source-not-sending-data/267787 "2021-03-24T11:41:31Z")

</div>

Hi, I am working on ELK stack and was wondering if a data source has stopped sending data to ELK due to any reason, how can we identify or alert team that this particular network device or server has stopped sending eve…

---

## [Elastic Cloud vs AWS ELK as a service](https://discuss.elastic.co/t/elastic-cloud-vs-aws-elk-as-a-service/268192)

<div class="topic-metadata">

**Author:** [@evgeniy777](https://discuss.elastic.co/u/evgeniy777)\
**Replies:** 1\
**Last updated:** [March 24, 2021, 10:46am UTC](https://discuss.elastic.co/t/elastic-cloud-vs-aws-elk-as-a-service/268192 "2021-03-24T10:46:26Z")

</div>

Hi all ! Can you please explain what the cons and pros of using both solutions ? VS https://cloud.elastic.co/ Thanks in advance

---

## [Extract day, month and year from a date field. Changing Timezone](https://discuss.elastic.co/t/extract-day-month-and-year-from-a-date-field-changing-timezone/267646)

<div class="topic-metadata">

**Author:** [@Ernesto\_Guerra](https://discuss.elastic.co/u/Ernesto_Guerra)\
**Replies:** 4\
**Last updated:** [March 24, 2021, 11:30am UTC](https://discuss.elastic.co/t/extract-day-month-and-year-from-a-date-field-changing-timezone/267646 "2021-03-24T11:30:50Z")

</div>

Hi, I would like to add some fields extracting data from "\[layers\]\[frame\]\[frame\_frame\_time\]" field. My code is: date { match =\> \[ "\[layers\]\[frame\]\[frame\_frame\_time\]","ISO8601" \] target =\> "\[layers\]\[frame\]\[fr…

---

## [Calculate the correct recovery.max\_bytes\_per\_sec](https://discuss.elastic.co/t/calculate-the-correct-recovery-max-bytes-per-sec/268194)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 0\
**Last updated:** [March 24, 2021, 10:41am UTC](https://discuss.elastic.co/t/calculate-the-correct-recovery-max-bytes-per-sec/268194 "2021-03-24T10:41:47Z")

</div>

Hey there, is there a way to calculate the correct value of indices.recovery.max\_bytes\_per\_sec ?

---

## [Elastic Cloud Enterprise 2.9.0 released](https://discuss.elastic.co/t/elastic-cloud-enterprise-2-9-0-released/268186)

<div class="topic-metadata">

**Author:** [@AranK](https://discuss.elastic.co/u/AranK)\
**Replies:** 0\
**Last updated:** [March 24, 2021, 9:39am UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-2-9-0-released/268186 "2021-03-24T09:39:19Z")

</div>

We are pleased to announce that ECE 2.9.0 has been released today. Release notes: Elastic Cloud Enterprise 2.9.0 | Elastic Cloud Enterprise Reference \[2.9\] | Elastic

---

## [Logstash 1.5.4 Output to Elasticsearch with https](https://discuss.elastic.co/t/logstash-1-5-4-output-to-elasticsearch-with-https/268065)

<div class="topic-metadata">

**Author:** [@Dan4](https://discuss.elastic.co/u/Dan4)\
**Replies:** 12\
**Last updated:** [March 24, 2021, 9:02am UTC](https://discuss.elastic.co/t/logstash-1-5-4-output-to-elasticsearch-with-https/268065 "2021-03-24T09:02:22Z")

</div>

Hello together, I am new to the elastic stack and have no further experience than just google a solution. In my environment I have to use Logstash on a remote server. I can not change it. I have no control over the vers…

---

## [Is there an API to get the read and write performance data?](https://discuss.elastic.co/t/is-there-an-api-to-get-the-read-and-write-performance-data/267642)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 9\
**Last updated:** [March 24, 2021, 8:43am UTC](https://discuss.elastic.co/t/is-there-an-api-to-get-the-read-and-write-performance-data/267642 "2021-03-24T08:43:45Z")

</div>

ES version: 6.3.0 My ES cluster block sometimes when perform search and bulk operations, but the cluster status is green, it is strange. The cat.thread\_pool api can output some related info, but i do not know how to de…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1001)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1003)
