# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1032 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1033 --- ## [Elasticsearch aggregation on a field with dynamic properties](https://discuss.elastic.co/t/elasticsearch-aggregation-on-a-field-with-dynamic-properties/265667)
**Author:** [@gkeswani92](https://discuss.elastic.co/u/gkeswani92)\ **Replies:** 0\ **Last updated:** [February 26, 2021, 8:42pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-on-a-field-with-dynamic-properties/265667 "2021-02-26T20:42:32Z")
Given the following mapping where variants are a nested type and options is a flattened type: { "doc\_type" : "product", "id" : 1, "variants" : \[ { "options" : { "Size" : "XS", }, "pri… --- ## [Field limits for objects vs flattened documents](https://discuss.elastic.co/t/field-limits-for-objects-vs-flattened-documents/265663)
**Author:** [@acmatt](https://discuss.elastic.co/u/acmatt)\ **Replies:** 0\ **Last updated:** [February 26, 2021, 8:19pm UTC](https://discuss.elastic.co/t/field-limits-for-objects-vs-flattened-documents/265663 "2021-02-26T20:19:05Z")
I recently ran into an issue when creating indexes and wanted to confirm if my understanding was correct. When I attempt to create a new index, with a total\_fields.limit of 1, and a single object with a single field I r… --- ## [JAVA\_HOME not getting set via chef (provider\_configure.rb)](https://discuss.elastic.co/t/java-home-not-getting-set-via-chef-provider-configure-rb/265659)
**Author:** [@sb116](https://discuss.elastic.co/u/sb116)\ **Replies:** 0\ **Last updated:** [February 26, 2021, 7:56pm UTC](https://discuss.elastic.co/t/java-home-not-getting-set-via-chef-provider-configure-rb/265659 "2021-02-26T19:56:46Z")
Hello, I would like to set JAVA\_HOME at \`/etc/default/elasticsearch\` via \`provider\_configure.rb\`, and I setting up JAVA\_HOME via role; for some reason, the env variable is not getting set on the target host. Any thought… --- ## [Translate Regex Not Working](https://discuss.elastic.co/t/translate-regex-not-working/265628)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 11\ **Last updated:** [February 26, 2021, 7:02pm UTC](https://discuss.elastic.co/t/translate-regex-not-working/265628 "2021-02-26T19:02:38Z")
Regular Expression on Translate filter isn't working as expected. All values in the destination field are matching low. Values will range from 0.0 to 10 with no more than 1 digit after the decimal. translate { fie… --- ## [Elasticsearch 7.6.2 fails to start up with BCFKS enforcement](https://discuss.elastic.co/t/elasticsearch-7-6-2-fails-to-start-up-with-bcfks-enforcement/265646)
**Author:** [@Mili\_Kahi](https://discuss.elastic.co/u/Mili_Kahi)\ **Replies:** 1\ **Last updated:** [February 26, 2021, 6:28pm UTC](https://discuss.elastic.co/t/elasticsearch-7-6-2-fails-to-start-up-with-bcfks-enforcement/265646 "2021-02-26T18:28:39Z")
We have customized the entry point for Elasticsearch process. In that, we are enforcing to us BCFKS keystore. However, Elasticsearch xpack stack is trying to load with default keytype (JKS) and that is causing error in s… --- ## [Customizing Stack Management Page in Kibana](https://discuss.elastic.co/t/customizing-stack-management-page-in-kibana/258493)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 11\ **Last updated:** [February 26, 2021, 3:18pm UTC](https://discuss.elastic.co/t/customizing-stack-management-page-in-kibana/258493 "2021-02-26T15:18:37Z")
I would like to customize the stack management page as we only require access to the reporting link. I want to remove the other links since 99% of the user accessing this page will not have access to it. I would like t… --- ## [Total hits count not equal to doc\_count total](https://discuss.elastic.co/t/total-hits-count-not-equal-to-doc-count-total/264863)
**Author:** [@rivariv](https://discuss.elastic.co/u/rivariv)\ **Replies:** 0\ **Last updated:** [February 19, 2021, 1:29pm UTC](https://discuss.elastic.co/t/total-hits-count-not-equal-to-doc-count-total/264863 "2021-02-19T13:29:54Z")
Hi! I am using bucket aggregation- terms. Something is going wrong and I cannot seem to solve it. Spent a lot of time already. The total keys I have in my bucket and their doc\_count sum is not coming to be equal total … --- ## [Multiple file paths for the path parameter in Logstash 7.10](https://discuss.elastic.co/t/multiple-file-paths-for-the-path-parameter-in-logstash-7-10/265640)
**Author:** [@lostsoul352](https://discuss.elastic.co/u/lostsoul352)\ **Replies:** 0\ **Last updated:** [February 26, 2021, 5:03pm UTC](https://discuss.elastic.co/t/multiple-file-paths-for-the-path-parameter-in-logstash-7-10/265640 "2021-02-26T17:03:13Z")
According to the Logstash 7.10 documentation the Path parameter for logstash file input is an array. I tried this: file { path =\> \[ "/data/logs/testing/servers/\*\*/server\*.log", "/data/logs/testing/server… --- ## [Remove aggregate column from the dataTable](https://discuss.elastic.co/t/remove-aggregate-column-from-the-datatable/265570)
**Author:** [@gobi\_s](https://discuss.elastic.co/u/gobi_s)\ **Replies:** 1\ **Last updated:** [February 26, 2021, 4:44pm UTC](https://discuss.elastic.co/t/remove-aggregate-column-from-the-datatable/265570 "2021-02-26T16:44:55Z")
I want to remove the count column from the table, can you help to how to do that. note: count is the only metric column in the table --- ## [Exported CSV Report from Data Table visualization doesn't show "Total"](https://discuss.elastic.co/t/exported-csv-report-from-data-table-visualization-doesnt-show-total/265061)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 2\ **Last updated:** [February 26, 2021, 4:25pm UTC](https://discuss.elastic.co/t/exported-csv-report-from-data-table-visualization-doesnt-show-total/265061 "2021-02-26T16:25:14Z")
Hello Team ! When i export the the data from Table visualization to a CSV, why total values are not populated in the report. I used "Show Total" option to get Total values, but same is not reflecting in the downloaded … --- ## [Querying specific documents by doc \_id via elasticsearch filter plugin in logstash](https://discuss.elastic.co/t/querying-specific-documents-by-doc-id-via-elasticsearch-filter-plugin-in-logstash/265630)
**Author:** [@pratz](https://discuss.elastic.co/u/pratz)\ **Replies:** 0\ **Last updated:** [February 26, 2021, 3:57pm UTC](https://discuss.elastic.co/t/querying-specific-documents-by-doc-id-via-elasticsearch-filter-plugin-in-logstash/265630 "2021-02-26T15:57:25Z")
Using the elasticsearch filter plugin in logstash, can I fetch a particular document via it's \_id (which I obtain from my input data in logstash)? --- ## [How to convert floating value into integer value for usage percentage](https://discuss.elastic.co/t/how-to-convert-floating-value-into-integer-value-for-usage-percentage/265598)
**Author:** [@psganeshk](https://discuss.elastic.co/u/psganeshk)\ **Replies:** 2\ **Last updated:** [February 26, 2021, 3:50pm UTC](https://discuss.elastic.co/t/how-to-convert-floating-value-into-integer-value-for-usage-percentage/265598 "2021-02-26T15:50:03Z")
i need visualise the cpu usage and disk usage percentage value is to integer value --- ## [Elasticsearch fails to parse documents with timestamp in the following format due to space "2021-02-23T01:08:06.39502Eastern Daylight Time"](https://discuss.elastic.co/t/elasticsearch-fails-to-parse-documents-with-timestamp-in-the-following-format-due-to-space-2021-02-23t0106-39502eastern-daylight-time/265217)
**Author:** [@Antonis\_Michael](https://discuss.elastic.co/u/Antonis_Michael)\ **Replies:** 2\ **Last updated:** [February 26, 2021, 3:29pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-parse-documents-with-timestamp-in-the-following-format-due-to-space-2021-02-23t0106-39502eastern-daylight-time/265217 "2021-02-26T15:29:10Z")
Is there a way ElasticSearch can still map this timestamp field without errors? Thanks, Tony --- ## [How much disk should I have?](https://discuss.elastic.co/t/how-much-disk-should-i-have/265619)
**Author:** [@mahalabobis](https://discuss.elastic.co/u/mahalabobis)\ **Replies:** 0\ **Last updated:** [February 26, 2021, 2:41pm UTC](https://discuss.elastic.co/t/how-much-disk-should-i-have/265619 "2021-02-26T14:41:54Z")
How can I know how much disk space I need for Elasticsearch? Right now I'm having unassigned shards because I'm hitting the disk threshold. How much disk growth should I expect? --- ## [Split event into multiples and parse with grok separately](https://discuss.elastic.co/t/split-event-into-multiples-and-parse-with-grok-separately/265322)
**Author:** [@Daniel\_Jankech](https://discuss.elastic.co/u/Daniel_Jankech)\ **Replies:** 2\ **Last updated:** [February 26, 2021, 2:45pm UTC](https://discuss.elastic.co/t/split-event-into-multiples-and-parse-with-grok-separately/265322 "2021-02-26T14:45:27Z")
Hello, I'm back with another question. From my understanding split function is used to split lets say messages into multiple lines of code and then you use grok to parse this into a single list of variables. However what… --- ## [Memory Mapped files using full RAM leaving very less room for other processes](https://discuss.elastic.co/t/memory-mapped-files-using-full-ram-leaving-very-less-room-for-other-processes/265617)
**Author:** [@abhinavtk97](https://discuss.elastic.co/u/abhinavtk97)\ **Replies:** 1\ **Last updated:** [February 26, 2021, 1:59pm UTC](https://discuss.elastic.co/t/memory-mapped-files-using-full-ram-leaving-very-less-room-for-other-processes/265617 "2021-02-26T13:59:52Z")
We were testing out Elasticsearch with almost 1.5 TB index size and there is a different java process running on the same machine which does lots of data processing, which gives batch index jobs to Elasticsearch. The mac… --- ## [Blocked by: \[SERVICE\_UNAVAILABLE/2/no master\];](https://discuss.elastic.co/t/blocked-by-service-unavailable-2-no-master/265612)
**Author:** [@abhishek.tripathi](https://discuss.elastic.co/u/abhishek.tripathi)\ **Replies:** 1\ **Last updated:** [February 26, 2021, 1:31pm UTC](https://discuss.elastic.co/t/blocked-by-service-unavailable-2-no-master/265612 "2021-02-26T13:31:15Z")
blocked by: \[SERVICE\_UNAVAILABLE/2/no master\]; I am getting this error at multiple places in logs... \[2021-02-26T16:20:30,781\]\[WARN \]\[r.suppressed \] \[VPRODGRMQ02\] path: /servername\_messagestatus\_0/\_doc/9151… --- ## [Need some help with Logstash and the XML filter plugin](https://discuss.elastic.co/t/need-some-help-with-logstash-and-the-xml-filter-plugin/265227)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 10\ **Last updated:** [February 26, 2021, 8:47am UTC](https://discuss.elastic.co/t/need-some-help-with-logstash-and-the-xml-filter-plugin/265227 "2021-02-26T08:47:37Z")
Hello Im trying to parse a XML that Im getting from a Windows Event Viewer. Ill try to explain as best I can and any questions or doubt can be further asked. I have this in a field that is winlog.event\_data.param2 (va… --- ## [Failed to parse exception - Preview of field's value: ''](https://discuss.elastic.co/t/failed-to-parse-exception-preview-of-fields-value/265599)
**Author:** [@Q\_the\_River](https://discuss.elastic.co/u/Q_the_River)\ **Replies:** 0\ **Last updated:** [February 26, 2021, 11:02am UTC](https://discuss.elastic.co/t/failed-to-parse-exception-preview-of-fields-value/265599 "2021-02-26T11:02:11Z")
We are using fluentd to forward logs towards elasticsearch. A lot of messages are getting rejected by ES without a rejection reason, does anybody have idea on how to debug this? Rejected by Elasticsearch \[error type\]: … --- ## [Matching fields in two different indexes together](https://discuss.elastic.co/t/matching-fields-in-two-different-indexes-together/265563)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 3\ **Last updated:** [February 26, 2021, 9:39am UTC](https://discuss.elastic.co/t/matching-fields-in-two-different-indexes-together/265563 "2021-02-26T09:39:08Z")
Hey Team, Let just say I have two different indexes named index1 and index2, they both have a column/ field in them named C1 and C2, what I basically want to do is I want to match where C1 and C2 are the same and creat… --- ## [How to re-indexed in Elasticsearch 6.8.13 before upgrading to 7.6.2](https://discuss.elastic.co/t/how-to-re-indexed-in-elasticsearch-6-8-13-before-upgrading-to-7-6-2/265525)
**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\ **Replies:** 4\ **Last updated:** [February 26, 2021, 9:34am UTC](https://discuss.elastic.co/t/how-to-re-indexed-in-elasticsearch-6-8-13-before-upgrading-to-7-6-2/265525 "2021-02-26T09:34:03Z")
Hi All, I'm New in Elasticsearch and I don't know how to re-indexed Elasticsearch in Ubuntu Here is the ERROR :- java.lang.IllegalStateException: The index \[\[test-suites- tscount/kKudK8xxxxxxxxxxxXrvzAA\]\] was created … --- ## [Failed to parse field \[agent\] of type \[text\]](https://discuss.elastic.co/t/failed-to-parse-field-agent-of-type-text/265361)
**Author:** [@meissen](https://discuss.elastic.co/u/meissen)\ **Replies:** 4\ **Last updated:** [February 26, 2021, 8:55am UTC](https://discuss.elastic.co/t/failed-to-parse-field-agent-of-type-text/265361 "2021-02-26T08:55:56Z")
Hello, ELK stack in version 7.9.2 it has been working fine with filebeat 6.4, but after upgrading filebeat to 7.0 I get the following error in logstash logs : \[2021-02-24T15:24:56,954\]\[WARN \]\[logstash.outputs.elasticse… --- ## [Troubles running Logstash on RHEL](https://discuss.elastic.co/t/troubles-running-logstash-on-rhel/265472)
**Author:** [@PawelKosiorek](https://discuss.elastic.co/u/PawelKosiorek)\ **Replies:** 4\ **Last updated:** [February 26, 2021, 7:12am UTC](https://discuss.elastic.co/t/troubles-running-logstash-on-rhel/265472 "2021-02-26T07:12:31Z")
It used to work fine, but recently it has been giving me this. Please help. Thank you. --- ## [Exclude results using controls](https://discuss.elastic.co/t/exclude-results-using-controls/264787)
**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\ **Replies:** 2\ **Last updated:** [February 26, 2021, 6:44am UTC](https://discuss.elastic.co/t/exclude-results-using-controls/264787 "2021-02-26T06:44:20Z")
Is there way to exclude results using Controls visualisation, similar to what we do manually with filter? Like the below NOT filter using controls --- ## [Kibana installation issue - 7.11](https://discuss.elastic.co/t/kibana-installation-issue-7-11/265147)
**Author:** [@AbhayN](https://discuss.elastic.co/u/AbhayN)\ **Replies:** 2\ **Last updated:** [February 26, 2021, 5:57am UTC](https://discuss.elastic.co/t/kibana-installation-issue-7-11/265147 "2021-02-26T05:57:19Z")
While running kibana.bat from bin folder I am getting this error "KIBANA log \[fatal\]\[root\] Error: Cannot find module '../../../spaces/server'" any idea/direction will help thanks --- ## [Grook Format For APM Nginx Log](https://discuss.elastic.co/t/grook-format-for-apm-nginx-log/265439)
**Author:** [@reza\_naipospos](https://discuss.elastic.co/u/reza_naipospos)\ **Replies:** 2\ **Last updated:** [February 26, 2021, 4:25am UTC](https://discuss.elastic.co/t/grook-format-for-apm-nginx-log/265439 "2021-02-26T04:25:40Z")
i have format log like this, how logstash can make new field on elasticsearch for every this log, currently all log is in message field. timestamp="25/Feb/2021:13:34:22 +0700" client=192.168.0.21 request="GET /api/Supir… --- ## [Index Mapping- Update API](https://discuss.elastic.co/t/index-mapping-update-api/265515)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 2\ **Last updated:** [February 26, 2021, 2:42am UTC](https://discuss.elastic.co/t/index-mapping-update-api/265515 "2021-02-26T02:42:32Z")
We found an error in our index mapping and have successfully fixed the issue- all future indices will have the correct mapping; however, we are now looking to go back and fix all the old indices that have the incorrect m… --- ## [Failed to start LSB, and Elasticsearch startup script does not exist or is not executable](https://discuss.elastic.co/t/failed-to-start-lsb-and-elasticsearch-startup-script-does-not-exist-or-is-not-executable/265351)
**Author:** [@PSandusky](https://discuss.elastic.co/u/PSandusky)\ **Replies:** 7\ **Last updated:** [February 26, 2021, 1:22am UTC](https://discuss.elastic.co/t/failed-to-start-lsb-and-elasticsearch-startup-script-does-not-exist-or-is-not-executable/265351 "2021-02-26T01:22:51Z")
I've been having a rough time getting Elasticsearch to start at all. On the most recent attempt, I got a response that the startup script did not exist or was not executable. When I pulled systemctl status and then journ… --- ## [Spanish stemming not working with 4 or less letter words](https://discuss.elastic.co/t/spanish-stemming-not-working-with-4-or-less-letter-words/265554)
**Author:** [@eperezf](https://discuss.elastic.co/u/eperezf)\ **Replies:** 0\ **Last updated:** [February 26, 2021, 12:11am UTC](https://discuss.elastic.co/t/spanish-stemming-not-working-with-4-or-less-letter-words/265554 "2021-02-26T00:11:59Z")
Hello! When trying to do stemming in spanish of 4 or less letter words, the stemming algorithm ignores them completely. For example, "roja" should return the following token "roj" due to the feminine/masculine form of … --- ## [TIme series based index strategy](https://discuss.elastic.co/t/time-series-based-index-strategy/265445)
**Author:** [@Kalpa](https://discuss.elastic.co/u/Kalpa)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 11:06pm UTC](https://discuss.elastic.co/t/time-series-based-index-strategy/265445 "2021-02-25T23:06:59Z")
Hi All, I was looking into Indexint Strategy for multitenancy, i see that 1) user based index with shared index and big customers isolated index strategy. 2) time series based. any thought on clubbiing time based inde… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1031) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1033)