# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1055 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1056 --- ## [Timestamp for Max value](https://discuss.elastic.co/t/timestamp-for-max-value/263477)
**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\ **Replies:** 3\ **Last updated:** [February 9, 2021, 9:07am UTC](https://discuss.elastic.co/t/timestamp-for-max-value/263477 "2021-02-09T09:07:19Z")
I have a data table showing individual devices and two metrics for each device. Average value and Max Value. I wish to output the date/time of the max value occurrence as well. I have tried adding a max bucket metric … --- ## [Kibana Index Patterns without Index](https://discuss.elastic.co/t/kibana-index-patterns-without-index/263681)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [February 9, 2021, 9:04am UTC](https://discuss.elastic.co/t/kibana-index-patterns-without-index/263681 "2021-02-09T09:04:08Z")
It just hit my attention: I have Kibana index patterns with no index. Do you agree on this, that in case you once had a index and defined a pattern, but after that the data stream ends and curator over time deletes one… --- ## [Shard Lucene segments single threaded?](https://discuss.elastic.co/t/shard-lucene-segments-single-threaded/263696)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 1\ **Last updated:** [February 9, 2021, 8:55am UTC](https://discuss.elastic.co/t/shard-lucene-segments-single-threaded/263696 "2021-02-09T08:55:19Z")
I am just curious, I know a search on 5 shards take 5 Java threads, but if each shard have 10 segments: Each segments are searched synchronously ? (mean the more segments the longer is the search) Each segments are sea… --- ## ["Bad Request" loggued with debug level?](https://discuss.elastic.co/t/bad-request-loggued-with-debug-level/263230)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 3\ **Last updated:** [February 9, 2021, 8:32am UTC](https://discuss.elastic.co/t/bad-request-loggued-with-debug-level/263230 "2021-02-09T08:32:11Z")
I have to set log level DEBUG to see Bad Request error: {"type": "server", "timestamp": "2021-02-04T10:19:16,959Z", "level": "DEBUG", "component": "r.suppressed", "cluster.name": "conso", "node.name": "conso-es-client-0… --- ## [De-enroll from a training course](https://discuss.elastic.co/t/de-enroll-from-a-training-course/263671)
**Author:** [@Stud21](https://discuss.elastic.co/u/Stud21)\ **Replies:** 2\ **Last updated:** [February 9, 2021, 8:14am UTC](https://discuss.elastic.co/t/de-enroll-from-a-training-course/263671 "2021-02-09T08:14:38Z")
I have enrolled for a couple of training courses, which I intend to do after a complete in due time. Would anyone know, if enrolling for a training course also initiates your lab time (21 days). And, if you are unable t… --- ## [Filter username or email address within space delimited string](https://discuss.elastic.co/t/filter-username-or-email-address-within-space-delimited-string/263479)
**Author:** [@earlsanchez](https://discuss.elastic.co/u/earlsanchez)\ **Replies:** 3\ **Last updated:** [February 9, 2021, 8:13am UTC](https://discuss.elastic.co/t/filter-username-or-email-address-within-space-delimited-string/263479 "2021-02-09T08:13:20Z")
Hello, I'm trying to create a Logstash filter using Grok for the following log event: 2021-01-15 15:36:08.081 ERROR t:44 com.ixiasoft.physicalModel.TextmlSession.loginWithServerConnection:321 Unable to authentica… --- ## [No field mapping can be found for the field with name \[\*\]](https://discuss.elastic.co/t/no-field-mapping-can-be-found-for-the-field-with-name/263689)
**Author:** [@jesse\_c](https://discuss.elastic.co/u/jesse_c)\ **Replies:** 2\ **Last updated:** [February 9, 2021, 8:04am UTC](https://discuss.elastic.co/t/no-field-mapping-can-be-found-for-the-field-with-name/263689 "2021-02-09T08:04:49Z")
Hi, I am running into a very strange issue after upgrading to Elasticsearch 7.10. I keep getting the following error in a particular percolate query: “No field mapping can be found for the field with name \[\*\]” This i… --- ## [How to add elasticsearch warm node](https://discuss.elastic.co/t/how-to-add-elasticsearch-warm-node/263691)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 0\ **Last updated:** [February 9, 2021, 7:43am UTC](https://discuss.elastic.co/t/how-to-add-elasticsearch-warm-node/263691 "2021-02-09T07:43:44Z")
I have 8 node elasticsearch cluster (3MasterNode+3DataNode+2CoordinateNode), no i want to add another node warm node How can i achieve this? --- ## [Get loaded config info from each node](https://discuss.elastic.co/t/get-loaded-config-info-from-each-node/263686)
**Author:** [@Adithya\_S](https://discuss.elastic.co/u/Adithya_S)\ **Replies:** 0\ **Last updated:** [February 9, 2021, 7:18am UTC](https://discuss.elastic.co/t/get-loaded-config-info-from-each-node/263686 "2021-02-09T07:18:29Z")
hi, We have below set in config of each node in the es7 cluster. Is there any way I can fetch these values for each node from the api? thread\_pool.search.queue\_size thread\_pool.search.size thread\_pool.write… --- ## [Search api not returning the results](https://discuss.elastic.co/t/search-api-not-returning-the-results/263556)
**Author:** [@ritusingh](https://discuss.elastic.co/u/ritusingh)\ **Replies:** 5\ **Last updated:** [February 9, 2021, 6:47am UTC](https://discuss.elastic.co/t/search-api-not-returning-the-results/263556 "2021-02-09T06:47:52Z")
Hi, I want to get the logs from all the indices in elasticsearch for which I am using following search API. https://localhost:9200/\_search?pretty=true Output: { "took": 28, "timed\_out": false, "\_shards… --- ## [Lab 5.2: Connection refused running for java application - PetClinicApplication](https://discuss.elastic.co/t/lab-5-2-connection-refused-running-for-java-application-petclinicapplication/263189)
**Author:** [@Stud21](https://discuss.elastic.co/u/Stud21)\ **Replies:** 6\ **Last updated:** [February 9, 2021, 5:41am UTC](https://discuss.elastic.co/t/lab-5-2-connection-refused-running-for-java-application-petclinicapplication/263189 "2021-02-09T05:41:45Z")
This is an error in the Lab version: dwwkb5xfwhxvemvdh-ihsdbxb2mswxpjpnh.labs.strigo.io Steps to reproduce: login to lab ssh petclinic-server pkill java run the java application (refer Lab 5.2: Services Layer of the L… --- ## [Elasticsearch CPU usage High](https://discuss.elastic.co/t/elasticsearch-cpu-usage-high/261846)
**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\ **Replies:** 4\ **Last updated:** [February 9, 2021, 2:40am UTC](https://discuss.elastic.co/t/elasticsearch-cpu-usage-high/261846 "2021-02-09T02:40:24Z")
I am running a single node ELK stack which is ingesting logs from an Application Load Balancer on AWS. It is a decent sized instance with 8 VCPUs and 32GB RAM. I am seeing a consistently high CPU usage on the instance … --- ## [Show Country wise breakup in horizontal bar chart](https://discuss.elastic.co/t/show-country-wise-breakup-in-horizontal-bar-chart/263627)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 1\ **Last updated:** [February 9, 2021, 2:28am UTC](https://discuss.elastic.co/t/show-country-wise-breakup-in-horizontal-bar-chart/263627 "2021-02-09T02:28:42Z")
I want to show the country-wise breakup bar chart for the data showing in the above image. One bar should show a sum of all value belongs to Singapore and so on for other countries. Is it possible to show in such visu… --- ## [Es es es](https://discuss.elastic.co/t/es-es-es/263667)
**Author:** [@ppttv](https://discuss.elastic.co/u/ppttv)\ **Replies:** 2\ **Last updated:** [February 9, 2021, 2:09am UTC](https://discuss.elastic.co/t/es-es-es/263667 "2021-02-09T02:09:28Z")
hows entry for one node only. I tried a lot however it didn't work. --- ## [VPN Tunnels, Multiple sites, Do I need to NAT (a second time)?](https://discuss.elastic.co/t/vpn-tunnels-multiple-sites-do-i-need-to-nat-a-second-time/263663)
**Author:** [@VPN-noob](https://discuss.elastic.co/u/VPN-noob)\ **Replies:** 3\ **Last updated:** [February 8, 2021, 11:11pm UTC](https://discuss.elastic.co/t/vpn-tunnels-multiple-sites-do-i-need-to-nat-a-second-time/263663 "2021-02-08T23:11:04Z")
First time poster, please be gentle. As the username implies, I am a complete neophyte at site-to-site VPN tunnelling. Here's the setup: I have a central ELK Stack running, that is monitoring my DC servers and network… --- ## [Max\_docs not working in ES 6.5.4](https://discuss.elastic.co/t/max-docs-not-working-in-es-6-5-4/263445)
**Author:** [@Sammeta\_David\_Raju](https://discuss.elastic.co/u/Sammeta_David_Raju)\ **Replies:** 3\ **Last updated:** [February 8, 2021, 10:44pm UTC](https://discuss.elastic.co/t/max-docs-not-working-in-es-6-5-4/263445 "2021-02-08T22:44:21Z")
\> max\_docs is not working in 6.5.4 but its working in 7.3.2 when we are using delete\_by\_query\` --- ## [Dynamic index name in DSL](https://discuss.elastic.co/t/dynamic-index-name-in-dsl/263580)
**Author:** [@Ninja\_Ninja](https://discuss.elastic.co/u/Ninja_Ninja)\ **Replies:** 1\ **Last updated:** [February 8, 2021, 10:42pm UTC](https://discuss.elastic.co/t/dynamic-index-name-in-dsl/263580 "2021-02-08T22:42:17Z")
I have created indexes based on year and month. For ex: idx202001, idx202002,... In the dashboard, based on the time filter selected, I would like to query particular indices only. Like { "query": { "match": { "\_… --- ## [Custom rate limit per user](https://discuss.elastic.co/t/custom-rate-limit-per-user/263592)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 2\ **Last updated:** [February 8, 2021, 10:41pm UTC](https://discuss.elastic.co/t/custom-rate-limit-per-user/263592 "2021-02-08T22:41:06Z")
can we define custom rate limit for each user of elastic? for example kibana user rate limit: 10 request every minute! can do this? --- ## [Filebeat modules via Logstash](https://discuss.elastic.co/t/filebeat-modules-via-logstash/263612)
**Author:** [@st1988](https://discuss.elastic.co/u/st1988)\ **Replies:** 6\ **Last updated:** [February 8, 2021, 9:19pm UTC](https://discuss.elastic.co/t/filebeat-modules-via-logstash/263612 "2021-02-08T21:19:01Z")
Hi everyone, I have an issue where when I try and integrate Filebeat PANOS module with Elasticsearch via Logstash it fails to bring across the pre-built dashboards that is does when integrating Filebeat directly with El… --- ## [ArubaOS](https://discuss.elastic.co/t/arubaos/263655)
**Author:** [@javig12](https://discuss.elastic.co/u/javig12)\ **Replies:** 0\ **Last updated:** [February 8, 2021, 9:00pm UTC](https://discuss.elastic.co/t/arubaos/263655 "2021-02-08T21:00:32Z")
Hello community? Has anyone could ship logs to Logstash from Aruba Networks? any .conf file example? hope your comments. Regards --- ## [Swapping alias workflow](https://discuss.elastic.co/t/swapping-alias-workflow/263531)
**Author:** [@Jonathan\_Tan](https://discuss.elastic.co/u/Jonathan_Tan)\ **Replies:** 2\ **Last updated:** [February 8, 2021, 8:58pm UTC](https://discuss.elastic.co/t/swapping-alias-workflow/263531 "2021-02-08T20:58:33Z")
Hi, I'm looking for some advice about swapping what an alias is pointing at. We're using logstash to index events into ES, in the good ole format of logstash-metrics-YYYY-MM-dd. Now, we've discovered that we need to r… --- ## [Updated geoip](https://discuss.elastic.co/t/updated-geoip/263043)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 11\ **Last updated:** [February 8, 2021, 8:53pm UTC](https://discuss.elastic.co/t/updated-geoip/263043 "2021-02-08T20:53:24Z")
I configured the geoip in logstash. I have it updated. Can you help me with a sample configuration? --- ## [Persistent Kibana shard failure error for oldest shown data](https://discuss.elastic.co/t/persistent-kibana-shard-failure-error-for-oldest-shown-data/262910)
**Author:** [@cealliance](https://discuss.elastic.co/u/cealliance)\ **Replies:** 3\ **Last updated:** [February 8, 2021, 8:41pm UTC](https://discuss.elastic.co/t/persistent-kibana-shard-failure-error-for-oldest-shown-data/262910 "2021-02-08T20:41:32Z")
When opening any visualization, dashboard, or the discover tab, an error appears explaining that ~%80 of shards failed. Unless the time span is set to very small increments, e.g. 15 minutes, the oldest %80 of data never … --- ## [React Axios Elasticsearch](https://discuss.elastic.co/t/react-axios-elasticsearch/263645)
**Author:** [@ahmedch](https://discuss.elastic.co/u/ahmedch)\ **Replies:** 0\ **Last updated:** [February 8, 2021, 6:25pm UTC](https://discuss.elastic.co/t/react-axios-elasticsearch/263645 "2021-02-08T18:25:05Z")
Hello, I am working on a react app using elasticsearch , I have a problem for making post request with axios , the app is mainly based on react and Elasticsearch . This is the code working on node.js const axios = re… --- ## [Best specification server](https://discuss.elastic.co/t/best-specification-server/262585)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 6\ **Last updated:** [February 8, 2021, 6:03pm UTC](https://discuss.elastic.co/t/best-specification-server/262585 "2021-02-08T18:03:33Z")
hi guys, i have a project to make a SIEM using ELK. and it will be separate 5 server. 3 server for Elasticsearch, 1 server for Kibana, and 1 server for Logstash can you guys help me with the most ideal spec for all the… --- ## [Kibana isn't being displayed in web browser](https://discuss.elastic.co/t/kibana-isnt-being-displayed-in-web-browser/263553)
**Author:** [@ROPA8](https://discuss.elastic.co/u/ROPA8)\ **Replies:** 1\ **Last updated:** [February 8, 2021, 5:06pm UTC](https://discuss.elastic.co/t/kibana-isnt-being-displayed-in-web-browser/263553 "2021-02-08T17:06:22Z")
Hi all, I have a problem with my Kibana. Elastic Search and Kibana run well but kibana isn't loaded in web browser and it just shows white page at localhost:5602. kibana console last messages: before starting saved o… --- ## [Logstash won't run, openJDK 64-bit Server](https://discuss.elastic.co/t/logstash-wont-run-openjdk-64-bit-server/263072)
**Author:** [@Minx](https://discuss.elastic.co/u/Minx)\ **Replies:** 3\ **Last updated:** [February 8, 2021, 5:04pm UTC](https://discuss.elastic.co/t/logstash-wont-run-openjdk-64-bit-server/263072 "2021-02-08T17:04:07Z")
I try to run log stash and this happens, does anyone know what is wrong please? PS C:\\logstash-7.10.1\\bin\> .\\logstash.bat -f .\\config\\logstash.conf "Using bundled JDK: "" OpenJDK 64-Bit Server VM warning: Option UseCo… --- ## [Using SearchType "count" alternatives](https://discuss.elastic.co/t/using-searchtype-count-alternatives/263530)
**Author:** [@nara1](https://discuss.elastic.co/u/nara1)\ **Replies:** 1\ **Last updated:** [February 8, 2021, 4:28pm UTC](https://discuss.elastic.co/t/using-searchtype-count-alternatives/263530 "2021-02-08T16:28:54Z")
I have a use case where I need to use the "size" parameter in my query. I have seen the recommendation to perform two queries-- one to retrieve the count, and a second query using that count as the "size" parameter, to e… --- ## [How to convert this update script to PHP?](https://discuss.elastic.co/t/how-to-convert-this-update-script-to-php/263628)
**Author:** [@OB1290](https://discuss.elastic.co/u/OB1290)\ **Replies:** 0\ **Last updated:** [February 8, 2021, 3:48pm UTC](https://discuss.elastic.co/t/how-to-convert-this-update-script-to-php/263628 "2021-02-08T15:48:15Z")
I'm having trouble converting this request to php : POST candidates/\_update/a23OcncBXBMGOH6pwXge { "script": { "source": """ if (ctx.\_source.containsKey('file')) { ctx.\_source.file.add(\['filename':par… --- ## [Nested object aggregation performance issues](https://discuss.elastic.co/t/nested-object-aggregation-performance-issues/263625)
**Author:** [@brusko](https://discuss.elastic.co/u/brusko)\ **Replies:** 0\ **Last updated:** [February 8, 2021, 3:45pm UTC](https://discuss.elastic.co/t/nested-object-aggregation-performance-issues/263625 "2021-02-08T15:45:04Z")
Hi everyone, I'm challenged with a problem where I use nested objects. Given I have a document structure that looks like the following { "mappings": { "properties": { "id": { "type": "integ… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1054) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1056)