# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1066

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1067

---

## [Unable to listen on port 5044 for logstash on unbuntu 20.04](https://discuss.elastic.co/t/unable-to-listen-on-port-5044-for-logstash-on-unbuntu-20-04/262664)

<div class="topic-metadata">

**Author:** [@Paul\_Fleming](https://discuss.elastic.co/u/Paul_Fleming)\
**Replies:** 1\
**Last updated:** [February 1, 2021, 12:48am UTC](https://discuss.elastic.co/t/unable-to-listen-on-port-5044-for-logstash-on-unbuntu-20-04/262664 "2021-02-01T00:48:18Z")

</div>

Using Ubuntu 20.04 I have confirmed OpenSSL is running and then I have installed logstash by running the following commands. \` openssl version -a apt install logstash -y Edit the etc/hosts file and add the following …

---

## [Unregistered Authentication Agent for unix-process](https://discuss.elastic.co/t/unregistered-authentication-agent-for-unix-process/262716)

<div class="topic-metadata">

**Author:** [@Taufik\_Maulana](https://discuss.elastic.co/u/Taufik_Maulana)\
**Replies:** 1\
**Last updated:** [February 1, 2021, 12:45am UTC](https://discuss.elastic.co/t/unregistered-authentication-agent-for-unix-process/262716 "2021-02-01T00:45:39Z")

</div>

Hello everyone, I'm having trouble starting my elasticsearch . This is what journal -xe command's output. -- Subject: Unit elasticsearch.service has begun start-up -- Defined-By: systemd -- Support: http://lists.freed…

---

## [Can I connect MySQL database to elastic search?](https://discuss.elastic.co/t/can-i-connect-mysql-database-to-elastic-search/262743)

<div class="topic-metadata">

**Author:** [@Arun\_Sharma](https://discuss.elastic.co/u/Arun_Sharma)\
**Replies:** 3\
**Last updated:** [February 1, 2021, 12:43am UTC](https://discuss.elastic.co/t/can-i-connect-mysql-database-to-elastic-search/262743 "2021-02-01T00:43:42Z")

</div>

Can I connect a MySQL database with elasticsearch and will I able to make a search engine for organization after learning elasticsearch? For example : if I type on the search bar "how many employees joined today from Mu…

---

## [Reindexing doesnt work](https://discuss.elastic.co/t/reindexing-doesnt-work/262693)

<div class="topic-metadata">

**Author:** [@Deny7](https://discuss.elastic.co/u/Deny7)\
**Replies:** 1\
**Last updated:** [February 1, 2021, 12:24am UTC](https://discuss.elastic.co/t/reindexing-doesnt-work/262693 "2021-02-01T00:24:36Z")

</div>

Hi, I changed mapping to index so I wanted reindex. I have about 200 daily indicies that I want reindex. I used bellow command. When I ran it gave me 504 timeout error. When I checked GET /\_cat/indices?v there is creat…

---

## [Absolute beginner in elasticsearch](https://discuss.elastic.co/t/absolute-beginner-in-elasticsearch/262763)

<div class="topic-metadata">

**Author:** [@Werner](https://discuss.elastic.co/u/Werner)\
**Replies:** 6\
**Last updated:** [January 31, 2021, 11:36pm UTC](https://discuss.elastic.co/t/absolute-beginner-in-elasticsearch/262763 "2021-01-31T23:36:43Z")

</div>

Hallo ! :slight\_smile: I am an absolute beginner in elasticsearch and after some hours of reading and watching tutorial-videos I got the impression, that it needs a lot of knowledge and preparation, before I can make a …

---

## [Location type geo\_point](https://discuss.elastic.co/t/location-type-geo-point/262059)

<div class="topic-metadata">

**Author:** [@Elves\_Ribeiro](https://discuss.elastic.co/u/Elves_Ribeiro)\
**Replies:** 2\
**Last updated:** [January 31, 2021, 10:48pm UTC](https://discuss.elastic.co/t/location-type-geo-point/262059 "2021-01-31T22:48:12Z")

</div>

Hi, I am trying to create a map on my environment, but I am not able to create the field location type geo\_point. I am using version 7.10.2 My logstash conf geoip { source =\> "ip\_client" } mutate { add\_field =\> …

---

## [Remapping an index](https://discuss.elastic.co/t/remapping-an-index/262400)

<div class="topic-metadata">

**Author:** [@DavidoffX](https://discuss.elastic.co/u/DavidoffX)\
**Replies:** 2\
**Last updated:** [January 31, 2021, 7:38pm UTC](https://discuss.elastic.co/t/remapping-an-index/262400 "2021-01-31T19:38:43Z")

</div>

I've followed is guide in an attempt to apply a new (reduced) mapping to an existing index : I realise that this is a very old blog post. The "atomic" step which is said to re-index , doesn't seem to index any documen…

---

## [Help with reducing mapping](https://discuss.elastic.co/t/help-with-reducing-mapping/262394)

<div class="topic-metadata">

**Author:** [@DavidoffX](https://discuss.elastic.co/u/DavidoffX)\
**Replies:** 9\
**Last updated:** [January 31, 2021, 7:36pm UTC](https://discuss.elastic.co/t/help-with-reducing-mapping/262394 "2021-01-31T19:36:35Z")

</div>

Hi All. I'm new to the ELK stack, and am hoping I'm not trying to re-invent the wheel. Steep learning curve at the moment and am just after some help and guidance really. I'm using FileBeat to send logs out from our Ku…

---

## [Dynamic mapping setting not honoured](https://discuss.elastic.co/t/dynamic-mapping-setting-not-honoured/262551)

<div class="topic-metadata">

**Author:** [@DavidoffX](https://discuss.elastic.co/u/DavidoffX)\
**Replies:** 1\
**Last updated:** [January 31, 2021, 7:32pm UTC](https://discuss.elastic.co/t/dynamic-mapping-setting-not-honoured/262551 "2021-01-31T19:32:24Z")

</div>

If I create new index with a mapping definition eg. { "mappings": { "dynamic": "false", "properties": { ...} } } and then send data to it with fields that aren't included in the mapping, they ar…

---

## [GPG Key](https://discuss.elastic.co/t/gpg-key/261891)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 3\
**Last updated:** [January 31, 2021, 6:52pm UTC](https://discuss.elastic.co/t/gpg-key/261891 "2021-01-31T18:52:29Z")

</div>

hi guys, i wanna ask something about installation elastic and beats, because they need GPG-key and my server can't access public internet. how can i add a GPG Key manually? thanks

---

## [Elasticsearch configuration in a shared server/node](https://discuss.elastic.co/t/elasticsearch-configuration-in-a-shared-server-node/262729)

<div class="topic-metadata">

**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\
**Replies:** 1\
**Last updated:** [January 31, 2021, 5:32pm UTC](https://discuss.elastic.co/t/elasticsearch-configuration-in-a-shared-server-node/262729 "2021-01-31T17:32:45Z")

</div>

I do know it's better to have separate server for each job, but I have a shared server between Elasticsearch and MySQL, with a total 8 Gig RAM. we should avoid swapping in Elasticsearch, so I set bootstrap.memory\_lock: …

---

## [Multiple values match query in Update by query](https://discuss.elastic.co/t/multiple-values-match-query-in-update-by-query/262757)

<div class="topic-metadata">

**Author:** [@sarvendras](https://discuss.elastic.co/u/sarvendras)\
**Replies:** 1\
**Last updated:** [January 31, 2021, 5:16pm UTC](https://discuss.elastic.co/t/multiple-values-match-query-in-update-by-query/262757 "2021-01-31T17:16:30Z")

</div>

Hi All, I have to update one field based on match of multiple values of a field.I want to update field amt as 9000 based on query of multiple values of RRN but multiple values are not supported and giving error. Is the…

---

## [I want to except results on a specific date from elastic aggregation](https://discuss.elastic.co/t/i-want-to-except-results-on-a-specific-date-from-elastic-aggregation/262741)

<div class="topic-metadata">

**Author:** [@e997cd7e8d9915436150](https://discuss.elastic.co/u/e997cd7e8d9915436150)\
**Replies:** 0\
**Last updated:** [January 31, 2021, 7:58am UTC](https://discuss.elastic.co/t/i-want-to-except-results-on-a-specific-date-from-elastic-aggregation/262741 "2021-01-31T07:58:42Z")

</div>

This is my query that returns results on 19th Oct. GET apachelog/\_search { "size": 0, "aggs": { "NAME": { "terms": { "field": "ext.keyword", "size": 10 } } }, "query": { …

---

## [Advice for a beginner](https://discuss.elastic.co/t/advice-for-a-beginner/262749)

<div class="topic-metadata">

**Author:** [@Shivansh\_Mishra](https://discuss.elastic.co/u/Shivansh_Mishra)\
**Replies:** 1\
**Last updated:** [January 31, 2021, 11:59am UTC](https://discuss.elastic.co/t/advice-for-a-beginner/262749 "2021-01-31T11:59:41Z")

</div>

Hi all, I am trying to learn java and want to know about how the enterprise code works so I was thinking of contributing to elastic search so that I can get some mentorship. I am well versed in c# and I wanted to know …

---

## [Protect the enterprise search login page](https://discuss.elastic.co/t/protect-the-enterprise-search-login-page/262319)

<div class="topic-metadata">

**Author:** [@tonytsangln](https://discuss.elastic.co/u/tonytsangln)\
**Replies:** 6\
**Last updated:** [January 31, 2021, 9:28am UTC](https://discuss.elastic.co/t/protect-the-enterprise-search-login-page/262319 "2021-01-31T09:28:16Z")

</div>

Hi all, I am currently setting up the enterprise search free version in my server, I would like to ask is there any way can help to protect the login page? E.g only limit some IP can access the /login path. Thank you, …

---

## [Elasticsearch Node Roles Abbreviation](https://discuss.elastic.co/t/elasticsearch-node-roles-abbreviation/262724)

<div class="topic-metadata">

**Author:** [@vishakh](https://discuss.elastic.co/u/vishakh)\
**Replies:** 1\
**Last updated:** [January 30, 2021, 7:46pm UTC](https://discuss.elastic.co/t/elasticsearch-node-roles-abbreviation/262724 "2021-01-30T19:46:03Z")

</div>

Currently, I'm running ELK-Stack: 7.10 cluster On my cluster-nodes, I see "cdhilmrstw" as node roles Can anyone please explain/denote what these individual node abbreviations stands for?

---

## [Heap 50% of 30GB no docs yet](https://discuss.elastic.co/t/heap-50-of-30gb-no-docs-yet/261938)

<div class="topic-metadata">

**Author:** [@chrislinx](https://discuss.elastic.co/u/chrislinx)\
**Replies:** 4\
**Last updated:** [January 30, 2021, 6:51pm UTC](https://discuss.elastic.co/t/heap-50-of-30gb-no-docs-yet/261938 "2021-01-30T18:51:00Z")

</div>

3 physical Elasticsearch nodes in a cluster. Each node 8 core 64gb ram ubuntu svr 20.04 lts with 2TB M2 storage. 30gb Heap. 600 shards, 1 replica. I will eventually index 10TB on this cluster so 20GB per shard ~12TB. M…

---

## [Elasticsearch fails to start on ubuntu 20.04](https://discuss.elastic.co/t/elasticsearch-fails-to-start-on-ubuntu-20-04/262684)

<div class="topic-metadata">

**Author:** [@josephthejoe](https://discuss.elastic.co/u/josephthejoe)\
**Replies:** 6\
**Last updated:** [January 30, 2021, 6:28pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-on-ubuntu-20-04/262684 "2021-01-30T18:28:58Z")

</div>

There seems to be a lot of these types of posts ive gone through a ton of them and havent been able to find one spitting out similar errors to what I have. No logs just the output from systemctl status. lab@siem:~$ syst…

---

## [Suricata - ELK stack](https://discuss.elastic.co/t/suricata-elk-stack/262715)

<div class="topic-metadata">

**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\
**Replies:** 3\
**Last updated:** [January 30, 2021, 6:26pm UTC](https://discuss.elastic.co/t/suricata-elk-stack/262715 "2021-01-30T18:26:17Z")

</div>

Hi! I need to implement a IDS solution. I already have suriata running on a powerful physical serve, but i need to have the ELK stack on a different machine. Do you guys recommend any minimum system requirements for th…

---

## [Unable to search nested object with correct format](https://discuss.elastic.co/t/unable-to-search-nested-object-with-correct-format/262615)

<div class="topic-metadata">

**Author:** [@ycbencheng](https://discuss.elastic.co/u/ycbencheng)\
**Replies:** 1\
**Last updated:** [January 30, 2021, 5:39pm UTC](https://discuss.elastic.co/t/unable-to-search-nested-object-with-correct-format/262615 "2021-01-30T17:39:46Z")

</div>

Hi ELK community, I'm unable to get the nested prospects obj within the vehicle index. Here is the suppose index obj - { "\_index" : "vehicles", "\_type" : "\_doc", "\_id" : "3MZBxxxxxxx", …

---

## [Code location pointer](https://discuss.elastic.co/t/code-location-pointer/262688)

<div class="topic-metadata">

**Author:** [@mbenitez](https://discuss.elastic.co/u/mbenitez)\
**Replies:** 2\
**Last updated:** [January 30, 2021, 2:34pm UTC](https://discuss.elastic.co/t/code-location-pointer/262688 "2021-01-30T14:34:35Z")

</div>

Hello, I was wondering if someone here in the community could help me with some code location pointers. I am working on a project, and as part of the project I am looking at the Elasticsearch source code. I am interest…

---

## [How do i get the message field?](https://discuss.elastic.co/t/how-do-i-get-the-message-field/262711)

<div class="topic-metadata">

**Author:** [@walid\_lakehal](https://discuss.elastic.co/u/walid_lakehal)\
**Replies:** 4\
**Last updated:** [January 30, 2021, 2:05pm UTC](https://discuss.elastic.co/t/how-do-i-get-the-message-field/262711 "2021-01-30T14:05:37Z")

</div>

Hello , i am trying to get the "message" field to use it in a web site dashboard , in this example it's just the result of an ls command

---

## [Theoretical IMPORTANT questions about architecture of elasticsearch](https://discuss.elastic.co/t/theoretical-important-questions-about-architecture-of-elasticsearch/262596)

<div class="topic-metadata">

**Author:** [@111433](https://discuss.elastic.co/u/111433)\
**Replies:** 6\
**Last updated:** [January 30, 2021, 9:47am UTC](https://discuss.elastic.co/t/theoretical-important-questions-about-architecture-of-elasticsearch/262596 "2021-01-30T09:47:06Z")

</div>

Hello, we are developing a searching engine with elasticsearch and already have 3 nodes on dedicated servers for each. We almost have read the documentation, but faced to a couple of problems. about our servers: we ha…

---

## [Cat allocation disk.indices higher than disk.used or disk.total](https://discuss.elastic.co/t/cat-allocation-disk-indices-higher-than-disk-used-or-disk-total/262709)

<div class="topic-metadata">

**Author:** [@LJRamsey](https://discuss.elastic.co/u/LJRamsey)\
**Replies:** 0\
**Last updated:** [January 30, 2021, 9:24am UTC](https://discuss.elastic.co/t/cat-allocation-disk-indices-higher-than-disk-used-or-disk-total/262709 "2021-01-30T09:24:01Z")

</div>

Hello, We have a cluster that was upgraded priori this week from version 5.6.16 to version 6.8.13 and upgrade succeeded and everything was running as expected. One day later one of the data node reached disk watermark …

---

## [Where in kibana i can analyze logs coming from logstash , logs that are off line](https://discuss.elastic.co/t/where-in-kibana-i-can-analyze-logs-coming-from-logstash-logs-that-are-off-line/262705)

<div class="topic-metadata">

**Author:** [@umen](https://discuss.elastic.co/u/umen)\
**Replies:** 2\
**Last updated:** [January 30, 2021, 9:11am UTC](https://discuss.elastic.co/t/where-in-kibana-i-can-analyze-logs-coming-from-logstash-logs-that-are-off-line/262705 "2021-01-30T09:11:12Z")

</div>

Hello all i have elastic search which have 2 modes or 2 streams of logs first is the filebeat real-time logs which i can analyze in the kibana logs section. The second is online logs that are uploaded to s3 and they a…

---

## [MISP and Elastic Security](https://discuss.elastic.co/t/misp-and-elastic-security/257644)

<div class="topic-metadata">

**Author:** [@Ameer\_Mukadam](https://discuss.elastic.co/u/Ameer_Mukadam)\
**Replies:** 15\
**Last updated:** [January 30, 2021, 8:45am UTC](https://discuss.elastic.co/t/misp-and-elastic-security/257644 "2021-01-30T08:45:20Z")

</div>

I have a use case where I want to index attributes from MISP to Elasticsearch for using the new Threat Matching rule in Elastic Security 7.10. Everything is working fine but the issue is when I try to ingest more attrib…

---

## [Problem in deploying an Elasticsearch cluster](https://discuss.elastic.co/t/problem-in-deploying-an-elasticsearch-cluster/262703)

<div class="topic-metadata">

**Author:** [@AayushPatel](https://discuss.elastic.co/u/AayushPatel)\
**Replies:** 1\
**Last updated:** [January 30, 2021, 8:02am UTC](https://discuss.elastic.co/t/problem-in-deploying-an-elasticsearch-cluster/262703 "2021-01-30T08:02:30Z")

</div>

Hi I tried to deploy an ELasticsearch cluster by first installing 3 master nodes (stacks 7.9) everything is fine but when I try to connect the nodes to each other some weird situation occurs. at first all the nodes wo…

---

## [Boundary Search x miles from original Boundary](https://discuss.elastic.co/t/boundary-search-x-miles-from-original-boundary/256239)

<div class="topic-metadata">

**Author:** [@mecham](https://discuss.elastic.co/u/mecham)\
**Replies:** 1\
**Last updated:** [January 30, 2021, 7:15am UTC](https://discuss.elastic.co/t/boundary-search-x-miles-from-original-boundary/256239 "2021-01-30T07:15:38Z")

</div>

I can across this article and found it very useful: I am trying to achieve something a little different and I thought you might be able to advise. On Rightmove.co.uk you can perform a radius search: https://www.righ…

---

## [Log source "unknown" in Observability Overview](https://discuss.elastic.co/t/log-source-unknown-in-observability-overview/262568)

<div class="topic-metadata">

**Author:** [@strophy](https://discuss.elastic.co/u/strophy)\
**Replies:** 3\
**Last updated:** [January 30, 2021, 4:20am UTC](https://discuss.elastic.co/t/log-source-unknown-in-observability-overview/262568 "2021-01-30T04:20:38Z")

</div>

I'm new to Elastic Stack and have successfully set up a pipeline with Filebeat, Elasticsearch and Kibana to ingest data from log files. I have set up the display fields in Observability settings, which works for the Logs…

---

## [Return the top k hits from each bucket after aggregation?](https://discuss.elastic.co/t/return-the-top-k-hits-from-each-bucket-after-aggregation/262687)

<div class="topic-metadata">

**Author:** [@sabetai](https://discuss.elastic.co/u/sabetai)\
**Replies:** 2\
**Last updated:** [January 30, 2021, 12:25am UTC](https://discuss.elastic.co/t/return-the-top-k-hits-from-each-bucket-after-aggregation/262687 "2021-01-30T00:25:17Z")

</div>

I'd like the top k hits from each index to be returned, I'm using the following query: GET /index-\*/\_search { "query": { "multi\_match": { "query": "word1 word2", "type": "phrase", "fields": \["fie…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1065)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1067)
