# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1099 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1100 --- ## [Kibana transform timestamp mismatch](https://discuss.elastic.co/t/kibana-transform-timestamp-mismatch/259782)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 7:39pm UTC](https://discuss.elastic.co/t/kibana-transform-timestamp-mismatch/259782 "2020-12-29T19:39:16Z")
i am creating a transform in kibana and grouping it based on @timestamp field present in my data. while doing so i am getting the data grouped by @ 05:30:00.000. i read that, by default Kibana adjusts timestamps to th… --- ## [Flexible search nested documents](https://discuss.elastic.co/t/flexible-search-nested-documents/259802)
**Author:** [@Maksym1](https://discuss.elastic.co/u/Maksym1)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 6:37pm UTC](https://discuss.elastic.co/t/flexible-search-nested-documents/259802 "2020-12-29T18:37:43Z")
Maybe somebody has implemented such a search in nested documents. Here is my mapping: { "my-index": { "aliases": {}, "mappings": { "properties": { "customer": { … --- ## [Error using Endpoint Security in Linux](https://discuss.elastic.co/t/error-using-endpoint-security-in-linux/259316)
**Author:** [@roh](https://discuss.elastic.co/u/roh)\ **Replies:** 6\ **Last updated:** [December 29, 2020, 6:11pm UTC](https://discuss.elastic.co/t/error-using-endpoint-security-in-linux/259316 "2020-12-29T18:11:10Z")
Hi all I was testing Elastic Agent with Endpoint Security policy. I thought only malware protection doesn't work in linux, but I get this error when I try to use Endpoint Security. I also tried Endpoint Security pol… --- ## [Logstash re-read full log after restart](https://discuss.elastic.co/t/logstash-re-read-full-log-after-restart/259796)
**Author:** [@msk\_76](https://discuss.elastic.co/u/msk_76)\ **Replies:** 5\ **Last updated:** [December 29, 2020, 5:33pm UTC](https://discuss.elastic.co/t/logstash-re-read-full-log-after-restart/259796 "2020-12-29T17:33:03Z")
I am facing an issue with logstash that it read the log from begin even after it has loaded the log file already. It happens only when i restart the logstash. Inside the .sincedb file the contents are : 1149101767 0 38 … --- ## [Display latest value in a \`Bucket\`](https://discuss.elastic.co/t/display-latest-value-in-a-bucket/259577)
**Author:** [@grra](https://discuss.elastic.co/u/grra)\ **Replies:** 3\ **Last updated:** [December 29, 2020, 4:00pm UTC](https://discuss.elastic.co/t/display-latest-value-in-a-bucket/259577 "2020-12-29T16:00:29Z")
Hey, Let's say I have a set of numbers, and every minute another incremented number appears in my data. Now in Buckets I would like to visualize the highest 20 values of that set of numbers, but in ascending order. That… --- ## [ElasticSearch - Filter Buckets](https://discuss.elastic.co/t/elasticsearch-filter-buckets/259758)
**Author:** [@FuSsA](https://discuss.elastic.co/u/FuSsA)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 3:47pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-buckets/259758 "2020-12-29T15:47:29Z")
Hey ES community, My elasticSearch query is like: { "size": 0, "aggs": { "group\_by\_id": { "terms": { "field": "Infos.InstanceInfo.ID.keyword", "size": 1000 … --- ## [Hello, Help for Error : An unexpected error occurred! {:error=\>#\ **Author:** [@Muhammad\_Firdaus](https://discuss.elastic.co/u/Muhammad_Firdaus)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 3:11pm UTC](https://discuss.elastic.co/t/hello-help-for-error-an-unexpected-error-occurred-error-logstash-dont-know-how-to-handle/259787 "2020-12-29T15:11:51Z") Get Error when starting up Logstash \[2020-12-29T16:08:40,925\]\[ERROR\]\[logstash.agent \] An exception happened when converging configuration {:exception=\>LogStash::Error, :message=\>"Don't know how to handle Java:… --- ## [Can we point to elasticsearch Masternodes as input to Logstash?](https://discuss.elastic.co/t/can-we-point-to-elasticsearch-masternodes-as-input-to-logstash/259806)
**Author:** [@Pooja](https://discuss.elastic.co/u/Pooja)\ **Replies:** 2\ **Last updated:** [December 29, 2020, 3:08pm UTC](https://discuss.elastic.co/t/can-we-point-to-elasticsearch-masternodes-as-input-to-logstash/259806 "2020-12-29T15:08:38Z")
Can we point to elasticsearch Masternodes as input to Logstash? We see delay(2-3days) in data extraction from elsaticsearch while using Co-ordinating nodes as input in logstash to send data to Qradar. --- ## [Dynamic urls for Logstash http\_poller plugin](https://discuss.elastic.co/t/dynamic-urls-for-logstash-http-poller-plugin/259785)
**Author:** [@malsioufi](https://discuss.elastic.co/u/malsioufi)\ **Replies:** 7\ **Last updated:** [December 29, 2020, 2:57pm UTC](https://discuss.elastic.co/t/dynamic-urls-for-logstash-http-poller-plugin/259785 "2020-12-29T14:57:05Z")
Hi, I have an implementation of some script that calls an api to start some job, I can follow up the job status another api (jobs-api). I want to use Logstash and Elasticsearch to monitor the status of the jobs I start, … --- ## [Canvas data show is different](https://discuss.elastic.co/t/canvas-data-show-is-different/259627)
**Author:** [@salma\_widiarti](https://discuss.elastic.co/u/salma_widiarti)\ **Replies:** 2\ **Last updated:** [December 29, 2020, 2:12pm UTC](https://discuss.elastic.co/t/canvas-data-show-is-different/259627 "2020-12-29T14:12:19Z")
Hi All, I want to show data STAMP/day And this is my ES Query SELECT count(labels.status::varchar) as Stamp FROM "apm-\*" WHERE labels.status = 'STAMP' AND labels.tanggal = 'DATE(NOW())' But why the result is 0, even … --- ## [Elasticsearch and Magento 2.4.1 "No mapping found for position category"](https://discuss.elastic.co/t/elasticsearch-and-magento-2-4-1-no-mapping-found-for-position-category/253891)
**Author:** [@dani1](https://discuss.elastic.co/u/dani1)\ **Replies:** 5\ **Last updated:** [December 29, 2020, 11:59am UTC](https://discuss.elastic.co/t/elasticsearch-and-magento-2-4-1-no-mapping-found-for-position-category/253891 "2020-12-29T11:59:01Z")
Hello there, I'm facing this issue with Elasticsearch 7.6.2 with Magento 2.4. Anyone have an idea? \[2020-10-31 07:34:29\] main.CRITICAL: {"error":{"root\_cause":\[{"type":"query\_shard\_exception","reason":"No mapping found… --- ## [Elasticsearch Wildcard fieldtype has slow performance for wildcard queries](https://discuss.elastic.co/t/elasticsearch-wildcard-fieldtype-has-slow-performance-for-wildcard-queries/259662)
**Author:** [@Chris\_Doman](https://discuss.elastic.co/u/Chris_Doman)\ **Replies:** 4\ **Last updated:** [December 29, 2020, 9:31am UTC](https://discuss.elastic.co/t/elasticsearch-wildcard-fieldtype-has-slow-performance-for-wildcard-queries/259662 "2020-12-29T09:31:42Z")
I'm testing the new ElasticSearch WildCard field type (https://www.elastic.co/blog/find-strings-within-strings-faster-with-the-new-elasticsearch-wildcard-field) that is supposed to offer better wildcard queries. Strange… --- ## [Search\_after throws an exception using sort on nested filtered field containing date typed data](https://discuss.elastic.co/t/search-after-throws-an-exception-using-sort-on-nested-filtered-field-containing-date-typed-data/259783)
**Author:** [@kaore](https://discuss.elastic.co/u/kaore)\ **Replies:** 0\ **Last updated:** [December 29, 2020, 8:50am UTC](https://discuss.elastic.co/t/search-after-throws-an-exception-using-sort-on-nested-filtered-field-containing-date-typed-data/259783 "2020-12-29T08:50:38Z")
Given a mapping describing an event which contains the following nested field: ... "timings": { "type": "nested", "properties": { "begin": { "type": "date" }, "end": { "type": "date" } … --- ## [Error in visualisation; \[esaggs\] \> when trying to load a dashboard](https://discuss.elastic.co/t/error-in-visualisation-esaggs-when-trying-to-load-a-dashboard/259081)
**Author:** [@Luukv](https://discuss.elastic.co/u/Luukv)\ **Replies:** 6\ **Last updated:** [December 29, 2020, 8:45am UTC](https://discuss.elastic.co/t/error-in-visualisation-esaggs-when-trying-to-load-a-dashboard/259081 "2020-12-29T08:45:35Z")
Hello, We are using 4 dashboards in Kibana, of which 3 are working just fine. The 4th one however always crashes when loading more than the last 7 days. When loading the last 30 days, we get 1 or 2 'Error in visualizati… --- ## [Syntax to use max\_snapshot\_bytes\_per\_sec in snapshot api](https://discuss.elastic.co/t/syntax-to-use-max-snapshot-bytes-per-sec-in-snapshot-api/259778)
**Author:** [@dhina](https://discuss.elastic.co/u/dhina)\ **Replies:** 0\ **Last updated:** [December 29, 2020, 8:11am UTC](https://discuss.elastic.co/t/syntax-to-use-max-snapshot-bytes-per-sec-in-snapshot-api/259778 "2020-12-29T08:11:42Z")
I want to use the max\_snapshot\_bytes\_per\_sec to throttle the speed of the Elastic search snapshot. Checked the documentation, could not find an example on how to specify the limit. Which one of the below value is correc… --- ## [Multitenancy](https://discuss.elastic.co/t/multitenancy/259737)
**Author:** [@ArifAlili](https://discuss.elastic.co/u/ArifAlili)\ **Replies:** 6\ **Last updated:** [December 29, 2020, 7:13am UTC](https://discuss.elastic.co/t/multitenancy/259737 "2020-12-29T07:13:33Z")
Hi all, We are using Elasticsearch for our e-commerce platform, we are indexing products only. We have multiple shops under our platform, each shop is using different catalogue (produtcs). Currently we are investigatin… --- ## [Increase shard count in elastic search kubernetes](https://discuss.elastic.co/t/increase-shard-count-in-elastic-search-kubernetes/258269)
**Author:** [@rajkumar\_25](https://discuss.elastic.co/u/rajkumar_25)\ **Replies:** 4\ **Last updated:** [December 29, 2020, 6:17am UTC](https://discuss.elastic.co/t/increase-shard-count-in-elastic-search-kubernetes/258269 "2020-12-29T06:17:34Z")
I have deployed an Elastic search in GKE. ECK has 3 master and 2 data nodes. When creating an index with 1 shard and 1 replica getting 400 error response when the shard count reached 1000. Is it possible to increase the… --- ## [Unable to install logtrail plugin](https://discuss.elastic.co/t/unable-to-install-logtrail-plugin/259630)
**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\ **Replies:** 6\ **Last updated:** [December 29, 2020, 6:13am UTC](https://discuss.elastic.co/t/unable-to-install-logtrail-plugin/259630 "2020-12-29T06:13:37Z")
Hello Team, We just upgrade our ELK stack version from 6.8 to 7.10.1. We are using 3 node elasticsaerch cluster and cluster is up and running. We upgraded our kibana also from 6.8 to 7.10.1 and its also running we are a… --- ## [Error running kibana for first time after install](https://discuss.elastic.co/t/error-running-kibana-for-first-time-after-install/259604)
**Author:** [@Sama\_M](https://discuss.elastic.co/u/Sama_M)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 6:05am UTC](https://discuss.elastic.co/t/error-running-kibana-for-first-time-after-install/259604 "2020-12-29T06:05:13Z")
Hello, I have just fresh installed Ubuntu on my laptop so i can follow along a book on python data engineering. All i have installed so far is elasticsearch and kibana. When attempting to run kibana for the first time i… --- ## [In filebeat want to enable system module, postgressql modules, application logs and how i can write logstash pipeline](https://discuss.elastic.co/t/in-filebeat-want-to-enable-system-module-postgressql-modules-application-logs-and-how-i-can-write-logstash-pipeline/259772)
**Author:** [@prakash22](https://discuss.elastic.co/u/prakash22)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 6:03am UTC](https://discuss.elastic.co/t/in-filebeat-want-to-enable-system-module-postgressql-modules-application-logs-and-how-i-can-write-logstash-pipeline/259772 "2020-12-29T06:03:41Z")
In filebeat want to enable system module, postgressql modules, application logs and how i can write logstash pipeline --- ## [Why cluster UUID is different](https://discuss.elastic.co/t/why-cluster-uuid-is-different/259660)
**Author:** [@sagittar](https://discuss.elastic.co/u/sagittar)\ **Replies:** 2\ **Last updated:** [December 29, 2020, 5:58am UTC](https://discuss.elastic.co/t/why-cluster-uuid-is-different/259660 "2020-12-29T05:58:38Z")
node1 \[node\_2409:8086:8110:3f0::2d\] node2 \[node\_2409:8086:8110:3f0::2e\] node3 \[node\_2409:8086:8110:3f0::2f\] here is node1 log \[2020-12-23T02:38:57,563\]\[INFO \]\[o.e.c.c.JoinHelper \] \[node\_2409:8086:8110:3f0::2… --- ## [Grok an Elasticsearch problem](https://discuss.elastic.co/t/grok-an-elasticsearch-problem/259671)
**Author:** [@mesutalf](https://discuss.elastic.co/u/mesutalf)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 5:57am UTC](https://discuss.elastic.co/t/grok-an-elasticsearch-problem/259671 "2020-12-29T05:57:41Z")
Hi eveyone; I have ELK locally. I trying to send my mini log to Elasticsearch. My pattern is: 2020-11-30 05:52:33,018 \[9344\] INFO Dile.ServiceProvider.ServiceThread \[\] - Thread \[Core\[3u43s3-c403-4fe4-ab87-9bea0c0ab44… --- ## [Elasticsearch storage optimisation](https://discuss.elastic.co/t/elasticsearch-storage-optimisation/259641)
**Author:** [@a.oiskhine](https://discuss.elastic.co/u/a.oiskhine)\ **Replies:** 3\ **Last updated:** [December 29, 2020, 5:57am UTC](https://discuss.elastic.co/t/elasticsearch-storage-optimisation/259641 "2020-12-29T05:57:04Z")
Hello Guys, Is there any way to reduce the size of elasticsearch indexes, Thanks in advance --- ## [How can I halt the process of movement of indices from hot nodes to warm nodes in elastic?](https://discuss.elastic.co/t/how-can-i-halt-the-process-of-movement-of-indices-from-hot-nodes-to-warm-nodes-in-elastic/259717)
**Author:** [@prajwalgmpp](https://discuss.elastic.co/u/prajwalgmpp)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 5:56am UTC](https://discuss.elastic.co/t/how-can-i-halt-the-process-of-movement-of-indices-from-hot-nodes-to-warm-nodes-in-elastic/259717 "2020-12-29T05:56:31Z")
I have initiated the process of movement of week 49 indices from our designated hot nodes to warm nodes using the API: PUT \*2020.49/\_settings { "index.routing.allocation.require.data": "warm" } Now how can I halt… --- ## [Is there a way to show shard data path on a node?](https://discuss.elastic.co/t/is-there-a-way-to-show-shard-data-path-on-a-node/259759)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 5:52am UTC](https://discuss.elastic.co/t/is-there-a-way-to-show-shard-data-path-on-a-node/259759 "2020-12-29T05:52:00Z")
I am in the process of validating using nodes with multiple disks. I need an easy way to have a high level idea where the shards are located. I typically use "GET /\_cat/allocation?v" to show the overall disk usage. Th… --- ## [Python index CSV into ES date issue](https://discuss.elastic.co/t/python-index-csv-into-es-date-issue/259764)
**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\ **Replies:** 2\ **Last updated:** [December 29, 2020, 5:49am UTC](https://discuss.elastic.co/t/python-index-csv-into-es-date-issue/259764 "2020-12-29T05:49:41Z")
Hi, I use Python csv.DictReader to bulk insert CSV data into ES, i found that the date column was read as string. I tried two methods to deal with the date column data type: pre-define the index template to set the c… --- ## [Источник DEBUG сообщений](https://discuss.elastic.co/t/debug/259243)
**Author:** [@nessero](https://discuss.elastic.co/u/nessero)\ **Replies:** 5\ **Last updated:** [December 29, 2020, 5:09am UTC](https://discuss.elastic.co/t/debug/259243 "2020-12-29T05:09:08Z")
Всем доброго времени ! Настроен уровень логирования debug для поисковых запросов. Только не могу понять как найти источник который дает такое сообщение. Пример: \[2020-12-21T17:08:06,606\]\[DEBUG\]\[o.e.a.b.TransportShardBu… --- ## [How to fetch multiple return values by performing queries on multiple indices](https://discuss.elastic.co/t/how-to-fetch-multiple-return-values-by-performing-queries-on-multiple-indices/259716)
**Author:** [@sharpshooter](https://discuss.elastic.co/u/sharpshooter)\ **Replies:** 2\ **Last updated:** [December 29, 2020, 4:31am UTC](https://discuss.elastic.co/t/how-to-fetch-multiple-return-values-by-performing-queries-on-multiple-indices/259716 "2020-12-29T04:31:43Z")
Hii i am searching on multiple indices at a time on objects like Mail , Calender , Attachment and want return values of multiple types e.g :- (Mail , Calender , Attachment) but i am not able to get it please help. Thank … --- ## [High load, but lower cpu,lower IO](https://discuss.elastic.co/t/high-load-but-lower-cpu-lower-io/259047)
**Author:** [@111421](https://discuss.elastic.co/u/111421)\ **Replies:** 5\ **Last updated:** [December 29, 2020, 3:49am UTC](https://discuss.elastic.co/t/high-load-but-lower-cpu-lower-io/259047 "2020-12-29T03:49:33Z")
Hello, eyeryone I checked the es single node load through cerebor and found that the load is very high, but the cpu utilization rate is very low. Why? ES is deployed through docker, version: 6.8 cerebro: kibana: … --- ## [Insert Custom Field Name into Index Name after going through Solace Pubsub](https://discuss.elastic.co/t/insert-custom-field-name-into-index-name-after-going-through-solace-pubsub/259639)
**Author:** [@ckough](https://discuss.elastic.co/u/ckough)\ **Replies:** 1\ **Last updated:** [December 29, 2020, 1:31am UTC](https://discuss.elastic.co/t/insert-custom-field-name-into-index-name-after-going-through-solace-pubsub/259639 "2020-12-29T01:31:39Z")
Hi there I'm using ELK 7.10. My test setup is as follows: filebeat (running in kibana) -\> logstash01 -\> solace pubsub+ -\> logstash02 -\> Elasticsearch -\> kibana What I'm trying to accomplish: Insert custom fields cre… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1098) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1100)