# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1110 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1111 --- ## [Automatically elastic operator pod went down and up](https://discuss.elastic.co/t/automatically-elastic-operator-pod-went-down-and-up/258840)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 4\ **Last updated:** [December 16, 2020, 3:53pm UTC](https://discuss.elastic.co/t/automatically-elastic-operator-pod-went-down-and-up/258840 "2020-12-16T15:53:36Z")
Deployed Elasticsearch cluster in GCP. Without making any changes, operator pod goes down and after sometime pods get restarted. Elastic operator version is 1.1.0 . Below is logs of elastic operator pod . {"log.level":… --- ## [Does close index free up disk or memory](https://discuss.elastic.co/t/does-close-index-free-up-disk-or-memory/258868)
**Author:** [@divya\_lakshmi](https://discuss.elastic.co/u/divya_lakshmi)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 6:40am UTC](https://discuss.elastic.co/t/does-close-index-free-up-disk-or-memory/258868 "2020-12-17T06:40:14Z")
Hi, I am using elasticsearch6.5 as single node, using 8GB of JVM and just 3% of memory is free. Will closing index using close API help to free heap memory .please tell what are the advantages of close index --- ## [Salesforce Login History into SIEM or Logstash](https://discuss.elastic.co/t/salesforce-login-history-into-siem-or-logstash/258796)
**Author:** [@involuntary-pretzel](https://discuss.elastic.co/u/involuntary-pretzel)\ **Replies:** 1\ **Last updated:** [December 17, 2020, 6:03am UTC](https://discuss.elastic.co/t/salesforce-login-history-into-siem-or-logstash/258796 "2020-12-17T06:03:40Z")
Hi there, I'm trying to get Salesforce Login History into the SIEM or at least into Logstash so I can ship it to Elasticsearch. I notice Logstash has a Salesforce Plugin, do you know if that has the ability to ship Logi… --- ## [How to find Retention Rate of users in kibana](https://discuss.elastic.co/t/how-to-find-retention-rate-of-users-in-kibana/258705)
**Author:** [@dharanesh](https://discuss.elastic.co/u/dharanesh)\ **Replies:** 4\ **Last updated:** [December 17, 2020, 4:23am UTC](https://discuss.elastic.co/t/how-to-find-retention-rate-of-users-in-kibana/258705 "2020-12-17T04:23:01Z")
How to create a chart in kibana to represent Retention Rate. --- ## [Mapping fields xxx cannot be replaced during template composition](https://discuss.elastic.co/t/mapping-fields-xxx-cannot-be-replaced-during-template-composition/258938)
**Author:** [@amingo123](https://discuss.elastic.co/u/amingo123)\ **Replies:** 0\ **Last updated:** [December 17, 2020, 2:44am UTC](https://discuss.elastic.co/t/mapping-fields-xxx-cannot-be-replaced-during-template-composition/258938 "2020-12-17T02:44:06Z")
When i try to create new index as below, PUT /message202010 { "mappings": { "properties": { "CrashStatus": { "type": "keyword"}}}} i got the error message: { "error" : { "root\_cause" : \[ { "type" : "illegal\_a… --- ## [How to have an attribute value to really make a difference in score? (help with rank\_feature needed)](https://discuss.elastic.co/t/how-to-have-an-attribute-value-to-really-make-a-difference-in-score-help-with-rank-feature-needed/258927)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 11:33pm UTC](https://discuss.elastic.co/t/how-to-have-an-attribute-value-to-really-make-a-difference-in-score-help-with-rank-feature-needed/258927 "2020-12-16T23:33:29Z")
Hello we have an attribute in our documents called "popularity", which is a number between 0 and 100. Our goal is to boost the relevance of the results in such a way that the results will look ordered by popularity and … --- ## [Elasticsearch 7.7.1 Increasing index.mapping.total\_fields.limit](https://discuss.elastic.co/t/elasticsearch-7-7-1-increasing-index-mapping-total-fields-limit/258871)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 10:34pm UTC](https://discuss.elastic.co/t/elasticsearch-7-7-1-increasing-index-mapping-total-fields-limit/258871 "2020-12-16T22:34:16Z")
I have read the below discussions https://discuss.elastic.co/t/index-mapping-total-fields-limit-is-important-only-for-query-operations/218217 https://discuss.elastic.co/t/what-is-the-downside-of-increasing-index-mappin… --- ## [Logstash error: Java::JavaLang::NoClassDefFoundError: javax/xml/bind/DatatypeConverter](https://discuss.elastic.co/t/logstash-error-java-javax-xml-bind-datatypeconverter/258920)
**Author:** [@streible](https://discuss.elastic.co/u/streible)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 10:24pm UTC](https://discuss.elastic.co/t/logstash-error-java-javax-xml-bind-datatypeconverter/258920 "2020-12-16T22:24:50Z")
Hi everyone, I'm hoping someone can lend a hand or give some guidance. I have recently installed Elasticsearch on Ubuntu 20.04 and have most everything up and running. I am working with SQL Server 2019 on a remote mac… --- ## [Can i get via API info about indicies but like pattern(index1\*,index2\*)?](https://discuss.elastic.co/t/can-i-get-via-api-info-about-indicies-but-like-pattern-index1-index2/258877)
**Author:** [@Andrew\_Foxis](https://discuss.elastic.co/u/Andrew_Foxis)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 10:07pm UTC](https://discuss.elastic.co/t/can-i-get-via-api-info-about-indicies-but-like-pattern-index1-index2/258877 "2020-12-16T22:07:10Z")
Hi all! Can i get via API info about indicies but like pattern (index1\*,index2\*)? I get info by API "GET /\_cat/indices?h=index,store.size&bytes=kb&format=json" and result like: \[ { "index" : "index1-2020.12.16", "s… --- ## [Elasticsearch Windows Manager GUI](https://discuss.elastic.co/t/elasticsearch-windows-manager-gui/258887)
**Author:** [@chintushah46](https://discuss.elastic.co/u/chintushah46)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 10:05pm UTC](https://discuss.elastic.co/t/elasticsearch-windows-manager-gui/258887 "2020-12-16T22:05:17Z")
Hello, I am looking more details about the Manager GUI feature, which can be triggered through elasticsearch-service.bat manager For example, From "Java" tab, where all the details related to Java options are b… --- ## [As of 7.x log4j2 no longer supports "IfLastModified"](https://discuss.elastic.co/t/as-of-7-x-log4j2-no-longer-supports-iflastmodified/258918)
**Author:** [@Eric\_Bates](https://discuss.elastic.co/u/Eric_Bates)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 10:01pm UTC](https://discuss.elastic.co/t/as-of-7-x-log4j2-no-longer-supports-iflastmodified/258918 "2020-12-16T22:01:39Z")
There is an example given on Logging to rotate logs every 7 days instead of waiting for 2G of logs to accumulate. This example worked well for ELK 6.x, but as of upgrading to 7.x, it now produces the error: Dec 16 16:42… --- ## [Elasticsearch 7.10 : How to safely remove a node and free up space?](https://discuss.elastic.co/t/elasticsearch-7-10-how-to-safely-remove-a-node-and-free-up-space/258624)
**Author:** [@Soumya\_Ranjan\_Sahoo](https://discuss.elastic.co/u/Soumya_Ranjan_Sahoo)\ **Replies:** 3\ **Last updated:** [December 16, 2020, 9:24pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-how-to-safely-remove-a-node-and-free-up-space/258624 "2020-12-16T21:24:28Z")
As I am running out of my disk space, I want to remove all the indices from the node. Note that I have just one node, and I am running the elastic server on my local machine. Basically, when I start the elastic server, … --- ## [Can you have multiple actions in one single mutate block?](https://discuss.elastic.co/t/can-you-have-multiple-actions-in-one-single-mutate-block/258913)
**Author:** [@nnet](https://discuss.elastic.co/u/nnet)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 9:10pm UTC](https://discuss.elastic.co/t/can-you-have-multiple-actions-in-one-single-mutate-block/258913 "2020-12-16T21:10:15Z")
Can you have multiple actions in one single mutate block or do you need a mutate block for each: mutate { copy =\> { "server\_name" =\> "syslog\_hostname" } replace =\> { "syslog\_program" =\> "\_geoip\_lookup\_failure" } } o… --- ## [Logstash configuration](https://discuss.elastic.co/t/logstash-configuration/258914)
**Author:** [@Cosmin\_Ciobanu1](https://discuss.elastic.co/u/Cosmin_Ciobanu1)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 8:51pm UTC](https://discuss.elastic.co/t/logstash-configuration/258914 "2020-12-16T20:51:00Z")
Hi! I've installed Logstash on my Kali platform and, as it says on official site, path.settings value should be "/etc/logstash/", but when I want to use keystores I receive an error which says that I need to put my file… --- ## [Logstash - configuring pipeline.workers for input stage](https://discuss.elastic.co/t/logstash-configuring-pipeline-workers-for-input-stage/258900)
**Author:** [@nages](https://discuss.elastic.co/u/nages)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 7:47pm UTC](https://discuss.elastic.co/t/logstash-configuring-pipeline-workers-for-input-stage/258900 "2020-12-16T19:47:47Z")
It seems that pipeline.workers allows to configure worker threads for filter and output stage. -w, --pipeline.workers COUNT Sets the number of pipeline workers to run. This option sets the number of workers that will,… --- ## [String field in Discover is not sortable, and .keyword field and alias field are both empty](https://discuss.elastic.co/t/string-field-in-discover-is-not-sortable-and-keyword-field-and-alias-field-are-both-empty/258892)
**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\ **Replies:** 3\ **Last updated:** [December 16, 2020, 7:31pm UTC](https://discuss.elastic.co/t/string-field-in-discover-is-not-sortable-and-keyword-field-and-alias-field-are-both-empty/258892 "2020-12-16T19:31:58Z")
We noticed that only keyword and date field are sort-able in "Discover" , not string and numeric field. I found a post that mentioned we need to use .keyword field in order to make it sortable, to enable it, we need to d… --- ## [Dynamic\_templates are not working as expected](https://discuss.elastic.co/t/dynamic-templates-are-not-working-as-expected/258193)
**Author:** [@Liat](https://discuss.elastic.co/u/Liat)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 6:54pm UTC](https://discuss.elastic.co/t/dynamic-templates-are-not-working-as-expected/258193 "2020-12-16T18:54:01Z")
I am trying ot have dynamic mapping for these objects: { participant\_1{ "role" : "role1" }, participant\_2{ "role" : "role2" }. participant\_3{ "role" : "role3" } } My mapping looks like that: "mappings": { … --- ## [Elastic Cluster restart with one master node](https://discuss.elastic.co/t/elastic-cluster-restart-with-one-master-node/258278)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 9\ **Last updated:** [December 16, 2020, 6:47pm UTC](https://discuss.elastic.co/t/elastic-cluster-restart-with-one-master-node/258278 "2020-12-16T18:47:46Z")
I have 6 nodes elastic cluster. node1 - master node2 - master node3 - data node4 - data node5 - data node6 - master, data node1,2,3,4 and node5 are primary nodes node6 is DR node I want to all primary nodes and … --- ## [Date/Timestamp showing wrong in Discover](https://discuss.elastic.co/t/date-timestamp-showing-wrong-in-discover/258897)
**Author:** [@fastxl](https://discuss.elastic.co/u/fastxl)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 6:05pm UTC](https://discuss.elastic.co/t/date-timestamp-showing-wrong-in-discover/258897 "2020-12-16T18:05:26Z")
New to Elasticsearch and trying to learn how things work. When I input the following in Dev Tools PUT /ptest-1/\_doc/1 { "timestamp": "2020-12-16T10:53:01.358062", "computer\_name": "HP-8740W", "UserName": "Eric", "Active… --- ## [Longer search queue when we have low search thread utilization](https://discuss.elastic.co/t/longer-search-queue-when-we-have-low-search-thread-utilization/258857)
**Author:** [@amishar](https://discuss.elastic.co/u/amishar)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 5:22pm UTC](https://discuss.elastic.co/t/longer-search-queue-when-we-have-low-search-thread-utilization/258857 "2020-12-16T17:22:03Z")
We are seeing slow query performance on elastic-search. This coincide with increase in search queue size but at the same time active search threads as a percentage of search thread pool size is pretty low. This indicate … --- ## [Kibana - APM UI - Service Health Indicator](https://discuss.elastic.co/t/kibana-apm-ui-service-health-indicator/258895)
**Author:** [@chandra2037](https://discuss.elastic.co/u/chandra2037)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 5:07pm UTC](https://discuss.elastic.co/t/kibana-apm-ui-service-health-indicator/258895 "2020-12-16T17:07:52Z")
Hi, Elasticsearch - v7.10.1 Kibana - V7.10.1 Recently upgraded to Elastic stack to 7.10.1. And enabled Anomaly detection on services, which is a cool feature. After enabling this, able to see the health indicators fo… --- ## [Logstash is periodically hanging (unresponsive) and not sending anything to ES. How to recognize and fix?](https://discuss.elastic.co/t/logstash-is-periodically-hanging-unresponsive-and-not-sending-anything-to-es-how-to-recognize-and-fix/258896)
**Author:** [@user2416](https://discuss.elastic.co/u/user2416)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 5:10pm UTC](https://discuss.elastic.co/t/logstash-is-periodically-hanging-unresponsive-and-not-sending-anything-to-es-how-to-recognize-and-fix/258896 "2020-12-16T17:10:06Z")
We are running logstash on Kubernetes. And some logstash Pods stops inserting data into ES for some unknown reason periodically (once in 2-7 days) And logstash does not indicate there's something wrong with it. I mean t… --- ## [Not able to connect to DB2 using JDBC\_Static Pluginwith securityMechanism=13](https://discuss.elastic.co/t/not-able-to-connect-to-db2-using-jdbc-static-pluginwith-securitymechanism-13/258807)
**Author:** [@tgkumarmca](https://discuss.elastic.co/u/tgkumarmca)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 4:27pm UTC](https://discuss.elastic.co/t/not-able-to-connect-to-db2-using-jdbc-static-pluginwith-securitymechanism-13/258807 "2020-12-16T16:27:11Z")
Hi All, I'm trying to connect to the DB2 database where the security mechanism was configured as 13 using the JDBC\_Static plugin. I have tried passing the JDBC Connection as following ways. However, I don't have any luc… --- ## [Positive lookahead not working](https://discuss.elastic.co/t/positive-lookahead-not-working/258752)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 3\ **Last updated:** [December 16, 2020, 4:10pm UTC](https://discuss.elastic.co/t/positive-lookahead-not-working/258752 "2020-12-16T16:10:15Z")
hi guys, i want to return or get output 40:123 , whereas input is 40$:123 ---- want to use lookahead , but it always return in output if i use below...any idea, need to used lookahead $ is must in named capture. inpu… --- ## [Runing 2 different logstash config at the same time](https://discuss.elastic.co/t/runing-2-different-logstash-config-at-the-same-time/258889)
**Author:** [@Arezki76](https://discuss.elastic.co/u/Arezki76)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 3:50pm UTC](https://discuss.elastic.co/t/runing-2-different-logstash-config-at-the-same-time/258889 "2020-12-16T15:50:26Z")
Hi, I have 2 different config files, one to track logs files, and another to interact with DB to build a dashboard. I want to start logstash for these 2 config files, to generates 2 differents indices. Can someone tel… --- ## [Split visualizations on Dynamic properties](https://discuss.elastic.co/t/split-visualizations-on-dynamic-properties/258812)
**Author:** [@Mohammed\_Farhan\_Ejaz](https://discuss.elastic.co/u/Mohammed_Farhan_Ejaz)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 3:50pm UTC](https://discuss.elastic.co/t/split-visualizations-on-dynamic-properties/258812 "2020-12-16T15:50:21Z")
How can we split a visualization example, a vertical bar graph based on the properties of the document? I have multiple documents each with some dynamic properties example Document 1 { ... "requ… --- ## [Elasticsearch.service problem](https://discuss.elastic.co/t/elasticsearch-service-problem/258831)
**Author:** [@salva12](https://discuss.elastic.co/u/salva12)\ **Replies:** 3\ **Last updated:** [December 16, 2020, 3:44pm UTC](https://discuss.elastic.co/t/elasticsearch-service-problem/258831 "2020-12-16T15:44:43Z")
Dec 16 08:49:58 104-45-22-197.cprapid.com systemd-entrypoint\[18969\]: at org.elasticsearch.core.internal.io.IOUtils.close(IOUtils.java:99) Dec 16 08:49:58 104-45-22-197.cprapid.com systemd-entrypoint\[18969\]: at org.elasti… --- ## [Aggregation over a paginated query](https://discuss.elastic.co/t/aggregation-over-a-paginated-query/258792)
**Author:** [@solenom85](https://discuss.elastic.co/u/solenom85)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 3:41pm UTC](https://discuss.elastic.co/t/aggregation-over-a-paginated-query/258792 "2020-12-16T15:41:47Z")
Hi. I have a question regarding to running an aggregation on a paginated query. For example, this query: { "size": 0, "from": 100, "query": { "match\_all": {} }, … --- ## [Index lifecycle error, security\_exception: Adding an alias is not allowed when the alias has more permissions than any of the indices](https://discuss.elastic.co/t/index-lifecycle-error-security-exception-adding-an-alias-is-not-allowed-when-the-alias-has-more-permissions-than-any-of-the-indices/258275)
**Author:** [@SergiiZagrunnyi](https://discuss.elastic.co/u/SergiiZagrunnyi)\ **Replies:** 1\ **Last updated:** [December 16, 2020, 3:22pm UTC](https://discuss.elastic.co/t/index-lifecycle-error-security-exception-adding-an-alias-is-not-allowed-when-the-alias-has-more-permissions-than-any-of-the-indices/258275 "2020-12-16T15:22:00Z")
Hi here We have elastic cloud deployment and configured ILM for the APM indexes The policy fails on shrink action, failed step - aliases Its not clear why that happens and what can we do with that? ILM policy "apm… --- ## [Aggregates on collapse](https://discuss.elastic.co/t/aggregates-on-collapse/258883)
**Author:** [@Philh-gbg](https://discuss.elastic.co/u/Philh-gbg)\ **Replies:** 0\ **Last updated:** [December 16, 2020, 3:17pm UTC](https://discuss.elastic.co/t/aggregates-on-collapse/258883 "2020-12-16T15:17:33Z")
New user looking for help, I know that aggregates don't work on the collapse results but I can't seem to find a way to achieve the same affect directly. We have a relatively simple dataset that contains multiple entries … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1109) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1111)