# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1122

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1123

---

## [Elasticsearch take snapshot then clean indices which older than 7 days](https://discuss.elastic.co/t/elasticsearch-take-snapshot-then-clean-indices-which-older-than-7-days/257957)

<div class="topic-metadata">

**Author:** [@KA3AXCTAH](https://discuss.elastic.co/u/KA3AXCTAH)\
**Replies:** 0\
**Last updated:** [December 8, 2020, 9:09am UTC](https://discuss.elastic.co/t/elasticsearch-take-snapshot-then-clean-indices-which-older-than-7-days/257957 "2020-12-08T09:09:15Z")

</div>

I have Elasticsearch 7.4.1 cluster for storing logs, and i have this SLM pattern applied in my cluster curl -X PUT "afghanistan-01.elastic:9200/\_slm/policy/nightly-snapshots?pretty" -H 'Content-Type: application/json' -…

---

## [Unbalanced disk usage ES 7.9.2](https://discuss.elastic.co/t/unbalanced-disk-usage-es-7-9-2/257955)

<div class="topic-metadata">

**Author:** [@111266](https://discuss.elastic.co/u/111266)\
**Replies:** 0\
**Last updated:** [December 8, 2020, 8:53am UTC](https://discuss.elastic.co/t/unbalanced-disk-usage-es-7-9-2/257955 "2020-12-08T08:53:17Z")

</div>

Hello. Have cluster with 3 nodes and on each node the disk is busy in different ways: node1 - free space 955.8gb node3 - free space 1.9tb node2 - free space 581.9gb All nodes have 5tb disk space and equal resourc…

---

## [Failed to execute 'Download CSV'](https://discuss.elastic.co/t/failed-to-execute-download-csv/257603)

<div class="topic-metadata">

**Author:** [@t98907](https://discuss.elastic.co/u/t98907)\
**Replies:** 6\
**Last updated:** [December 8, 2020, 8:52am UTC](https://discuss.elastic.co/t/failed-to-execute-download-csv/257603 "2020-12-08T08:52:02Z")

</div>

Hi there, Kibana: 7.8.0 'Download CSV' failed even though I am logged in as 'elastic' user. Must '\_source' be enabled on the index to run 'Download CSV'?

---

## [Elasticsearch unwanted lowercase when indexing](https://discuss.elastic.co/t/elasticsearch-unwanted-lowercase-when-indexing/257954)

<div class="topic-metadata">

**Author:** [@bogdan\_copocean](https://discuss.elastic.co/u/bogdan_copocean)\
**Replies:** 1\
**Last updated:** [December 8, 2020, 8:42am UTC](https://discuss.elastic.co/t/elasticsearch-unwanted-lowercase-when-indexing/257954 "2020-12-08T08:42:02Z")

</div>

Hi there, I have an indexing problem with Elasticsearch. I have a field with the type "text" that makes its value lowercase. I'm using Hot-Warm-Architecture policy with index templates where I specify shard settings an…

---

## [ElasticSerach Not Working](https://discuss.elastic.co/t/elasticserach-not-working/257950)

<div class="topic-metadata">

**Author:** [@Shashank\_Tripathi](https://discuss.elastic.co/u/Shashank_Tripathi)\
**Replies:** 1\
**Last updated:** [December 8, 2020, 8:36am UTC](https://discuss.elastic.co/t/elasticserach-not-working/257950 "2020-12-08T08:36:52Z")

</div>

running : /opt/elk/elasticsearch-7.10.0/bin/elasticsearch on RHEL Instance. I Have tried all possible ways to run elastic search on my RHEL instance but still i am not getting the desired result. when i hit elk server…

---

## [Span\_near fails to work as expected](https://discuss.elastic.co/t/span-near-fails-to-work-as-expected/257171)

<div class="topic-metadata">

**Author:** [@Kasper\_Kooijman](https://discuss.elastic.co/u/Kasper_Kooijman)\
**Replies:** 3\
**Last updated:** [December 8, 2020, 8:34am UTC](https://discuss.elastic.co/t/span-near-fails-to-work-as-expected/257171 "2020-12-08T08:34:57Z")

</div>

I have an Elasticsearch index structured as follows: Example entry: { 'ID': '1', 'creator': 'Sam', 'instance': 'court of cassation', 'text': \[ { 'depth': 0, 'role': 'introduction', 'caseText…

---

## [Dec 8th, 2020 \[RU\] Rank features для поиска в e-commerce](https://discuss.elastic.co/t/dec-8th-2020-ru-rank-features-e-commerce/256527)

<div class="topic-metadata">

**Author:** [@mayya](https://discuss.elastic.co/u/mayya)\
**Replies:** 0\
**Last updated:** [December 8, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-8th-2020-ru-rank-features-e-commerce/256527 "2020-12-08T08:00:01Z")

</div>

English version Современный поиск для электронной коммерции должен быть быстрым, релевантным и иметь возможность продвижения определенных результатов. Это статья расскажет как типы полей elasticsearch rank\_feature и ran…

---

## [Dec 8th, 2020 \[EN\] Rank features for e-commerce search](https://discuss.elastic.co/t/dec-8th-2020-en-rank-features-for-e-commerce-search/256525)

<div class="topic-metadata">

**Author:** [@mayya](https://discuss.elastic.co/u/mayya)\
**Replies:** 0\
**Last updated:** [December 8, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-8th-2020-en-rank-features-for-e-commerce-search/256525 "2020-12-08T08:00:01Z")

</div>

Русская версия Introduction Modern e-commerce search is expected to be fast, relevant and provide an opportunity for promoting certain results. This article demonstrates how rank\_feature and rank\_features field types of…

---

## [Elasticsearch Cluster - Difference is storage usage between nodes](https://discuss.elastic.co/t/elasticsearch-cluster-difference-is-storage-usage-between-nodes/257934)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 7\
**Last updated:** [December 8, 2020, 7:20am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-difference-is-storage-usage-between-nodes/257934 "2020-12-08T07:20:53Z")

</div>

Hi Im having 3 node cluster with / partition has 32 GB. ES data folder is /var/lib/elasticsearch which is below / partition. Before I run load testing, I had 8 Million records and "used storage" details is below node …

---

## [How to get index to refresh automatically, even when not receiving queries?](https://discuss.elastic.co/t/how-to-get-index-to-refresh-automatically-even-when-not-receiving-queries/257929)

<div class="topic-metadata">

**Author:** [@redec](https://discuss.elastic.co/u/redec)\
**Replies:** 2\
**Last updated:** [December 8, 2020, 2:49am UTC](https://discuss.elastic.co/t/how-to-get-index-to-refresh-automatically-even-when-not-receiving-queries/257929 "2020-12-08T02:49:45Z")

</div>

Is there any way to get elasticsearch to automatically refresh an index even if it never gets any queries? The reason I need to do this is I have a process which is constantly running, updating my index with delta updat…

---

## [Error while starting logstash](https://discuss.elastic.co/t/error-while-starting-logstash/257895)

<div class="topic-metadata">

**Author:** [@Lipi\_Lapsiwala](https://discuss.elastic.co/u/Lipi_Lapsiwala)\
**Replies:** 6\
**Last updated:** [December 8, 2020, 1:32am UTC](https://discuss.elastic.co/t/error-while-starting-logstash/257895 "2020-12-08T01:32:56Z")

</div>

I am trying to integrate Elastic stack (Logstash, ElasticSearch and Kibana) with IBM websphere liberty profile. I have successfully created and configured server.xml file in wlp and able to start and access the server. I…

---

## [Store enum as keyword VS integer](https://discuss.elastic.co/t/store-enum-as-keyword-vs-integer/257903)

<div class="topic-metadata">

**Author:** [@lang1991](https://discuss.elastic.co/u/lang1991)\
**Replies:** 1\
**Last updated:** [December 8, 2020, 12:53am UTC](https://discuss.elastic.co/t/store-enum-as-keyword-vs-integer/257903 "2020-12-08T00:53:27Z")

</div>

We have a layer on top of Elasticsearch to translate enums into their numeric values before querying and indexing, but I am wondering if that's necessary at all for storage savings and query performance when compared wit…

---

## [Limit on # of data nodes?](https://discuss.elastic.co/t/limit-on-of-data-nodes/257912)

<div class="topic-metadata">

**Author:** [@Jesbourne](https://discuss.elastic.co/u/Jesbourne)\
**Replies:** 10\
**Last updated:** [December 7, 2020, 10:41pm UTC](https://discuss.elastic.co/t/limit-on-of-data-nodes/257912 "2020-12-07T22:41:17Z")

</div>

Is there a limit on the number of data nodes or overall amount of data we can have in a cluster? How can we tell when we're nearing that limit? We've been told a few times by elastic employees that our limit is probably…

---

## [Indexing to index2](https://discuss.elastic.co/t/indexing-to-index2/257919)

<div class="topic-metadata">

**Author:** [@Eddie\_Adams](https://discuss.elastic.co/u/Eddie_Adams)\
**Replies:** 3\
**Last updated:** [December 7, 2020, 10:36pm UTC](https://discuss.elastic.co/t/indexing-to-index2/257919 "2020-12-07T22:36:49Z")

</div>

Is it possible to make an index1 readonly and index documents not present in index1 to index2?

---

## [How to parse an array of multi-line json objects as separate documents in ES?](https://discuss.elastic.co/t/how-to-parse-an-array-of-multi-line-json-objects-as-separate-documents-in-es/255230)

<div class="topic-metadata">

**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\
**Replies:** 3\
**Last updated:** [December 7, 2020, 10:22pm UTC](https://discuss.elastic.co/t/how-to-parse-an-array-of-multi-line-json-objects-as-separate-documents-in-es/255230 "2020-12-07T22:22:41Z")

</div>

I have a use case where I am going to be receiving a new file every hour that is picked up by filebeat and then sent to logstash. The file will look like this: \[ { "Results": { "StartWeekSec": \[ 2000, 1980…

---

## [TSVB Visualization is working differently in Read Only mode dashboard](https://discuss.elastic.co/t/tsvb-visualization-is-working-differently-in-read-only-mode-dashboard/257913)

<div class="topic-metadata">

**Author:** [@gaurav1](https://discuss.elastic.co/u/gaurav1)\
**Replies:** 0\
**Last updated:** [December 7, 2020, 9:26pm UTC](https://discuss.elastic.co/t/tsvb-visualization-is-working-differently-in-read-only-mode-dashboard/257913 "2020-12-07T21:26:20Z")

</div>

I have used Markdown in TSVB visualization for creating a master dashboards which contains static data like dashboard name and its URL. The standalone markdown visualization does not support CSS for formatting the text s…

---

## [Multiple pipelines output to one cluster - only one of them picks up logs](https://discuss.elastic.co/t/multiple-pipelines-output-to-one-cluster-only-one-of-them-picks-up-logs/257877)

<div class="topic-metadata">

**Author:** [@Ilya\_Geller](https://discuss.elastic.co/u/Ilya_Geller)\
**Replies:** 4\
**Last updated:** [December 7, 2020, 8:38pm UTC](https://discuss.elastic.co/t/multiple-pipelines-output-to-one-cluster-only-one-of-them-picks-up-logs/257877 "2020-12-07T20:38:48Z")

</div>

Hi, I have a logstash node that has two pipelines that pick up different inputs and do separate things but both of them output to the same ES cluster into different indeces. Both pipelines have the following defined: …

---

## [Elastic : Problème avec format décimal à l'indexation (document non indexé)](https://discuss.elastic.co/t/elastic-probleme-avec-format-decimal-a-lindexation-document-non-indexe/257587)

<div class="topic-metadata">

**Author:** [@oldiequattro](https://discuss.elastic.co/u/oldiequattro)\
**Replies:** 9\
**Last updated:** [December 7, 2020, 8:00pm UTC](https://discuss.elastic.co/t/elastic-probleme-avec-format-decimal-a-lindexation-document-non-indexe/257587 "2020-12-07T20:00:00Z")

</div>

Bonjour, Je vous expose ici un souci rencontré chez nos environnement avec l'indexation d'une ligne dans Elasticsearch qui ne se fait pas dès que la valeur décimale contenue dans la clé dépasse 64 ( effet de bord d'un c…

---

## [Including dynamic templates for the elastic index](https://discuss.elastic.co/t/including-dynamic-templates-for-the-elastic-index/257784)

<div class="topic-metadata">

**Author:** [@radhika](https://discuss.elastic.co/u/radhika)\
**Replies:** 3\
**Last updated:** [December 7, 2020, 8:03pm UTC](https://discuss.elastic.co/t/including-dynamic-templates-for-the-elastic-index/257784 "2020-12-07T20:03:42Z")

</div>

Hello everyone, I have an elastic index with the mappings set to strict except for one field which is dynamic. I would also like to set the mapping of the dynamic field using dynamic templates PUT trial { "mappings"…

---

## [Kafka Output fails to authenticate with kerberos](https://discuss.elastic.co/t/kafka-output-fails-to-authenticate-with-kerberos/257906)

<div class="topic-metadata">

**Author:** [@burkeg](https://discuss.elastic.co/u/burkeg)\
**Replies:** 0\
**Last updated:** [December 7, 2020, 7:57pm UTC](https://discuss.elastic.co/t/kafka-output-fails-to-authenticate-with-kerberos/257906 "2020-12-07T19:57:56Z")

</div>

I'm trying to write data to Kafka broker authenticated with Kerberos with GSSAPI and SASL. When I start the logstash agent it errors out with Receive Timeout from Kerberos but when i use kinit to get the ticket from kerb…

---

## [Modify All Logs Before Giving To Filter](https://discuss.elastic.co/t/modify-all-logs-before-giving-to-filter/257815)

<div class="topic-metadata">

**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\
**Replies:** 1\
**Last updated:** [December 7, 2020, 7:50pm UTC](https://discuss.elastic.co/t/modify-all-logs-before-giving-to-filter/257815 "2020-12-07T19:50:48Z")

</div>

Hello everyone, Imagine that I have a codec plugin for input and my logs like this : 00:23 Lorem Ipsum 13:35 Lorem Ipsum 14:00 DATE-LINE 01/01/2020 15:43 Lorem Ipsum 20:20 Lorem Ipsum 00:15 Lorem Ipsum 13:10 DAT…

---

## [Help with \`docCount\`](https://discuss.elastic.co/t/help-with-doccount/257894)

<div class="topic-metadata">

**Author:** [@tiagokalinke](https://discuss.elastic.co/u/tiagokalinke)\
**Replies:** 0\
**Last updated:** [December 7, 2020, 6:57pm UTC](https://discuss.elastic.co/t/help-with-doccount/257894 "2020-12-07T18:57:55Z")

</div>

Hi. I am using the Explain API to understand the relevance of a result. However, for each request the docCount is varying. { "size": 6, "query": { "bool": { "must": \[ …

---

## [Error in Dashboard/ \[filebeat System\]](https://discuss.elastic.co/t/error-in-dashboard-filebeat-system/257731)

<div class="topic-metadata">

**Author:** [@prat](https://discuss.elastic.co/u/prat)\
**Replies:** 10\
**Last updated:** [December 7, 2020, 6:14pm UTC](https://discuss.elastic.co/t/error-in-dashboard-filebeat-system/257731 "2020-12-07T18:14:35Z")

</div>

Hi Team, I am getting error (as attached) when clicked in Dashboard and selected file-beat, here I am getting error for tabs Sudo commands | SSH logins | New users and groups. How can I see all this information. …

---

## [Is it possible to create a new instance or cluster automatically after some number of space created?](https://discuss.elastic.co/t/is-it-possible-to-create-a-new-instance-or-cluster-automatically-after-some-number-of-space-created/257884)

<div class="topic-metadata">

**Author:** [@sunil\_petkar](https://discuss.elastic.co/u/sunil_petkar)\
**Replies:** 0\
**Last updated:** [December 7, 2020, 6:02pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-a-new-instance-or-cluster-automatically-after-some-number-of-space-created/257884 "2020-12-07T18:02:59Z")

</div>

Is it possible to create a new instance or cluster automatically after some number of space created? And add new space to new cluster / instance . Because we have 30K user and we can create max 1000 space for better p…

---

## [The Elasticsearch server could not be reached. Further data is therefore unavailable](https://discuss.elastic.co/t/the-elasticsearch-server-could-not-be-reached-further-data-is-therefore-unavailable/257701)

<div class="topic-metadata">

**Author:** [@webapps](https://discuss.elastic.co/u/webapps)\
**Replies:** 2\
**Last updated:** [December 7, 2020, 3:28pm UTC](https://discuss.elastic.co/t/the-elasticsearch-server-could-not-be-reached-further-data-is-therefore-unavailable/257701 "2020-12-07T15:28:11Z")

</div>

Hey, I'm trying to setup the Elasticsearch server in the search-api drupal 8. But I'm getting the above message when I save the server. In parallel with that I accessed the Elasticsearch server URI in the postman, but …

---

## [Auto-login in iFrame using nginx proxy](https://discuss.elastic.co/t/auto-login-in-iframe-using-nginx-proxy/257322)

<div class="topic-metadata">

**Author:** [@Docrom](https://discuss.elastic.co/u/Docrom)\
**Replies:** 3\
**Last updated:** [December 7, 2020, 5:02pm UTC](https://discuss.elastic.co/t/auto-login-in-iframe-using-nginx-proxy/257322 "2020-12-07T17:02:49Z")

</div>

Hello everyone, I'm trying to follow the post here in order login to my Kibana iFrame via nginx as proxy but I fail. I'm not really good with proxies and nginx in particular so maybe I'm missing something important tha…

---

## ["destination.geo.country\_iso\_code" field with logstash geoip?](https://discuss.elastic.co/t/destination-geo-country-iso-code-field-with-logstash-geoip/257482)

<div class="topic-metadata">

**Author:** [@Camille](https://discuss.elastic.co/u/Camille)\
**Replies:** 4\
**Last updated:** [December 7, 2020, 3:59pm UTC](https://discuss.elastic.co/t/destination-geo-country-iso-code-field-with-logstash-geoip/257482 "2020-12-07T15:59:07Z")

</div>

Hi, is it possible to have to " destination.geo.country\_iso\_code" field with the geoip plugin in logstash ? I use it but similar output fields are "destination.geo.country\_code2" and "destination.geo.country\_code3" and…

---

## [Kibana action webhook failing](https://discuss.elastic.co/t/kibana-action-webhook-failing/257855)

<div class="topic-metadata">

**Author:** [@Alexhutchinson](https://discuss.elastic.co/u/Alexhutchinson)\
**Replies:** 1\
**Last updated:** [December 7, 2020, 3:58pm UTC](https://discuss.elastic.co/t/kibana-action-webhook-failing/257855 "2020-12-07T15:58:53Z")

</div>

Hi! I have an 7.10 stack running in ECK, and have a webhook Alert and Action set up (Linked to a custom Security Detection Rule). The webhook endpoint is HTTPS with a self-signed certificate. When hitting test on the c…

---

## [Current Time Marker in vega-lite chart](https://discuss.elastic.co/t/current-time-marker-in-vega-lite-chart/256073)

<div class="topic-metadata">

**Author:** [@shin1](https://discuss.elastic.co/u/shin1)\
**Replies:** 1\
**Last updated:** [December 7, 2020, 3:37pm UTC](https://discuss.elastic.co/t/current-time-marker-in-vega-lite-chart/256073 "2020-12-07T15:37:53Z")

</div>

Hi experts, Is there any way to draw a current time marker in vega-lite? I'd like to do it on a scatter plot written in vega-lite. Many thanks in advane, Cheers Shin

---

## [Metrics fail after several hours](https://discuss.elastic.co/t/metrics-fail-after-several-hours/257422)

<div class="topic-metadata">

**Author:** [@DucretJe](https://discuss.elastic.co/u/DucretJe)\
**Replies:** 8\
**Last updated:** [December 7, 2020, 3:20pm UTC](https://discuss.elastic.co/t/metrics-fail-after-several-hours/257422 "2020-12-07T15:20:31Z")

</div>

Elasticsearch: Docker version 7.10 Kibana: Docker version 7.10 Metricbeat: Docker version 7.10 Hello, I have a strange issue with my ELK deployment. When I deploy Elasticsearch + Kibana, I get the metrics from the m…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1121)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1123)
