# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1183

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1184

---

## [Email ElastAlert Not triggering on Average Aggregation query](https://discuss.elastic.co/t/email-elastalert-not-triggering-on-average-aggregation-query/252948)

<div class="topic-metadata">

**Author:** [@Chennai\_Cheetah](https://discuss.elastic.co/u/Chennai_Cheetah)\
**Replies:** 2\
**Last updated:** [October 22, 2020, 10:20am UTC](https://discuss.elastic.co/t/email-elastalert-not-triggering-on-average-aggregation-query/252948 "2020-10-22T10:20:41Z")

</div>

Mail is not triggering for my elast alert aggregator rule. I have a Elastic DSL Query which returns me an average Response time for the API for the last 15 mins. My objective is to fire email if the API average respons…

---

## [Is -Dmapper.allow\_dots\_in\_name=true setting allowed in 7.X version of ES?](https://discuss.elastic.co/t/is-dmapper-allow-dots-in-name-true-setting-allowed-in-7-x-version-of-es/252982)

<div class="topic-metadata">

**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\
**Replies:** 0\
**Last updated:** [October 22, 2020, 10:17am UTC](https://discuss.elastic.co/t/is-dmapper-allow-dots-in-name-true-setting-allowed-in-7-x-version-of-es/252982 "2020-10-22T10:17:14Z")

</div>

Hello All , Is -Dmapper.allow\_dots\_in\_name=true allowed in ES 7.X version ? I am looking for a reference document on this ? Thanks and Regards Saravana S

---

## [Elasticsearch keepalive idle timer for logstash connections via http](https://discuss.elastic.co/t/elasticsearch-keepalive-idle-timer-for-logstash-connections-via-http/252981)

<div class="topic-metadata">

**Author:** [@reykime](https://discuss.elastic.co/u/reykime)\
**Replies:** 0\
**Last updated:** [October 22, 2020, 10:11am UTC](https://discuss.elastic.co/t/elasticsearch-keepalive-idle-timer-for-logstash-connections-via-http/252981 "2020-10-22T10:11:33Z")

</div>

Hey Guys I'm currently running into an issue where i see the following messages in logstash: Marking url as dead. Last error: \[LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError\] Elasticsearch Unr…

---

## [Getting doc\_count as zero while aggregation query on index created with type LocalDate in jpa](https://discuss.elastic.co/t/getting-doc-count-as-zero-while-aggregation-query-on-index-created-with-type-localdate-in-jpa/252885)

<div class="topic-metadata">

**Author:** [@daviddavid](https://discuss.elastic.co/u/daviddavid)\
**Replies:** 1\
**Last updated:** [October 22, 2020, 9:55am UTC](https://discuss.elastic.co/t/getting-doc-count-as-zero-while-aggregation-query-on-index-created-with-type-localdate-in-jpa/252885 "2020-10-22T09:55:39Z")

</div>

Getting doc\_count as zero while aggregation query on index created with type LocalDate in jpa java. Format is "yyyy-mm-dd". Whatever I try looking here and there as help , doc\_count is coming 0. Olease help Below is qu…

---

## [Wanted to combine two different result set in one query](https://discuss.elastic.co/t/wanted-to-combine-two-different-result-set-in-one-query/252962)

<div class="topic-metadata">

**Author:** [@dattack13](https://discuss.elastic.co/u/dattack13)\
**Replies:** 2\
**Last updated:** [October 22, 2020, 9:50am UTC](https://discuss.elastic.co/t/wanted-to-combine-two-different-result-set-in-one-query/252962 "2020-10-22T09:50:25Z")

</div>

Hi There, I have requirement where I need to combine two different result based on different filter criteria for example one query is filtering records based on some true & false indicator and then other query is filter…

---

## [How to plot speed derived from time and distance using aggregation](https://discuss.elastic.co/t/how-to-plot-speed-derived-from-time-and-distance-using-aggregation/252861)

<div class="topic-metadata">

**Author:** [@NiclasK](https://discuss.elastic.co/u/NiclasK)\
**Replies:** 2\
**Last updated:** [October 22, 2020, 9:22am UTC](https://discuss.elastic.co/t/how-to-plot-speed-derived-from-time-and-distance-using-aggregation/252861 "2020-10-22T09:22:01Z")

</div>

Hi, I have an query that calculates average speed for different car makes based on the fields 'distance' and 'time' in travel documents in Elasticsearch: POST /test\_data/\_search { "size": 0, "aggs": { "speed\_per\_ma…

---

## [Newbie question: how to reindex with field value change?](https://discuss.elastic.co/t/newbie-question-how-to-reindex-with-field-value-change/252655)

<div class="topic-metadata">

**Author:** [@Admak](https://discuss.elastic.co/u/Admak)\
**Replies:** 2\
**Last updated:** [October 22, 2020, 8:10am UTC](https://discuss.elastic.co/t/newbie-question-how-to-reindex-with-field-value-change/252655 "2020-10-22T08:10:36Z")

</div>

Hi! First, sorry for the newb question, however 2h of googling proved i'm either unqualified or explicitly trying to do the task wrong way I'm trying to reindex with new mappings, however due to field data type change,…

---

## [I Want to Audit Enabled for Kibana Dev Tools Console Queries](https://discuss.elastic.co/t/i-want-to-audit-enabled-for-kibana-dev-tools-console-queries/252839)

<div class="topic-metadata">

**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\
**Replies:** 2\
**Last updated:** [October 22, 2020, 8:06am UTC](https://discuss.elastic.co/t/i-want-to-audit-enabled-for-kibana-dev-tools-console-queries/252839 "2020-10-22T08:06:07Z")

</div>

I want to keep a diary for Kibana Dev Tools Console queries. For this they told me to add xpack.audit.enabled: true line to elasticsearch.yml file and restart elasticsearch service, but when I add the line the elasticse…

---

## [Elastic doesn't create a new index](https://discuss.elastic.co/t/elastic-doesnt-create-a-new-index/252947)

<div class="topic-metadata">

**Author:** [@AlexOQ](https://discuss.elastic.co/u/AlexOQ)\
**Replies:** 5\
**Last updated:** [October 22, 2020, 8:03am UTC](https://discuss.elastic.co/t/elastic-doesnt-create-a-new-index/252947 "2020-10-22T08:03:36Z")

</div>

Hi, and thanks for any leads in advance. I am using the following output configuration: \<match \*\*\> @type rewrite\_tag\_filter @label @LOGTYPE \<rule\> key …

---

## [Debugging missing plugins after updating from 7.6.2 to 7.9.2](https://discuss.elastic.co/t/debugging-missing-plugins-after-updating-from-7-6-2-to-7-9-2/252355)

<div class="topic-metadata">

**Author:** [@tlacuache](https://discuss.elastic.co/u/tlacuache)\
**Replies:** 6\
**Last updated:** [October 22, 2020, 7:56am UTC](https://discuss.elastic.co/t/debugging-missing-plugins-after-updating-from-7-6-2-to-7-9-2/252355 "2020-10-22T07:56:15Z")

</div>

I'm working on updating a project from using Elastic OSS components at version 7.6.2 to version 7.9.2. For the most part everything has gone smoothly. However, I've gotten stuck on a few plugins that, although they insta…

---

## [Search value based on specific field as child field are dynamic](https://discuss.elastic.co/t/search-value-based-on-specific-field-as-child-field-are-dynamic/252957)

<div class="topic-metadata">

**Author:** [@ROHITHPR](https://discuss.elastic.co/u/ROHITHPR)\
**Replies:** 0\
**Last updated:** [October 22, 2020, 7:54am UTC](https://discuss.elastic.co/t/search-value-based-on-specific-field-as-child-field-are-dynamic/252957 "2020-10-22T07:54:23Z")

</div>

The collection looks like this { "displayname":"unknown12" "hierarchy":{ "username":"Nothing on", …

---

## [Expand terms in search query into boolean expression?](https://discuss.elastic.co/t/expand-terms-in-search-query-into-boolean-expression/252935)

<div class="topic-metadata">

**Author:** [@GavinM](https://discuss.elastic.co/u/GavinM)\
**Replies:** 1\
**Last updated:** [October 22, 2020, 7:42am UTC](https://discuss.elastic.co/t/expand-terms-in-search-query-into-boolean-expression/252935 "2020-10-22T07:42:37Z")

</div>

Hi Does Elastic search have a capability of reading a text file containing pattern = replacement strings, and if any terms in the search query match pattern they are replaced with the boolean expression defined on the r…

---

## [Kibana Build failure](https://discuss.elastic.co/t/kibana-build-failure/252841)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 1\
**Last updated:** [October 22, 2020, 7:34am UTC](https://discuss.elastic.co/t/kibana-build-failure/252841 "2020-10-22T07:34:01Z")

</div>

Hello, I am trying to build Kibana from the code source and I am facing this errors ( I got these errors after I run git pull, before that I built it and I had no problem ) yarn kbn bootstrap : warning Error running i…

---

## [Decimal numbers visualizations](https://discuss.elastic.co/t/decimal-numbers-visualizations/252695)

<div class="topic-metadata">

**Author:** [@gusgus1993](https://discuss.elastic.co/u/gusgus1993)\
**Replies:** 8\
**Last updated:** [October 22, 2020, 6:45am UTC](https://discuss.elastic.co/t/decimal-numbers-visualizations/252695 "2020-10-22T06:45:24Z")

</div>

Hello! I'm trying to show a sum of decimal numbers at Kibana. I'm sending as a double variable to the index pattern. When I did the sum at kibana it appears like 0. My index parttern has this format: What may be …

---

## [Inode remaing same - reading old logs. on restart gets new inode on sincedb and get new data](https://discuss.elastic.co/t/inode-remaing-same-reading-old-logs-on-restart-gets-new-inode-on-sincedb-and-get-new-data/252942)

<div class="topic-metadata">

**Author:** [@chandramouli\_sriniva](https://discuss.elastic.co/u/chandramouli_sriniva)\
**Replies:** 0\
**Last updated:** [October 22, 2020, 6:38am UTC](https://discuss.elastic.co/t/inode-remaing-same-reading-old-logs-on-restart-gets-new-inode-on-sincedb-and-get-new-data/252942 "2020-10-22T06:38:59Z")

</div>

Hi, on log rotation, inode doesnt change and it doesnt put any new entry in sincedb file. If I stop and start logstash, then new entry with new inode gets created for current file(xx.log) and new data is being sent. S…

---

## [Kibana After set basePath cannot display UI](https://discuss.elastic.co/t/kibana-after-set-basepath-cannot-display-ui/248960)

<div class="topic-metadata">

**Author:** [@Mohammad\_Iqbal](https://discuss.elastic.co/u/Mohammad_Iqbal)\
**Replies:** 2\
**Last updated:** [October 22, 2020, 3:57am UTC](https://discuss.elastic.co/t/kibana-after-set-basepath-cannot-display-ui/248960 "2020-10-22T03:57:07Z")

</div>

Hi Sorry for my broken english. I still struggling with my kibana.yaml, i want to deploy it to k8s cluster this my kibana.yaml apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name: kibana namespace: e…

---

## [Http tls on elastic nodes?](https://discuss.elastic.co/t/http-tls-on-elastic-nodes/252922)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 0\
**Last updated:** [October 22, 2020, 3:40am UTC](https://discuss.elastic.co/t/http-tls-on-elastic-nodes/252922 "2020-10-22T03:40:14Z")

</div>

Hi all In my cluster it said that i need to configure tls for connection between elastic and kibana But i have some question, i have 2 nodes for coordination, the kibana will connect to those 2 node only, so do i have …

---

## [Elasticsearch cluster pods are not restarting for version upgrade](https://discuss.elastic.co/t/elasticsearch-cluster-pods-are-not-restarting-for-version-upgrade/248090)

<div class="topic-metadata">

**Author:** [@Rakesh\_B](https://discuss.elastic.co/u/Rakesh_B)\
**Replies:** 2\
**Last updated:** [October 22, 2020, 3:14am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-pods-are-not-restarting-for-version-upgrade/248090 "2020-10-22T03:14:24Z")

</div>

Upgrading from ES 7.6.1 to 7.9.1 Upgrading elastic-cloud-operator from 1.1.2 to 1.2.1 cluster status is green with no issues For some reason our operator is stuck at "do\_not\_restart\_healthy\_node\_if\_MaxUnavailable\_rea…

---

## [Using a higher version EUI in plugin](https://discuss.elastic.co/t/using-a-higher-version-eui-in-plugin/252800)

<div class="topic-metadata">

**Author:** [@Wang\_Hay\_Ng](https://discuss.elastic.co/u/Wang_Hay_Ng)\
**Replies:** 2\
**Last updated:** [October 22, 2020, 1:39am UTC](https://discuss.elastic.co/t/using-a-higher-version-eui-in-plugin/252800 "2020-10-22T01:39:07Z")

</div>

i am making a plugin for 7.5.2, but i would like to use a newer feature from EUI v22+, i tried to yarn add it into the plugin's node module, not only did it not work, kibana will exit by heap out of memory when building …

---

## [Elastic siem overview dashboard config](https://discuss.elastic.co/t/elastic-siem-overview-dashboard-config/252916)

<div class="topic-metadata">

**Author:** [@111387](https://discuss.elastic.co/u/111387)\
**Replies:** 1\
**Last updated:** [October 22, 2020, 1:20am UTC](https://discuss.elastic.co/t/elastic-siem-overview-dashboard-config/252916 "2020-10-22T01:20:34Z")

</div>

Hello. I recevied suricata and other security solution logs with filebeat and send to Elastic Siem Is it possible to edit the list in the Network Event, Host Event menu in SIEM's Overview Tab?? I don't use Auditbeat a…

---

## [Can logstash be limited by subdirectories?](https://discuss.elastic.co/t/can-logstash-be-limited-by-subdirectories/252917)

<div class="topic-metadata">

**Author:** [@GetYourSh1tTogether](https://discuss.elastic.co/u/GetYourSh1tTogether)\
**Replies:** 0\
**Last updated:** [October 22, 2020, 1:06am UTC](https://discuss.elastic.co/t/can-logstash-be-limited-by-subdirectories/252917 "2020-10-22T01:06:36Z")

</div>

I have a list of subdirectories that are consistent in each directory. Is it possible to limit logstash to only look for those subdirectories and pull data from those? Would something like this work? filter { if \[type…

---

## [Support.elastic.co has an invalid certificate](https://discuss.elastic.co/t/support-elastic-co-has-an-invalid-certificate/251167)

<div class="topic-metadata">

**Author:** [@jwasserman](https://discuss.elastic.co/u/jwasserman)\
**Replies:** 9\
**Last updated:** [October 22, 2020, 12:39am UTC](https://discuss.elastic.co/t/support-elastic-co-has-an-invalid-certificate/251167 "2020-10-22T00:39:30Z")

</div>

https://support.elastic.co is not secure. I do not want enter my credentials because the certificate is invalid.

---

## [Aggregate sum child documents' cumulative data while keeping some of parent's source fields](https://discuss.elastic.co/t/aggregate-sum-child-documents-cumulative-data-while-keeping-some-of-parents-source-fields/252907)

<div class="topic-metadata">

**Author:** [@rfferrao](https://discuss.elastic.co/u/rfferrao)\
**Replies:** 0\
**Last updated:** [October 21, 2020, 10:28pm UTC](https://discuss.elastic.co/t/aggregate-sum-child-documents-cumulative-data-while-keeping-some-of-parents-source-fields/252907 "2020-10-21T22:28:27Z")

</div>

I'd like to know if it's possible to do this. Let's say I have the following mapping for a testindex: { "properties": { "datetime": { "type": "date" }, "datetime\_range": { "type": "date\_range" }, "devna…

---

## [Min\_doc\_count for data table filter aggregation](https://discuss.elastic.co/t/min-doc-count-for-data-table-filter-aggregation/252902)

<div class="topic-metadata">

**Author:** [@Eric\_Scaramuzzo](https://discuss.elastic.co/u/Eric_Scaramuzzo)\
**Replies:** 0\
**Last updated:** [October 21, 2020, 9:37pm UTC](https://discuss.elastic.co/t/min-doc-count-for-data-table-filter-aggregation/252902 "2020-10-21T21:37:51Z")

</div>

Hello! I am creating a data table with a unique count metric and a filter aggregation, and I want to not show rows that have a doc\_count of 0. I tried using min\_doc\_count in the json input, but that just threw an error: E…

---

## [Kibana Error loading data](https://discuss.elastic.co/t/kibana-error-loading-data/249179)

<div class="topic-metadata">

**Author:** [@Eric\_Scaramuzzo](https://discuss.elastic.co/u/Eric_Scaramuzzo)\
**Replies:** 2\
**Last updated:** [October 21, 2020, 9:27pm UTC](https://discuss.elastic.co/t/kibana-error-loading-data/249179 "2020-10-21T21:27:16Z")

</div>

Getting "Error loading data": error on kibana: Replaced my elasticsearch domain with \<domain\> Error at Fetch.\_callee3$ (https://\<domain\>.us-west-1.es.amazonaws.com/\_plugin/kibana/bundles/commons.bundle.js:1:142…

---

## [Cant understant this bad response](https://discuss.elastic.co/t/cant-understant-this-bad-response/252806)

<div class="topic-metadata">

**Author:** [@Borna\_Jelic](https://discuss.elastic.co/u/Borna_Jelic)\
**Replies:** 1\
**Last updated:** [October 21, 2020, 9:13pm UTC](https://discuss.elastic.co/t/cant-understant-this-bad-response/252806 "2020-10-21T21:13:46Z")

</div>

Hello, I have implemented my custom search function. All tests have passed, but when I run request on Kibana, I get this response: { "error" : { "root\_cause" : \[ { "type" : "parsing\_exception", …

---

## [Map Index!](https://discuss.elastic.co/t/map-index/252833)

<div class="topic-metadata">

**Author:** [@HenriqueNogueira](https://discuss.elastic.co/u/HenriqueNogueira)\
**Replies:** 1\
**Last updated:** [October 21, 2020, 9:06pm UTC](https://discuss.elastic.co/t/map-index/252833 "2020-10-21T21:06:27Z")

</div>

How to map index? Need help!

---

## [Format for timestamps](https://discuss.elastic.co/t/format-for-timestamps/252878)

<div class="topic-metadata">

**Author:** [@georgemichael](https://discuss.elastic.co/u/georgemichael)\
**Replies:** 1\
**Last updated:** [October 21, 2020, 8:46pm UTC](https://discuss.elastic.co/t/format-for-timestamps/252878 "2020-10-21T20:46:23Z")

</div>

I am working on some logging software and was wondering what format kibana indexes timestamps. I was thinking of using something similar to log.go for formatting log header to buffer as seen here: func (l \*Logger) forma…

---

## [Nested Component Templates](https://discuss.elastic.co/t/nested-component-templates/252895)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 0\
**Last updated:** [October 21, 2020, 8:12pm UTC](https://discuss.elastic.co/t/nested-component-templates/252895 "2020-10-21T20:12:38Z")

</div>

Hi All, I was wondering if anyone knows if its possible to do nested component templates, or if there is plans to add it? An example/use case is the geo object. Currently the geo object is a nested object of client, de…

---

## [Elasticsearch, which path for elasticsearch.keystore is used?](https://discuss.elastic.co/t/elasticsearch-which-path-for-elasticsearch-keystore-is-used/252845)

<div class="topic-metadata">

**Author:** [@Andrea\_Marchi](https://discuss.elastic.co/u/Andrea_Marchi)\
**Replies:** 1\
**Last updated:** [October 21, 2020, 8:04pm UTC](https://discuss.elastic.co/t/elasticsearch-which-path-for-elasticsearch-keystore-is-used/252845 "2020-10-21T20:04:41Z")

</div>

I'm trying to understand why I get 401 after initializing a new instance (goal to have multiple instances on one machine). Steps taken: created a elasticsearch.keystore add the bootstrap.password successfully, with ca…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1182)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1184)
