# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1187 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1188 --- ## [Query with function\_score and aggregation is too slow](https://discuss.elastic.co/t/query-with-function-score-and-aggregation-is-too-slow/252654)
**Author:** [@badreedine](https://discuss.elastic.co/u/badreedine)\ **Replies:** 0\ **Last updated:** [October 20, 2020, 9:43am UTC](https://discuss.elastic.co/t/query-with-function-score-and-aggregation-is-too-slow/252654 "2020-10-20T09:43:41Z")
I have an index of about 15M items, I am using version 6.7.0 installed in AWS. We adopted denormalisation approach in our design, each project has many items. A project has a title, description, tags, popularity, project… --- ## [LogStash::Json::ParserError](https://discuss.elastic.co/t/logstash-parsererror/250809)
**Author:** [@Raiderume](https://discuss.elastic.co/u/Raiderume)\ **Replies:** 9\ **Last updated:** [October 20, 2020, 9:08am UTC](https://discuss.elastic.co/t/logstash-parsererror/250809 "2020-10-20T09:08:59Z")
Hello, I have problems with parsing json logs to logstash, there are tons of errors at log: Error parsing json {:source=\>"message", :raw=\>"\*\*\*\*", :exception=\>#\ **Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 3\ **Last updated:** [October 20, 2020, 9:07am UTC](https://discuss.elastic.co/t/deletion-of-indexed-documents-while-doing-the-indexing-with-action-set-to-index/251846 "2020-10-20T09:07:30Z") I have seen a peculiar behavior while using the logstash JDBC input plugin and Elasticsearch output plugin. Initial indexing has been completed and was trying to do the partial update for few columns. When I have sent … --- ## [Initializing\_shards got struck](https://discuss.elastic.co/t/initializing-shards-got-struck/252511)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 30\ **Last updated:** [October 20, 2020, 8:55am UTC](https://discuss.elastic.co/t/initializing-shards-got-struck/252511 "2020-10-20T08:55:34Z")
Hi Team, initializing\_shards got struck, if i delete those shards wat will happen? it will become Green and will work smoothly? Kibana link is working for some time and its showing error timeout 30000ms some time. { … --- ## [Multilple field names are not getting renamed using logstash](https://discuss.elastic.co/t/multilple-field-names-are-not-getting-renamed-using-logstash/252646)
**Author:** [@abhay\_deshmukh](https://discuss.elastic.co/u/abhay_deshmukh)\ **Replies:** 0\ **Last updated:** [October 20, 2020, 8:04am UTC](https://discuss.elastic.co/t/multilple-field-names-are-not-getting-renamed-using-logstash/252646 "2020-10-20T08:04:10Z")
mutate { rename =\> { "10" =\> "CheckSum" "103" =\> "OrdRejReason" "107" =\> "SecurityDesc" "108" =\> "HeartBtInt" "109" =\> "ClientID" "11" =\> "ClOrdID" "112" =\> "TestReqID" } I'm trying to rename these fields i tri… --- ## [\[ERROR\]\[logstash.outputs.elasticsearch\] Failed to install template. {:message=\>"Got response code '400' contacting Elasticsearch at URL 'http://localhost:9200/\_template/jose\_prueba\_v14'"](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-failed-to-install-template-message-got-response-code-400-contacting-elasticsearch-at-url-http-localhost-9200-template-jose-prueba-v14/252582)
**Author:** [@joseantonio.sanchez](https://discuss.elastic.co/u/joseantonio.sanchez)\ **Replies:** 3\ **Last updated:** [October 20, 2020, 7:54am UTC](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-failed-to-install-template-message-got-response-code-400-contacting-elasticsearch-at-url-http-localhost-9200-template-jose-prueba-v14/252582 "2020-10-20T07:54:26Z")
Good afternoon, I'm having problems with logstash when putting a template file to perform a mapping. in my logstash .conf file, I put "output { elasticsearch { hosts =\> \['localhost: 9200'\] index =\> 'jose\_test\_v14' … --- ## [Extract first 50 characters from message "body" into new field](https://discuss.elastic.co/t/extract-first-50-characters-from-message-body-into-new-field/252574)
**Author:** [@SecretSquizza](https://discuss.elastic.co/u/SecretSquizza)\ **Replies:** 4\ **Last updated:** [October 20, 2020, 7:44am UTC](https://discuss.elastic.co/t/extract-first-50-characters-from-message-body-into-new-field/252574 "2020-10-20T07:44:15Z")
Hello everyone, Firstly, apologies for any formatting mistakes in this post - its my first one... i'm relatively new to the Elastic stack and need to get a shortened version of the message body into another field so it… --- ## [Server1 is down](https://discuss.elastic.co/t/server1-is-down/252600)
**Author:** [@aerodynamic](https://discuss.elastic.co/u/aerodynamic)\ **Replies:** 2\ **Last updated:** [October 20, 2020, 7:35am UTC](https://discuss.elastic.co/t/server1-is-down/252600 "2020-10-20T07:35:14Z")
Upon trying to start the lab I'm getting elastic@ip-172-31-12-131:~$ ./load\_lab.sh 1 curl: (52) Empty reply from server elastic@ip-172-31-12-131:~$ ssh server1 ssh: connect to host server1 port 22: No route to host --- ## [Unable to delete the index (%{indexname}-%{type}-2020.09.19)](https://discuss.elastic.co/t/unable-to-delete-the-index-indexname-type-2020-09-19/252634)
**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\ **Replies:** 2\ **Last updated:** [October 20, 2020, 7:16am UTC](https://discuss.elastic.co/t/unable-to-delete-the-index-indexname-type-2020-09-19/252634 "2020-10-20T07:16:51Z")
Hi All, I am using ES version 7.7 having a index with name "%{indexname}-%{type}-2020.09.19". trying to delete the index with the below command, but not working. can any please help on this. delete %{indexname}-%{type}… --- ## [Using json in logstash](https://discuss.elastic.co/t/using-json-in-logstash/252643)
**Author:** [@igersht](https://discuss.elastic.co/u/igersht)\ **Replies:** 0\ **Last updated:** [October 20, 2020, 7:08am UTC](https://discuss.elastic.co/t/using-json-in-logstash/252643 "2020-10-20T07:08:37Z")
Hey, I'm trying to send JSON to logstash looking like this: "build\_url" =\> "https://www.build.url", "fields" =\> { "log\_source" =\> "log\_json" }, "@timestamp" =\> 2020-10-19T11:… --- ## [Max data that can be stored based on memory configured](https://discuss.elastic.co/t/max-data-that-can-be-stored-based-on-memory-configured/251752)
**Author:** [@mrudrego](https://discuss.elastic.co/u/mrudrego)\ **Replies:** 6\ **Last updated:** [October 20, 2020, 6:57am UTC](https://discuss.elastic.co/t/max-data-that-can-be-stored-based-on-memory-configured/251752 "2020-10-20T06:57:15Z")
Hi, I was going through the blog which talks about shards in a cluster https://www.elastic.co/blog/how-many-shards-should-i-have-in-my-elasticsearch-cluster In one of their tips they say " A good rule-of-thumb is to en… --- ## [Delete Sync Operation using Logstash JDBC](https://discuss.elastic.co/t/delete-sync-operation-using-logstash-jdbc/252636)
**Author:** [@sharath\_sai](https://discuss.elastic.co/u/sharath_sai)\ **Replies:** 0\ **Last updated:** [October 20, 2020, 6:28am UTC](https://discuss.elastic.co/t/delete-sync-operation-using-logstash-jdbc/252636 "2020-10-20T06:28:26Z")
Hi all, We have configured JDBC logstash, to migrate data from Cassandra to logstash. we have able to move data from Cassandra to logstash, we are also updating the data in elastic search based on document\_id, but we n… --- ## [Auto detection of Data type](https://discuss.elastic.co/t/auto-detection-of-data-type/252571)
**Author:** [@rdeshmukh](https://discuss.elastic.co/u/rdeshmukh)\ **Replies:** 2\ **Last updated:** [October 20, 2020, 6:02am UTC](https://discuss.elastic.co/t/auto-detection-of-data-type/252571 "2020-10-20T06:02:13Z")
This is the mapping initially which I created, considering that Roll number will be limit to only numbers. But eventually as they are growing in the roll numbers are Alphanumeric and the data type is changed. PUT studen… --- ## [Watcher POST URL Error](https://discuss.elastic.co/t/watcher-post-url-error/251067)
**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\ **Replies:** 4\ **Last updated:** [October 20, 2020, 5:38am UTC](https://discuss.elastic.co/t/watcher-post-url-error/251067 "2020-10-20T05:38:27Z")
Hi, Setup: ES/Kibana 7.5.2 We are trying to configure automatic PDF report generation and sent to the email on a schedule. The dashboard pdf works fine if we simply download it using Generate PDF option. However wh… --- ## [Logstash elasticsearch input plugin observes frequent Faraday::TimeoutError. How can we increase the default timeout settings for the request?](https://discuss.elastic.co/t/logstash-elasticsearch-input-plugin-observes-frequent-faraday-timeouterror-how-can-we-increase-the-default-timeout-settings-for-the-request/252621)
**Author:** [@vikrant\_baraiya1](https://discuss.elastic.co/u/vikrant_baraiya1)\ **Replies:** 0\ **Last updated:** [October 20, 2020, 2:37am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-input-plugin-observes-frequent-faraday-timeouterror-how-can-we-increase-the-default-timeout-settings-for-the-request/252621 "2020-10-20T02:37:42Z")
We are using Logstash with an elastic search input plugin and elastic search output plugin. The data volume increased heavily during the peak hours between 10 AM - 5 PM Eastern time. And during this time frame, we observ… --- ## [Identify indexing performance bottleneck](https://discuss.elastic.co/t/identify-indexing-performance-bottleneck/252456)
**Author:** [@larryzhu](https://discuss.elastic.co/u/larryzhu)\ **Replies:** 3\ **Last updated:** [October 20, 2020, 1:05am UTC](https://discuss.elastic.co/t/identify-indexing-performance-bottleneck/252456 "2020-10-20T01:05:48Z")
we have elastic data nodes that run on 52 physical processors/104 logic processors, the machines are using Intel Xeon Platinum 8167M. Base frequency 2.0 GHz, max turbo frequency 2.4 GHz. however we are consistently seei… --- ## [HttpStatus total down Time](https://discuss.elastic.co/t/httpstatus-total-down-time/252341)
**Author:** [@fazil410](https://discuss.elastic.co/u/fazil410)\ **Replies:** 2\ **Last updated:** [October 20, 2020, 12:51am UTC](https://discuss.elastic.co/t/httpstatus-total-down-time/252341 "2020-10-20T00:51:37Z")
Hello Team, We are monitoring URL status by pinging the URL and storing the https status code in Kibanna. Now we need to know how we can calculate total down time (status code 500,400) for period of time,(Eg, last 60 d… --- ## [How to setup logstash to send whole xml event log to elasticsearch](https://discuss.elastic.co/t/how-to-setup-logstash-to-send-whole-xml-event-log-to-elasticsearch/252098)
**Author:** [@muru1](https://discuss.elastic.co/u/muru1)\ **Replies:** 15\ **Last updated:** [October 20, 2020, 12:26am UTC](https://discuss.elastic.co/t/how-to-setup-logstash-to-send-whole-xml-event-log-to-elasticsearch/252098 "2020-10-20T00:26:04Z")
I am trying to setup logstash to send xml event logs to elasticseach, however it is inserting each line as a separate entry into es, I tried using multiline codec but its buffering that many lines and inserting into es i… --- ## [Kibana Customize Plugin](https://discuss.elastic.co/t/kibana-customize-plugin/252476)
**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 11:26pm UTC](https://discuss.elastic.co/t/kibana-customize-plugin/252476 "2020-10-19T23:26:57Z")
Can we add customise plugin in kibana is it free ? I want to add email button in the visualisation after creating the visualisation it will email the people. For example i have the visualisation name expired cnic i creat… --- ## [Error in visualisation](https://discuss.elastic.co/t/error-in-visualisation/252119)
**Author:** [@pmk](https://discuss.elastic.co/u/pmk)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 11:16pm UTC](https://discuss.elastic.co/t/error-in-visualisation/252119 "2020-10-19T23:16:13Z")
no error message. It was not recorded in log(kibana.strerr). what's wrong? help me plz... I do not know the cause. --- ## [Migrate from rollover aliases to data streams](https://discuss.elastic.co/t/migrate-from-rollover-aliases-to-data-streams/252161)
**Author:** [@Julien\_HENRY](https://discuss.elastic.co/u/Julien_HENRY)\ **Replies:** 0\ **Last updated:** [October 15, 2020, 9:47am UTC](https://discuss.elastic.co/t/migrate-from-rollover-aliases-to-data-streams/252161 "2020-10-15T09:47:11Z")
Hi, I'm just discovering the new data stream concept in Elastic Cloud 7.9.2. We are ingesting time based documents, so this seems the perfect fit. Previously, we were using rollover\_alias. I have created the data str… --- ## [Elasticsearch, Kibana and Auth](https://discuss.elastic.co/t/elasticsearch-kibana-and-auth/252552)
**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 9:26pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-and-auth/252552 "2020-10-19T21:26:25Z")
Hi, I'm trying to use ECK so that Elasticsearch is protected by a password Kibana allows un-authenticated traffic We run a custom oauth proxy in front of kibana to perform authentication - this way we can allow users… --- ## [Why can't I access the index alias I created to use in Kibana Discover/Visualize?](https://discuss.elastic.co/t/why-cant-i-access-the-index-alias-i-created-to-use-in-kibana-discover-visualize/252591)
**Author:** [@bgiordano](https://discuss.elastic.co/u/bgiordano)\ **Replies:** 4\ **Last updated:** [October 19, 2020, 9:24pm UTC](https://discuss.elastic.co/t/why-cant-i-access-the-index-alias-i-created-to-use-in-kibana-discover-visualize/252591 "2020-10-19T21:24:17Z")
What am I missing? Why can't I access an alias index by name from Kibana? I currently am using ES/K 7.6.2 I have been working with ES/K since 2014 --- used alias indices all the time. What has changed in 7.x that I am … --- ## [Logstash mapping wrong field types](https://discuss.elastic.co/t/logstash-mapping-wrong-field-types/252460)
**Author:** [@JFC](https://discuss.elastic.co/u/JFC)\ **Replies:** 3\ **Last updated:** [October 19, 2020, 9:22pm UTC](https://discuss.elastic.co/t/logstash-mapping-wrong-field-types/252460 "2020-10-19T21:22:48Z")
Hi , I'm new to logstash and ELK stack. So apologies in advance if this question sounds obvious. Problem: I have fields that are being detected as strings by Kibana even after the template.json file explicitly maps the… --- ## [Kibana Dev Tools Console won't load in Safari](https://discuss.elastic.co/t/kibana-dev-tools-console-wont-load-in-safari/252612)
**Author:** [@jeffkirk1](https://discuss.elastic.co/u/jeffkirk1)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 9:22pm UTC](https://discuss.elastic.co/t/kibana-dev-tools-console-wont-load-in-safari/252612 "2020-10-19T21:22:44Z")
I've had an issue plaguing me through several of the recent minor releases of Kibana. I can't load the Dev Tools Console in Safari. I always get a not-especially-helpful error message "Cannot load Console. Try reloading … --- ## [Sum of aggregated terms are not per bucket, but total](https://discuss.elastic.co/t/sum-of-aggregated-terms-are-not-per-bucket-but-total/252541)
**Author:** [@obayd.mir](https://discuss.elastic.co/u/obayd.mir)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 9:14pm UTC](https://discuss.elastic.co/t/sum-of-aggregated-terms-are-not-per-bucket-but-total/252541 "2020-10-19T21:14:16Z")
I want to sum up a field value per bucket for that specific bucket, but instead of this, I'm getting the total for all buckets per bucket. See below for some details. Search request: GET index-001/\_search { "size": 0… --- ## [Mutate rename multiple fields, how to improve performance?](https://discuss.elastic.co/t/mutate-rename-multiple-fields-how-to-improve-performance/252606)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 9:05pm UTC](https://discuss.elastic.co/t/mutate-rename-multiple-fields-how-to-improve-performance/252606 "2020-10-19T21:05:02Z")
Hello, I have a pipeline where I need to rename something around 1100 fields, the documents do not have all the fields, but in total I need to rename near 1100 fields. Currently I have one mutate filter with a rename a… --- ## [Exiting: 1 error: missing required field accessing '0.queries' (source:'/etc/metricbeat/modules.d/mysql.yml')](https://discuss.elastic.co/t/exiting-1-error-missing-required-field-accessing-0-queries-source-etc-metricbeat-modules-d-mysql-yml/250895)
**Author:** [@ranajoy\_banerjee](https://discuss.elastic.co/u/ranajoy_banerjee)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 8:12pm UTC](https://discuss.elastic.co/t/exiting-1-error-missing-required-field-accessing-0-queries-source-etc-metricbeat-modules-d-mysql-yml/250895 "2020-10-19T20:12:56Z")
Hi , Has anyone found a solution to this error? --- ## [Varying hilightling behavior](https://discuss.elastic.co/t/varying-hilightling-behavior/252601)
**Author:** [@stevo](https://discuss.elastic.co/u/stevo)\ **Replies:** 0\ **Last updated:** [October 19, 2020, 7:35pm UTC](https://discuss.elastic.co/t/varying-hilightling-behavior/252601 "2020-10-19T19:35:52Z")
I am seeing some unexplainable behavior with highlighting returning different responses depending on the search text. Below are two examples of nearly identical queries with different search texts. I am not sure how to e… --- ## [Importing a Dashboard onto a Space](https://discuss.elastic.co/t/importing-a-dashboard-onto-a-space/252402)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 6\ **Last updated:** [October 19, 2020, 7:21pm UTC](https://discuss.elastic.co/t/importing-a-dashboard-onto-a-space/252402 "2020-10-19T19:21:36Z")
I have created spaces for various users but now I want to have them see existing dashboards on their respective spaces when they log in. The problem I am having is that while the spaces are letting me create a dashboard,… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1186) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1188)