# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1195 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1196 --- ## [To find all the correlation id where response is not send back to the consumer](https://discuss.elastic.co/t/to-find-all-the-correlation-id-where-response-is-not-send-back-to-the-consumer/251896)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 5\ **Last updated:** [October 14, 2020, 10:12am UTC](https://discuss.elastic.co/t/to-find-all-the-correlation-id-where-response-is-not-send-back-to-the-consumer/251896 "2020-10-14T10:12:55Z")
Hi All, In our logs; For a transaction , two legs will get generated "Consumer to backend" and "Backend to Consumer" .However in case of failure , only one leg "Consumer to backend" will get generated. Unique correlati… --- ## [Retrieve multiple nested documents around the query matched document](https://discuss.elastic.co/t/retrieve-multiple-nested-documents-around-the-query-matched-document/250139)
**Author:** [@verdict-lg](https://discuss.elastic.co/u/verdict-lg)\ **Replies:** 1\ **Last updated:** [October 14, 2020, 9:35am UTC](https://discuss.elastic.co/t/retrieve-multiple-nested-documents-around-the-query-matched-document/250139 "2020-10-14T09:35:10Z")
Is there a way to retrieve multiple documents around the matching nested document. For example in this document: Book ID: ISBN8137183 Book Name: Name of the Wind Chapters: { {Chapter ID: 1 Gist: some\_text\_1 }, {Chapter … --- ## [Log correlation not working](https://discuss.elastic.co/t/log-correlation-not-working/250087)
**Author:** [@vamsikrishna\_medeti](https://discuss.elastic.co/u/vamsikrishna_medeti)\ **Replies:** 0\ **Last updated:** [September 27, 2020, 12:53pm UTC](https://discuss.elastic.co/t/log-correlation-not-working/250087 "2020-09-27T12:53:47Z")
Hi, We have set up the elastic APM for java services and able to monitor the services. As the development teams are using springboot logback logging mechanism (not 'Java ECS Logging'), the logs are coming as plain text.… --- ## [Kibana charts libraries](https://discuss.elastic.co/t/kibana-charts-libraries/251999)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 2\ **Last updated:** [October 14, 2020, 9:29am UTC](https://discuss.elastic.co/t/kibana-charts-libraries/251999 "2020-10-14T09:29:12Z")
Hello, Not exactly a Kibana question, But I'm looking for a chart library for a project I'm working on. Looking at the source of Kibana, This is a chart library, that Kibana uses: but it seems, that the elatic-u… --- ## [Can I use the aggregation with 'objetc' field?](https://discuss.elastic.co/t/can-i-use-the-aggregation-with-objetc-field/251869)
**Author:** [@icaruswu](https://discuss.elastic.co/u/icaruswu)\ **Replies:** 0\ **Last updated:** [October 13, 2020, 8:51am UTC](https://discuss.elastic.co/t/can-i-use-the-aggregation-with-objetc-field/251869 "2020-10-13T08:51:07Z")
I know that I can use aggreation with keyword type. But I wanna try to deal with some 'object' type in aggregation way. pls follow below: For this 'ddd' index, I build a 'human' object, then I will insert some 'object… --- ## [Kibana cannot read UUID file](https://discuss.elastic.co/t/kibana-cannot-read-uuid-file/252000)
**Author:** [@Ayush\_Mathur](https://discuss.elastic.co/u/Ayush_Mathur)\ **Replies:** 1\ **Last updated:** [October 14, 2020, 9:09am UTC](https://discuss.elastic.co/t/kibana-cannot-read-uuid-file/252000 "2020-10-14T09:09:52Z")
Hi, I'm trying to upgrade the Elastic Stack from 7.6.2 to 7.9.1 but for some reason Kibana is not starting. The error logged during startup is: Kibana cannot read the uuid file, please make sure server.uuid is set in … --- ## [Many small indices vs One large index](https://discuss.elastic.co/t/many-small-indices-vs-one-large-index/252008)
**Author:** [@hemangr8](https://discuss.elastic.co/u/hemangr8)\ **Replies:** 5\ **Last updated:** [October 14, 2020, 8:50am UTC](https://discuss.elastic.co/t/many-small-indices-vs-one-large-index/252008 "2020-10-14T08:50:49Z")
I know this question has been asked many times, but I needed more clarity on this topic. Let's say I have 5000 customer data which has the same number of fields in each document but is independent of each other, i.e. I w… --- ## [Kibana: How to display hostname/environment on top of bar?](https://discuss.elastic.co/t/kibana-how-to-display-hostname-environment-on-top-of-bar/251863)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 1\ **Last updated:** [October 14, 2020, 8:31am UTC](https://discuss.elastic.co/t/kibana-how-to-display-hostname-environment-on-top-of-bar/251863 "2020-10-14T08:31:33Z")
We have quite lot of environemtents (PROD, TEST, DEV) etc and wanted to show where we have logged on. Is there an easy way to change color or put an entry in the top nav bar to show which enviornment Kibana is running? A… --- ## [Elasticsearch to Oracle Table](https://discuss.elastic.co/t/elasticsearch-to-oracle-table/251998)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 10\ **Last updated:** [October 14, 2020, 8:28am UTC](https://discuss.elastic.co/t/elasticsearch-to-oracle-table/251998 "2020-10-14T08:28:09Z")
Hello Team I have a requirement where in I have to move selected data from Elasticsearch INDEX to oracle Table {RDBMS} , in real-time. Could you please help me in suggesting the method / examples / links / blogs / op… --- ## [Detector field is not an aggregatable field](https://discuss.elastic.co/t/detector-field-is-not-an-aggregatable-field/252007)
**Author:** [@Ameeruddin\_Mohammed](https://discuss.elastic.co/u/Ameeruddin_Mohammed)\ **Replies:** 0\ **Last updated:** [October 14, 2020, 8:25am UTC](https://discuss.elastic.co/t/detector-field-is-not-an-aggregatable-field/252007 "2020-10-14T08:25:06Z")
hi, i get an error while creating an ml job. the field is "MONITORLOGGER" and in the template and in the index its mapped as keyword. "MONITORLOGGER": { "type": "keyword" } please support. --- ## [EOF in Logstash File Input](https://discuss.elastic.co/t/eof-in-logstash-file-input/251126)
**Author:** [@sfischer](https://discuss.elastic.co/u/sfischer)\ **Replies:** 4\ **Last updated:** [October 14, 2020, 8:12am UTC](https://discuss.elastic.co/t/eof-in-logstash-file-input/251126 "2020-10-14T08:12:09Z")
Hello, I am using Logstash to aggregate some data out of a log file and store it in elastic search, to get some usage data for a software. We copy the log files into a directory that logstash checks. We use the file in… --- ## [Converting kibana snapshot chart to chartJs options](https://discuss.elastic.co/t/converting-kibana-snapshot-chart-to-chartjs-options/251877)
**Author:** [@arjun\_atlast](https://discuss.elastic.co/u/arjun_atlast)\ **Replies:** 1\ **Last updated:** [October 14, 2020, 8:07am UTC](https://discuss.elastic.co/t/converting-kibana-snapshot-chart-to-chartjs-options/251877 "2020-10-14T08:07:38Z")
Is there any way to convert a visualization snapshot to chartJs data or any format that I can use to create a static chart for presentation? --- ## [What's the best way to implement 'contains' search queries in combination with MultiMatch?](https://discuss.elastic.co/t/whats-the-best-way-to-implement-contains-search-queries-in-combination-with-multimatch/251909)
**Author:** [@DanglingNode](https://discuss.elastic.co/u/DanglingNode)\ **Replies:** 2\ **Last updated:** [October 14, 2020, 7:59am UTC](https://discuss.elastic.co/t/whats-the-best-way-to-implement-contains-search-queries-in-combination-with-multimatch/251909 "2020-10-14T07:59:55Z")
Hi, I have documents with most fields indexed as 'Keywords'. I currently want to perform a global search, over all indexed fields, which I've implemented as such: var result = await client.SearchAsync\(s =\>… --- ## [Performance of a wildcard index search for \_id](https://discuss.elastic.co/t/performance-of-a-wildcard-index-search-for-id/249931)
**Author:** [@Munawwar1](https://discuss.elastic.co/u/Munawwar1)\ **Replies:** 8\ **Last updated:** [October 14, 2020, 7:33am UTC](https://discuss.elastic.co/t/performance-of-a-wildcard-index-search-for-id/249931 "2020-10-14T07:33:49Z")
Hi all. I am doing a term query search for \_id field (which happens to be a uuid in my case) across all indexes via a wildcard index name search. e.g. GET http://elasticsearch.endpoint/prod-\*/\_search { "query": { … --- ## [Elasticsearch version upgrade from 6.6. to 6.8](https://discuss.elastic.co/t/elasticsearch-version-upgrade-from-6-6-to-6-8/251055)
**Author:** [@tisandg](https://discuss.elastic.co/u/tisandg)\ **Replies:** 9\ **Last updated:** [October 14, 2020, 7:30am UTC](https://discuss.elastic.co/t/elasticsearch-version-upgrade-from-6-6-to-6-8/251055 "2020-10-14T07:30:47Z")
Hello. I have a server centOS 7 which have Elasticsearch 6.6 and I was trying to upgrade the version to it from 6.6 to 6.8. I followed each step of the guide and all the steps works well. However when I start again the … --- ## [How to use greater than operator in Json Input in Kibana visualisation to get the data which is greater than a value](https://discuss.elastic.co/t/how-to-use-greater-than-operator-in-json-input-in-kibana-visualisation-to-get-the-data-which-is-greater-than-a-value/251928)
**Author:** [@Dubru](https://discuss.elastic.co/u/Dubru)\ **Replies:** 3\ **Last updated:** [October 14, 2020, 7:26am UTC](https://discuss.elastic.co/t/how-to-use-greater-than-operator-in-json-input-in-kibana-visualisation-to-get-the-data-which-is-greater-than-a-value/251928 "2020-10-14T07:26:18Z")
My actual requirement is I would like to display the data in kibana visualisation only if the response.time is greater than 10 seconds I've the field response.time and I am using this field to get the average response t… --- ## [Unable to pull aws cloud data using S3 plugin/ Error : something is wrong with your configuration](https://discuss.elastic.co/t/unable-to-pull-aws-cloud-data-using-s3-plugin-error-something-is-wrong-with-your-configuration/251889)
**Author:** [@sainath](https://discuss.elastic.co/u/sainath)\ **Replies:** 2\ **Last updated:** [October 14, 2020, 7:18am UTC](https://discuss.elastic.co/t/unable-to-pull-aws-cloud-data-using-s3-plugin-error-something-is-wrong-with-your-configuration/251889 "2020-10-14T07:18:18Z")
Hi , we are trying to pull S3 bucket data from AWS cloud and below is the configuration. input { s3 { "access\_key\_id" =\> "AXXXXX" "secret\_access\_key" =\> "XXXX" "region" =\> "us-east-2" "bucket" =\> "XXX… --- ## [Large numbers in kibana as keyword not searchable](https://discuss.elastic.co/t/large-numbers-in-kibana-as-keyword-not-searchable/251996)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 0\ **Last updated:** [October 14, 2020, 6:51am UTC](https://discuss.elastic.co/t/large-numbers-in-kibana-as-keyword-not-searchable/251996 "2020-10-14T06:51:14Z")
I have problem to search the value in Kibana for field I Created mapping keyword and inserted number inside (see example below) "B\_ASSOCIAID": { "type" : "keyword"} "B\_ASSOCIAID" : 5947737601889008123, in this case Ki… --- ## [How to turn off automatic deletion upon expiration of data / index?](https://discuss.elastic.co/t/how-to-turn-off-automatic-deletion-upon-expiration-of-data-index/251736)
**Author:** [@dwlande](https://discuss.elastic.co/u/dwlande)\ **Replies:** 16\ **Last updated:** [October 14, 2020, 6:42am UTC](https://discuss.elastic.co/t/how-to-turn-off-automatic-deletion-upon-expiration-of-data-index/251736 "2020-10-14T06:42:46Z")
How to turn off automatic deletion upon expiration of data / index? --- ## [\_grokparsefailure and I have no idea](https://discuss.elastic.co/t/grokparsefailure-and-i-have-no-idea/251984)
**Author:** [@EunBae\_Park](https://discuss.elastic.co/u/EunBae_Park)\ **Replies:** 1\ **Last updated:** [October 14, 2020, 6:37am UTC](https://discuss.elastic.co/t/grokparsefailure-and-i-have-no-idea/251984 "2020-10-14T06:37:10Z")
Hi, I'd tried to parse NGINX Access log whose log format is '$http\_x\_forwarded\_for - $http\_referer - \[$time\_local\] "$request" $status $body\_bytes\_sent'. The logs are like below: - - - - \[08/Oct/2020:11:05:50 +0900\] "… --- ## [Can't Get Logs From Multiple Machines](https://discuss.elastic.co/t/cant-get-logs-from-multiple-machines/251991)
**Author:** [@Redwanuzzaman](https://discuss.elastic.co/u/Redwanuzzaman)\ **Replies:** 0\ **Last updated:** [October 14, 2020, 4:50am UTC](https://discuss.elastic.co/t/cant-get-logs-from-multiple-machines/251991 "2020-10-14T04:50:21Z")
Hello There, I am trying to get logs from different machines. I installed filebeat on the client machine and make this configuration. - type: log enabled: true paths: - /path/where/log/stores/in/client/machine … --- ## [Aggregation 504 bad gateway](https://discuss.elastic.co/t/aggregation-504-bad-gateway/251740)
**Author:** [@Liyes](https://discuss.elastic.co/u/Liyes)\ **Replies:** 5\ **Last updated:** [October 14, 2020, 2:13am UTC](https://discuss.elastic.co/t/aggregation-504-bad-gateway/251740 "2020-10-14T02:13:44Z")
When I use script to do aggregation and want to find two documents with the same fields in es, 504 bad gateway. Maybe it is caused by too much data. Is there any solution? I used partition. { "size": 0, "aggs": { … --- ## [Logstash Configuration for Writing to a File (that may grow in GBs)](https://discuss.elastic.co/t/logstash-configuration-for-writing-to-a-file-that-may-grow-in-gbs/251976)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 0\ **Last updated:** [October 14, 2020, 1:07am UTC](https://discuss.elastic.co/t/logstash-configuration-for-writing-to-a-file-that-may-grow-in-gbs/251976 "2020-10-14T01:07:41Z")
I have a requirement where in my logstash I have to write to Elasticsearch and as well write to a file. However the issue is, the file will be created on daily basis, and it is calculated that the file will grow in GBs. … --- ## [Get all queries executed on Elastic search](https://discuss.elastic.co/t/get-all-queries-executed-on-elastic-search/251918)
**Author:** [@Pankaj\_Jadhav](https://discuss.elastic.co/u/Pankaj_Jadhav)\ **Replies:** 1\ **Last updated:** [October 14, 2020, 12:32am UTC](https://discuss.elastic.co/t/get-all-queries-executed-on-elastic-search/251918 "2020-10-14T00:32:38Z")
Hi, I want to get all queries executed on elastic search. Is there any log file where I can get this information. --- ## [【kibana5.6】DiscoverやVisualizeで、桁ぞろえの為に数値表示を右寄せしたい](https://discuss.elastic.co/t/kibana5-6-discover-visualize/251847)
**Author:** [@murata-ku](https://discuss.elastic.co/u/murata-ku)\ **Replies:** 2\ **Last updated:** [October 14, 2020, 12:08am UTC](https://discuss.elastic.co/t/kibana5-6-discover-visualize/251847 "2020-10-14T00:08:26Z")
掲題の件について公式ページや実機の設定画面を確認しましたが、設定方法が分からなかった為にこちらで問合せさせてください。 \<目的\> DiscoverやVisualizeで、数値を桁揃えで表示したい ＜背景＞ DiscoverやVisualizeの画面で、テーブル状に表示したレコードの一覧において、数値が左詰めになってしまい、ぱっと見で、数値の桁の違いがわかりづらいです。 WEBサイトなどに掲載されている画面を見ると、右付け表示さ… --- ## [Text similarity with Elasticseacrh](https://discuss.elastic.co/t/text-similarity-with-elasticseacrh/251737)
**Author:** [@Kfiro](https://discuss.elastic.co/u/Kfiro)\ **Replies:** 4\ **Last updated:** [October 13, 2020, 9:41pm UTC](https://discuss.elastic.co/t/text-similarity-with-elasticseacrh/251737 "2020-10-13T21:41:11Z")
Hi everyone, Is there a way in Elastic to aggregate the values in a particular field by the similarity between the words? I mean if for example I have a field called "userMailbox", I would like to get groups of mailbox… --- ## [Warm nodes on spinning disks not stable, falling out of cluster during recovery](https://discuss.elastic.co/t/warm-nodes-on-spinning-disks-not-stable-falling-out-of-cluster-during-recovery/250078)
**Author:** [@otoce](https://discuss.elastic.co/u/otoce)\ **Replies:** 33\ **Last updated:** [October 13, 2020, 5:26pm UTC](https://discuss.elastic.co/t/warm-nodes-on-spinning-disks-not-stable-falling-out-of-cluster-during-recovery/250078 "2020-10-13T17:26:18Z")
Hi, our warms nodes are falling out of cluster while in recovery, and then start recovery from zero. Hot nodes are ok. Env: 4 servers, on each (256GB ram, 8 cpu) : 1 hot node, 64GB, ssd, 30 days of data, heavy input f… --- ## [Logstash conditional test for value in a field](https://discuss.elastic.co/t/logstash-conditional-test-for-value-in-a-field/251968)
**Author:** [@Zorkmid](https://discuss.elastic.co/u/Zorkmid)\ **Replies:** 1\ **Last updated:** [October 13, 2020, 8:45pm UTC](https://discuss.elastic.co/t/logstash-conditional-test-for-value-in-a-field/251968 "2020-10-13T20:45:52Z")
Hello all, Is the follow correct for testing for the presence of a value and then applying the appropriate grok filter? The event types, urlfLog, accessLog all arrive in the same syslog input stream and I'd like to tes… --- ## [Ruby Filter to clean nulls and nils](https://discuss.elastic.co/t/ruby-filter-to-clean-nulls-and-nils/251966)
**Author:** [@mistrhanky](https://discuss.elastic.co/u/mistrhanky)\ **Replies:** 0\ **Last updated:** [October 13, 2020, 8:25pm UTC](https://discuss.elastic.co/t/ruby-filter-to-clean-nulls-and-nils/251966 "2020-10-13T20:25:58Z")
I grabbed a function from a thread somewhere that uses ruby to "clean" off nulls, nills, dashes, etc so that I dont needlessly clutter ES or import them. It has worked well up until now. Now however, I have a bit of a na… --- ## [ReadTimeoutError, maybe related to internal:coordination/fault\_detection/leader\_check?](https://discuss.elastic.co/t/readtimeouterror-maybe-related-to-internal-coordination-fault-detection-leader-check/251940)
**Author:** [@Tim\_Estes](https://discuss.elastic.co/u/Tim_Estes)\ **Replies:** 0\ **Last updated:** [October 13, 2020, 4:50pm UTC](https://discuss.elastic.co/t/readtimeouterror-maybe-related-to-internal-coordination-fault-detection-leader-check/251940 "2020-10-13T16:50:11Z")
When trying to index documents in elastic, the following exception is frequently getting raised: ConnectionTimeout caused by - ReadTimeoutError(HTTPSConnectionPool(host='xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxeaf.us-west-2.aws… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1194) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1196)