# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1217 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1218 --- ## [Reducing Index Footprint](https://discuss.elastic.co/t/reducing-index-footprint/250318)
**Author:** [@shmoolik](https://discuss.elastic.co/u/shmoolik)\ **Replies:** 6\ **Last updated:** [September 29, 2020, 11:57am UTC](https://discuss.elastic.co/t/reducing-index-footprint/250318 "2020-09-29T11:57:04Z")
Hi there! My team is looking for ways to optimize large elasticsearch indices by reducing the index footprint. I read this article about Dynamic Mapping and was wondering if it can be used in order to reduce index foot… --- ## [Bucket sort aggregation with actual documents](https://discuss.elastic.co/t/bucket-sort-aggregation-with-actual-documents/249751)
**Author:** [@het](https://discuss.elastic.co/u/het)\ **Replies:** 2\ **Last updated:** [September 29, 2020, 11:27am UTC](https://discuss.elastic.co/t/bucket-sort-aggregation-with-actual-documents/249751 "2020-09-29T11:27:54Z")
Hi team, I wanted to get aggegatated data with pagination. So I have tried to use Bucket-Sort. I have referred this URL. Now, I am able to get aggegatated data, but the problem is, I am able to get the only the key… --- ## [Script score query with field value factor from an array of objects](https://discuss.elastic.co/t/script-score-query-with-field-value-factor-from-an-array-of-objects/250334)
**Author:** [@draganmilchevski](https://discuss.elastic.co/u/draganmilchevski)\ **Replies:** 0\ **Last updated:** [September 29, 2020, 10:22am UTC](https://discuss.elastic.co/t/script-score-query-with-field-value-factor-from-an-array-of-objects/250334 "2020-09-29T10:22:33Z")
Hi, I am trying to score the returned documents of a term query based on a score from the term object that was hit. Let me explain with examples. Suppose this is my index mapping: "documents" : { "mappings" : { … --- ## [How to build a terms agg with a high cardinate filed and a low cardinate field](https://discuss.elastic.co/t/how-to-build-a-terms-agg-with-a-high-cardinate-filed-and-a-low-cardinate-field/250305)
**Author:** [@zjd-melo](https://discuss.elastic.co/u/zjd-melo)\ **Replies:** 3\ **Last updated:** [September 29, 2020, 10:05am UTC](https://discuss.elastic.co/t/how-to-build-a-terms-agg-with-a-high-cardinate-filed-and-a-low-cardinate-field/250305 "2020-09-29T10:05:30Z")
Hello, there are two fields in my docs, cid and os. Cid is a high cardinate field, while os either android or ios. I want to know the difference between the following aggs, which is better. GET \_search { "size": 0,… --- ## [Stuck in loading Kibana...!](https://discuss.elastic.co/t/stuck-in-loading-kibana/247875)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 15\ **Last updated:** [September 29, 2020, 9:51am UTC](https://discuss.elastic.co/t/stuck-in-loading-kibana/247875 "2020-09-29T09:51:59Z")
Hello When I start the Kibana service (bin/kibana) it stuck somewhere which the last line is: \[warning\]\[plugins\]\[reporting\] Enabling the Chromium sandbox provides an additional layer of protection. And also I can\`t ac… --- ## [Readiness probe failed & Liveness probe failed for elastic search](https://discuss.elastic.co/t/readiness-probe-failed-liveness-probe-failed-for-elastic-search/250330)
**Author:** [@tushar1701](https://discuss.elastic.co/u/tushar1701)\ **Replies:** 0\ **Last updated:** [September 29, 2020, 9:45am UTC](https://discuss.elastic.co/t/readiness-probe-failed-liveness-probe-failed-for-elastic-search/250330 "2020-09-29T09:45:53Z")
Readiness probe failed: Waiting for elasticsearch cluster to become ready (request params: "wait\_for\_status=green&timeout=1s" ) Cluster is not yet ready (request params: "wait\_for\_status=green&timeout=1s" ) Warning Un… --- ## [Conditional grok parsing using elasticsearch processor pipeline](https://discuss.elastic.co/t/conditional-grok-parsing-using-elasticsearch-processor-pipeline/249977)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 3\ **Last updated:** [September 29, 2020, 9:44am UTC](https://discuss.elastic.co/t/conditional-grok-parsing-using-elasticsearch-processor-pipeline/249977 "2020-09-29T09:44:26Z")
We use the default apache error elasticsearch pipeline but, we have the requirement that needs a further parsing. We need an additional grok parsing for message field. How to perform grok parsing when field event\_type i… --- ## [Configure SSL for Enterprise Search with Cloudflare certificate](https://discuss.elastic.co/t/configure-ssl-for-enterprise-search-with-cloudflare-certificate/250308)
**Author:** [@dmm](https://discuss.elastic.co/u/dmm)\ **Replies:** 1\ **Last updated:** [September 29, 2020, 9:31am UTC](https://discuss.elastic.co/t/configure-ssl-for-enterprise-search-with-cloudflare-certificate/250308 "2020-09-29T09:31:08Z")
Config: ent\_search.ssl.enabled: true ent\_search.ssl.key: '/usr/share/elasticsearch/usr/share/enterprise-search/cloudflare\_ssl/ssl/private/ssl-cert-snakeoil.key' ent\_search.ssl.certificate: '/usr/share/elasticsearch/us… --- ## [How to add max buckets](https://discuss.elastic.co/t/how-to-add-max-buckets/250304)
**Author:** [@jamesyone](https://discuss.elastic.co/u/jamesyone)\ **Replies:** 2\ **Last updated:** [September 29, 2020, 9:13am UTC](https://discuss.elastic.co/t/how-to-add-max-buckets/250304 "2020-09-29T09:13:23Z")
Hi- I keep getting this error- Is it possible to add the max buckets on kibana? Or do I have to add it on elasticsearch?? Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"too\_many\_buckets\_exception","r… --- ## [ES regex match failure](https://discuss.elastic.co/t/es-regex-match-failure/250282)
**Author:** [@f4ct0r](https://discuss.elastic.co/u/f4ct0r)\ **Replies:** 1\ **Last updated:** [September 29, 2020, 9:13am UTC](https://discuss.elastic.co/t/es-regex-match-failure/250282 "2020-09-29T09:13:36Z")
Hey guys, I wanna match some data about form-data in ES like ------WebKitFormBoundary9fB75AOSG0bMs1I4\\x0D\\x0AContent-Disposition: form-data; name=\\x22upload\\x22; filename=\\x22shell.php\\x22\\x0D\\x0AContent-Type: applicat… --- ## [Custom metrics from bunch of servers](https://discuss.elastic.co/t/custom-metrics-from-bunch-of-servers/250209)
**Author:** [@rmrfchik](https://discuss.elastic.co/u/rmrfchik)\ **Replies:** 2\ **Last updated:** [September 29, 2020, 8:36am UTC](https://discuss.elastic.co/t/custom-metrics-from-bunch-of-servers/250209 "2020-09-29T08:36:09Z")
I have a number of different servers (php, java...). All of the servers uses different user tracking cookies and are behind nginx. I already have access.log with all cookies I need and all of them are feeded to ES with … --- ## [Configuring Enterprise-Search with SSL](https://discuss.elastic.co/t/configuring-enterprise-search-with-ssl/244017)
**Author:** [@turekg](https://discuss.elastic.co/u/turekg)\ **Replies:** 2\ **Last updated:** [September 29, 2020, 7:55am UTC](https://discuss.elastic.co/t/configuring-enterprise-search-with-ssl/244017 "2020-09-29T07:55:36Z")
I am trying to configure Enterprise Search with SSL. In the enterprise-search.yml I modified the forllowing entries: ent\_search.ssl.enabled: true ent\_search.ssl.keystore.path: server.jks ent\_search.ssl.keystore.passwor… --- ## [How to know the which Elastic node executing the API call with in the Elastic Cluster?](https://discuss.elastic.co/t/how-to-know-the-which-elastic-node-executing-the-api-call-with-in-the-elastic-cluster/250136)
**Author:** [@gsece](https://discuss.elastic.co/u/gsece)\ **Replies:** 4\ **Last updated:** [September 29, 2020, 7:23am UTC](https://discuss.elastic.co/t/how-to-know-the-which-elastic-node-executing-the-api-call-with-in-the-elastic-cluster/250136 "2020-09-29T07:23:08Z")
We have 3 node elastic cluster and all are master eligible nodes. We use bulk or index api to post the document via API. How to identify which elastic node executing the API with in the cluster.. --- ## [RAM/ Heap requirements for Elastic stack](https://discuss.elastic.co/t/ram-heap-requirements-for-elastic-stack/250295)
**Author:** [@Madhu19](https://discuss.elastic.co/u/Madhu19)\ **Replies:** 2\ **Last updated:** [September 29, 2020, 6:52am UTC](https://discuss.elastic.co/t/ram-heap-requirements-for-elastic-stack/250295 "2020-09-29T06:52:12Z")
I have setup ELK for watching logs on Kibana on Linux redhat-6.8 with 16gb RAM and allocated 6GB for Heap. Index size is 1.5gb per day with 7 days retention period. Observed when I query with very simple patterns on Kiba… --- ## [Large numbers in KQL is difficult](https://discuss.elastic.co/t/large-numbers-in-kql-is-difficult/249935)
**Author:** [@bodo.te](https://discuss.elastic.co/u/bodo.te)\ **Replies:** 1\ **Last updated:** [September 29, 2020, 6:32am UTC](https://discuss.elastic.co/t/large-numbers-in-kql-is-difficult/249935 "2020-09-29T06:32:52Z")
Hi , I want to query "event.duration" with KQL. Problem is: event.duration is in nano sec, but since I am querying "Mysql Slow Queries" im interested e.g. is a query like this : event.duration \> 180000000000 which… --- ## [Kibana users](https://discuss.elastic.co/t/kibana-users/250159)
**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\ **Replies:** 7\ **Last updated:** [September 29, 2020, 6:25am UTC](https://discuss.elastic.co/t/kibana-users/250159 "2020-09-29T06:25:53Z")
where is kibana users get stored.How to retrieve if kibana pod gets deleted in elastic cloud --- ## [Kibana and ADA compliance](https://discuss.elastic.co/t/kibana-and-ada-compliance/250093)
**Author:** [@Purnima\_Dhulipudi](https://discuss.elastic.co/u/Purnima_Dhulipudi)\ **Replies:** 4\ **Last updated:** [September 29, 2020, 6:18am UTC](https://discuss.elastic.co/t/kibana-and-ada-compliance/250093 "2020-09-29T06:18:27Z")
Hi We started a POC using Elastic stack and used Kibana to build visulizations and dashboards. Our requirement is the dashboards should meet ADA (American Disability Act) standards Is Kibana ADA compliant or not, Plea… --- ## [Fscrawler does not index to ES with https](https://discuss.elastic.co/t/fscrawler-does-not-index-to-es-with-https/247522)
**Author:** [@Yamini\_Shashank](https://discuss.elastic.co/u/Yamini_Shashank)\ **Replies:** 3\ **Last updated:** [September 29, 2020, 5:29am UTC](https://discuss.elastic.co/t/fscrawler-does-not-index-to-es-with-https/247522 "2020-09-29T05:29:28Z")
The following is the configuration on fscrawler: name: "docscluster" fs: url: "/etc/STORE/" update\_rate: "2s" excludes: - "\*/~\*" json\_support: false filename\_as\_id: true add\_filesize: true remove\_deleted… --- ## [Does running multiple logstash instance is a good idea?](https://discuss.elastic.co/t/does-running-multiple-logstash-instance-is-a-good-idea/250284)
**Author:** [@Kambing](https://discuss.elastic.co/u/Kambing)\ **Replies:** 1\ **Last updated:** [September 29, 2020, 4:43am UTC](https://discuss.elastic.co/t/does-running-multiple-logstash-instance-is-a-good-idea/250284 "2020-09-29T04:43:48Z")
Hi, Currently I'm running multiple instance of filebeat in my production environment, each filebeat module have it's own instance, so when I need to change the configuration on specific module, I'll not bother other modu… --- ## [java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-systemexit-exit/249918)
**Author:** [@Rajan\_Gupta](https://discuss.elastic.co/u/Rajan_Gupta)\ **Replies:** 4\ **Last updated:** [September 29, 2020, 4:22am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-systemexit-exit/249918 "2020-09-29T04:22:39Z")
Hi There, Got Stuck from last three days. I m getting this error while starting the logstash. Could anyone help me on this.Stack trace is defined below :- Sending Logstash logs to D:/Elasticsearch/logstash-7.9.1/logs … --- ## [Getting error SSLConnectionSocketFactory not found in packages?](https://discuss.elastic.co/t/getting-error-sslconnectionsocketfactory-not-found-in-packages/249902)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 4\ **Last updated:** [September 29, 2020, 4:04am UTC](https://discuss.elastic.co/t/getting-error-sslconnectionsocketfactory-not-found-in-packages/249902 "2020-09-29T04:04:30Z")
NameError: SSLConnectionSocketFactory not found in packages org.apache.http.client.methods, org.apache.http.client.entity, org.apache.http.client.config, org.apache.http.config, org.apache.http.conn.socket, org.apache.ht… --- ## [Map nested field into DB output using Elastic input plugin](https://discuss.elastic.co/t/map-nested-field-into-db-output-using-elastic-input-plugin/250176)
**Author:** [@jasoninmel](https://discuss.elastic.co/u/jasoninmel)\ **Replies:** 6\ **Last updated:** [September 29, 2020, 3:54am UTC](https://discuss.elastic.co/t/map-nested-field-into-db-output-using-elastic-input-plugin/250176 "2020-09-29T03:54:20Z")
Hi there, I'm using Logstash as a ETL tool to copy data from Elastic index to DB table. I tried to map a nested field using following insert statement in the logstash configuration; statement =\> \["INSERT into assets (i… --- ## [Logstash connectivity to MYSQL in open source ELK](https://discuss.elastic.co/t/logstash-connectivity-to-mysql-in-open-source-elk/250278)
**Author:** [@DG13](https://discuss.elastic.co/u/DG13)\ **Replies:** 3\ **Last updated:** [September 29, 2020, 3:54am UTC](https://discuss.elastic.co/t/logstash-connectivity-to-mysql-in-open-source-elk/250278 "2020-09-29T03:54:10Z")
Is the MYSQL connectivity to Logstash available in open source ELK stack ? Thanks, --- ## [\[Path.data\]](https://discuss.elastic.co/t/path-data/250177)
**Author:** [@Guillaume\_RENARD](https://discuss.elastic.co/u/Guillaume_RENARD)\ **Replies:** 1\ **Last updated:** [September 29, 2020, 3:32am UTC](https://discuss.elastic.co/t/path-data/250177 "2020-09-29T03:32:04Z")
Hello, I have to path.data path.data: \["/datassd/elasticsearch", "/data/elasticsearch"\] but one is quite small and always full, I want ot not use it anymore and to only use one. is it possible to remove it from con… --- ## [ElasticSearch connection to Tableau in open source ELK](https://discuss.elastic.co/t/elasticsearch-connection-to-tableau-in-open-source-elk/250273)
**Author:** [@DG13](https://discuss.elastic.co/u/DG13)\ **Replies:** 3\ **Last updated:** [September 29, 2020, 2:52am UTC](https://discuss.elastic.co/t/elasticsearch-connection-to-tableau-in-open-source-elk/250273 "2020-09-29T02:52:46Z")
Hi , ElasticSearch Tableau connectivity enabled in open sourceELK stack as well ? I am following this link - https://www.elastic.co/guide/en/elasticsearch/reference/7.9/sql-client-apps-tableau-desktop.html However get… --- ## [Logstash Avro data points are resulting into default value instead of the value from kafka output](https://discuss.elastic.co/t/logstash-avro-data-points-are-resulting-into-default-value-instead-of-the-value-from-kafka-output/250275)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 0\ **Last updated:** [September 29, 2020, 2:33am UTC](https://discuss.elastic.co/t/logstash-avro-data-points-are-resulting-into-default-value-instead-of-the-value-from-kafka-output/250275 "2020-09-29T02:33:55Z")
Logstash output: { "timestamp" =\> 0, "username" =\> "", "tweet" =\> "", "@version" =\> "1", "@timestamp" =\> 2020-09-29T01:59:15.867Z } Kafka Consumer output: {"username":"John Smith","tweet"… --- ## [Logstash aggregate array of objects based on key field](https://discuss.elastic.co/t/logstash-aggregate-array-of-objects-based-on-key-field/250249)
**Author:** [@rfferrao](https://discuss.elastic.co/u/rfferrao)\ **Replies:** 5\ **Last updated:** [September 29, 2020, 12:11am UTC](https://discuss.elastic.co/t/logstash-aggregate-array-of-objects-based-on-key-field/250249 "2020-09-29T00:11:22Z")
I'm receiving some logs like these: datetime="2020-09-2020T14:40:00-0300" action="tunnel-up" tunneltype="ssl-tunnel" tunnelid=1171992131 remip=192.168.0.1 user="someuser" group="vpn\_ssl\_group" and datetime="2020-09-20… --- ## [Problem with EQL queries](https://discuss.elastic.co/t/problem-with-eql-queries/250266)
**Author:** [@Yenii\_Ceri](https://discuss.elastic.co/u/Yenii_Ceri)\ **Replies:** 0\ **Last updated:** [September 28, 2020, 11:22pm UTC](https://discuss.elastic.co/t/problem-with-eql-queries/250266 "2020-09-28T23:22:17Z")
Hey I have an issue with EQL queries on Elasticsearch. I have a basic ES license with xpack enabled, in addition to some Winlogbeat indexes with ECS syntax. However, I don't get any hit when I execute some EQL queries… --- ## [Information about users that will become paying](https://discuss.elastic.co/t/information-about-users-that-will-become-paying/250164)
**Author:** [@boksimon](https://discuss.elastic.co/u/boksimon)\ **Replies:** 3\ **Last updated:** [September 28, 2020, 10:49pm UTC](https://discuss.elastic.co/t/information-about-users-that-will-become-paying/250164 "2020-09-28T22:49:18Z")
Hi, We are indexing events performed by our users in an effort to create a better service. Each event is indexed into elasticsearch in real time, and we have a couple of dashboards visualizing the common actions. An exa… --- ## [Aggregation Based on File Path](https://discuss.elastic.co/t/aggregation-based-on-file-path/250254)
**Author:** [@NomadicCodeGuy](https://discuss.elastic.co/u/NomadicCodeGuy)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 8:24pm UTC](https://discuss.elastic.co/t/aggregation-based-on-file-path/250254 "2020-09-28T20:24:20Z")
I need to combine "errorInfo" fields of events that share nothing in common except for their file path. The field "log.file.path" exists as a field for my data in kibana but am not sure if a field needs to be explicitly … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1216) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1218)