# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1231

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1232

---

## [Date Long Overflow 7.9](https://discuss.elastic.co/t/date-long-overflow-7-9/248488)

<div class="topic-metadata">

**Author:** [@Escalus](https://discuss.elastic.co/u/Escalus)\
**Replies:** 2\
**Last updated:** [September 18, 2020, 9:00am UTC](https://discuss.elastic.co/t/date-long-overflow-7-9/248488 "2020-09-18T09:00:18Z")

</div>

Hello, I get a long overflow in my date fields if the time is pior to 1970. The epoch\_time is a negativ long value and throws an arithmetic\_exception on reindex { "index" : "xxx", "type" : "\_doc", "id" : "pub.10…

---

## [Giop in logstash file](https://discuss.elastic.co/t/giop-in-logstash-file/248971)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 6\
**Last updated:** [September 18, 2020, 8:52am UTC](https://discuss.elastic.co/t/giop-in-logstash-file/248971 "2020-09-18T08:52:26Z")

</div>

I create a giop filed in my logstash config file (location). In my data source the latitude and the longitude fields can be an empty string. so whene i load data into elasticserach i lose all the documents wich have th…

---

## [Sharding hot vs warm Nodes](https://discuss.elastic.co/t/sharding-hot-vs-warm-nodes/245960)

<div class="topic-metadata">

**Author:** [@fvegaucr1](https://discuss.elastic.co/u/fvegaucr1)\
**Replies:** 7\
**Last updated:** [September 18, 2020, 8:22am UTC](https://discuss.elastic.co/t/sharding-hot-vs-warm-nodes/245960 "2020-09-18T08:22:43Z")

</div>

Hi, hope you all doing good, I will like to see if someone can help me with this. I have a cluster of 35 nodes running version 7.4.2 3 x of them are master nodes 2 x coordinators 8 x hot 2 x cold 20 x Warm We get …

---

## [Logstash and JSON array split](https://discuss.elastic.co/t/logstash-and-json-array-split/247482)

<div class="topic-metadata">

**Author:** [@ranu\_shekhar](https://discuss.elastic.co/u/ranu_shekhar)\
**Replies:** 4\
**Last updated:** [September 18, 2020, 8:02am UTC](https://discuss.elastic.co/t/logstash-and-json-array-split/247482 "2020-09-18T08:02:29Z")

</div>

Hi, I have the following input in JSON file: \[{"id":"9906fce735f8282ef85ccd2e5d49cbd7d3aaef2c","short\_id":"9906fce7","created\_at":"2020-08-21T16:01:20.000+05:30","parent\_ids":"d4e1afec8e2069f514701697c7a6ffd4cda5fc74",…

---

## [High CPU usage on only 1 Data node](https://discuss.elastic.co/t/high-cpu-usage-on-only-1-data-node/248407)

<div class="topic-metadata">

**Author:** [@fgourichon](https://discuss.elastic.co/u/fgourichon)\
**Replies:** 6\
**Last updated:** [September 18, 2020, 7:54am UTC](https://discuss.elastic.co/t/high-cpu-usage-on-only-1-data-node/248407 "2020-09-18T07:54:26Z")

</div>

Hi there, I'm trying to understand why we sometimes get high CPU utilisation on only one Data node of our cluster. We mainly use 2 indexes (80GB for one, 500MB for the second) with 5 shards and one replica each which se…

---

## [Search performance loss in Elasticsearch 7](https://discuss.elastic.co/t/search-performance-loss-in-elasticsearch-7/248871)

<div class="topic-metadata">

**Author:** [@agutierrezrodriguez](https://discuss.elastic.co/u/agutierrezrodriguez)\
**Replies:** 8\
**Last updated:** [September 18, 2020, 7:33am UTC](https://discuss.elastic.co/t/search-performance-loss-in-elasticsearch-7/248871 "2020-09-18T07:33:08Z")

</div>

Hi! We are upgrading our Elasticsearch 5.6 clusters to Elasticsearch 7.6. We're detecting that the search performance is worst in Elasticsearch 7.6 than 5.6. We are testing empty clusters with the same installation pr…

---

## [Audit logging configuration via elasticsearch.yml](https://discuss.elastic.co/t/audit-logging-configuration-via-elasticsearch-yml/248357)

<div class="topic-metadata">

**Author:** [@itokai](https://discuss.elastic.co/u/itokai)\
**Replies:** 1\
**Last updated:** [September 18, 2020, 7:31am UTC](https://discuss.elastic.co/t/audit-logging-configuration-via-elasticsearch-yml/248357 "2020-09-18T07:31:08Z")

</div>

Hi, started to configure amount of logging recently and figured out how to do it in log4j2.properties, like below basic example for testing: ######## Server JSON ############################ appender.rolling.t…

---

## [Question about Snapshot and Restore](https://discuss.elastic.co/t/question-about-snapshot-and-restore/249041)

<div class="topic-metadata">

**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\
**Replies:** 4\
**Last updated:** [September 18, 2020, 5:48am UTC](https://discuss.elastic.co/t/question-about-snapshot-and-restore/249041 "2020-09-18T05:48:31Z")

</div>

Suppose we have two cluster : A and B Data from A is getting synced to B every 12 hour. So incremental snapshots from A are getting restored on B. Suppose on a day, at first 12 hr, index1 was created with 10 docs. Now …

---

## [Elasticsearch: Aggregations request timezone field not working](https://discuss.elastic.co/t/elasticsearch-aggregations-request-timezone-field-not-working/249061)

<div class="topic-metadata">

**Author:** [@yunut](https://discuss.elastic.co/u/yunut)\
**Replies:** 0\
**Last updated:** [September 18, 2020, 5:46am UTC](https://discuss.elastic.co/t/elasticsearch-aggregations-request-timezone-field-not-working/249061 "2020-09-18T05:46:20Z")

</div>

Elasticsearch Version: 7.7.0v Rest client Vesion: 7.7.0v The query created by Postman and the request created by QueryBuilder are the same, but the TimeZone field is not applied to java requests. here is request targe…

---

## [How & When to process/convert data in ELK](https://discuss.elastic.co/t/how-when-to-process-convert-data-in-elk/248816)

<div class="topic-metadata">

**Author:** [@aspat](https://discuss.elastic.co/u/aspat)\
**Replies:** 4\
**Last updated:** [September 18, 2020, 5:22am UTC](https://discuss.elastic.co/t/how-when-to-process-convert-data-in-elk/248816 "2020-09-18T05:22:37Z")

</div>

Hello, I am planning to use ELK My current SQL table is like below Time, Field ID, Filed\_name, Field\_Sub\_ID, value, extra value, type To view this data we have provided excel add-in. User can provide basic filter to…

---

## [ELastic upgrade](https://discuss.elastic.co/t/elastic-upgrade/248768)

<div class="topic-metadata">

**Author:** [@chandra\_bera](https://discuss.elastic.co/u/chandra_bera)\
**Replies:** 2\
**Last updated:** [September 18, 2020, 5:07am UTC](https://discuss.elastic.co/t/elastic-upgrade/248768 "2020-09-18T05:07:02Z")

</div>

Is there any video or documents to upgrade the Elastic stack 7.5 to 7.9

---

## [How to change Kibana Notification popup CSS](https://discuss.elastic.co/t/how-to-change-kibana-notification-popup-css/248271)

<div class="topic-metadata">

**Author:** [@chandu5565](https://discuss.elastic.co/u/chandu5565)\
**Replies:** 2\
**Last updated:** [September 18, 2020, 4:25am UTC](https://discuss.elastic.co/t/how-to-change-kibana-notification-popup-css/248271 "2020-09-18T04:25:02Z")

</div>

Hi, Objective : I have to change the notification popup from bottom to top. I have upgraded kibana from 7.5.1 to 7.9.0 Earlier we had made change in file /usr/share/kibana/node\_modules/@elastic/eui/dist/eui\_theme\_ligh…

---

## [My first project ... beginner question](https://discuss.elastic.co/t/my-first-project-beginner-question/249000)

<div class="topic-metadata">

**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\
**Replies:** 3\
**Last updated:** [September 18, 2020, 1:00am UTC](https://discuss.elastic.co/t/my-first-project-beginner-question/249000 "2020-09-18T01:00:26Z")

</div>

Hi guys , here I am learning elk. I managed to: 1 Create an index. PUT /dhcp\_leases { "settings": { "number\_of\_shards": 1 }, "mappings": { "properties": { "router": { "type": "text" }, "curre…

---

## [Prerequisites for ELK and Filebeat](https://discuss.elastic.co/t/prerequisites-for-elk-and-filebeat/248946)

<div class="topic-metadata">

**Author:** [@sumitsahay](https://discuss.elastic.co/u/sumitsahay)\
**Replies:** 5\
**Last updated:** [September 18, 2020, 12:56am UTC](https://discuss.elastic.co/t/prerequisites-for-elk-and-filebeat/248946 "2020-09-18T00:56:10Z")

</div>

Hi Team, Just wanted to know the CPU and RAM Prerequisites for ELK and Filebeat, if we deploy this in Infra where we can captures log around 500 client node. Please suggest the configuration for this. Thanks

---

## [Can not create script field by using regex in kibana](https://discuss.elastic.co/t/can-not-create-script-field-by-using-regex-in-kibana/248967)

<div class="topic-metadata">

**Author:** [@le\_ba\_nam](https://discuss.elastic.co/u/le_ba_nam)\
**Replies:** 2\
**Last updated:** [September 18, 2020, 12:53am UTC](https://discuss.elastic.co/t/can-not-create-script-field-by-using-regex-in-kibana/248967 "2020-09-18T00:53:53Z")

</div>

I want to create new script field in Kibana. I want to using regex to cut some text from another field ('message') and fill to new script field. I follow instruction link below: ( Match a string and return that matc…

---

## [Increasing index.max\_result\_window using CentOS CLI](https://discuss.elastic.co/t/increasing-index-max-result-window-using-centos-cli/246432)

<div class="topic-metadata">

**Author:** [@hishan42](https://discuss.elastic.co/u/hishan42)\
**Replies:** 11\
**Last updated:** [September 17, 2020, 11:28pm UTC](https://discuss.elastic.co/t/increasing-index-max-result-window-using-centos-cli/246432 "2020-09-17T23:28:13Z")

</div>

I am using graylog with mongodb and elasticsearch 6.8 on CentOS 7. Now I have received an error saying "Elasticsearch limits the search result to 10000 messages". How do I increase the index.max\_result\_window? I dont …

---

## [How to modify data table column values in Kibana](https://discuss.elastic.co/t/how-to-modify-data-table-column-values-in-kibana/248989)

<div class="topic-metadata">

**Author:** [@geekganesh](https://discuss.elastic.co/u/geekganesh)\
**Replies:** 2\
**Last updated:** [September 17, 2020, 11:26pm UTC](https://discuss.elastic.co/t/how-to-modify-data-table-column-values-in-kibana/248989 "2020-09-17T23:26:13Z")

</div>

In Elastic search we store events, I have built data table which aggregates based on event types. I have filter which checks for event.keyword : "job-completed". I am getting the count as 1 or 0 but i want to display as …

---

## [Investigating a "stuck" node](https://discuss.elastic.co/t/investigating-a-stuck-node/248864)

<div class="topic-metadata">

**Author:** [@JnBrymn](https://discuss.elastic.co/u/JnBrymn)\
**Replies:** 6\
**Last updated:** [September 17, 2020, 10:44pm UTC](https://discuss.elastic.co/t/investigating-a-stuck-node/248864 "2020-09-17T22:44:01Z")

</div>

I'm setting up a new search application on ES 7.3.1 and I am seeing some unusual behavior. I have 16 storage nodes and 5 coordinator nodes (no storage). All queries go though the coordinators. We have 400K docs, 4TB tota…

---

## [Bulk Requests and Routing](https://discuss.elastic.co/t/bulk-requests-and-routing/248995)

<div class="topic-metadata">

**Author:** [@munasia](https://discuss.elastic.co/u/munasia)\
**Replies:** 1\
**Last updated:** [September 17, 2020, 10:38pm UTC](https://discuss.elastic.co/t/bulk-requests-and-routing/248995 "2020-09-17T22:38:51Z")

</div>

Is there a difference in indexing performance between a bulk request whose individual items have the same routing value vs a bulk request whose items have different values? Background: I'm fetching rows from a DB to be …

---

## [Es score from 0 to 1 when finding similar documents to existing one](https://discuss.elastic.co/t/es-score-from-0-to-1-when-finding-similar-documents-to-existing-one/248919)

<div class="topic-metadata">

**Author:** [@johanson](https://discuss.elastic.co/u/johanson)\
**Replies:** 1\
**Last updated:** [September 17, 2020, 10:30pm UTC](https://discuss.elastic.co/t/es-score-from-0-to-1-when-finding-similar-documents-to-existing-one/248919 "2020-09-17T22:30:24Z")

</div>

Is it possible to calculate relative score from 0 to 1 when searching similar documents to existing one? Need to calculate relative score from 0 to 1 when searching similar documents to existing one. So existing one has…

---

## [How to change the huge amount of data formats of my index pattern at once?](https://discuss.elastic.co/t/how-to-change-the-huge-amount-of-data-formats-of-my-index-pattern-at-once/248937)

<div class="topic-metadata">

**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\
**Replies:** 1\
**Last updated:** [September 17, 2020, 10:23pm UTC](https://discuss.elastic.co/t/how-to-change-the-huge-amount-of-data-formats-of-my-index-pattern-at-once/248937 "2020-09-17T22:23:16Z")

</div>

I want to change the data format from default to string. However it is too many to change from the UI. Is Reindex API able to use or other Restful API to do so?

---

## [(ELK 7.9.1) Security - Hosts and Security - Network missing data](https://discuss.elastic.co/t/elk-7-9-1-security-hosts-and-security-network-missing-data/248576)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 19\
**Last updated:** [September 17, 2020, 10:19pm UTC](https://discuss.elastic.co/t/elk-7-9-1-security-hosts-and-security-network-missing-data/248576 "2020-09-17T22:19:57Z")

</div>

Hi, \*Recently upgraded to ELK 7.9.1. \*All beats were upgraded to match same node version \*All indexes were deleted and recreated As stated above, I am running ELK 7.9.1. If I check Discovery section, I can confirm th…

---

## [Logstash](https://discuss.elastic.co/t/logstash/248924)

<div class="topic-metadata">

**Author:** [@sai92](https://discuss.elastic.co/u/sai92)\
**Replies:** 2\
**Last updated:** [September 17, 2020, 10:19pm UTC](https://discuss.elastic.co/t/logstash/248924 "2020-09-17T22:19:48Z")

</div>

Hello I am using elasticsearch and kibana for IoT platform to collect data from sensors I use seperate plugin of mine to calculate signal quality of each sensor and to collect data from sensor and push it to elasticsear…

---

## [Uptime app 7.9.1 - "Internal server error"](https://discuss.elastic.co/t/uptime-app-7-9-1-internal-server-error/248384)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 12\
**Last updated:** [September 17, 2020, 10:17pm UTC](https://discuss.elastic.co/t/uptime-app-7-9-1-internal-server-error/248384 "2020-09-17T22:17:26Z")

</div>

Hi, Note: I am running ELK 7.9.1. All beats were updated to match same version Recently Uptime app stopped showing data. It used to work fine and I was monitoring a few machines. Now it is showing nothing else but this…

---

## [Wrong data in Elasticsearch](https://discuss.elastic.co/t/wrong-data-in-elasticsearch/248913)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 1\
**Last updated:** [September 17, 2020, 10:14pm UTC](https://discuss.elastic.co/t/wrong-data-in-elasticsearch/248913 "2020-09-17T22:14:34Z")

</div>

I have installed elk on linux server and winlogbeat on windows.I am using syslog input plugin but i don't know why it is showing me winlogbeat data input { syslog { port =\> 10514 host =\> "10.198.0.133" } } output { el…

---

## [Open 92 00 port](https://discuss.elastic.co/t/open-92-00-port/248964)

<div class="topic-metadata">

**Author:** [@YURA](https://discuss.elastic.co/u/YURA)\
**Replies:** 1\
**Last updated:** [September 17, 2020, 10:05pm UTC](https://discuss.elastic.co/t/open-92-00-port/248964 "2020-09-17T22:05:21Z")

</div>

Good day! CentOS Linux release 8.2.2004 (Core) there was installed (number "7.9.0") so what we need. open 9200 for only one IP. what I did iptables -I INPUT -s myserverip/32 -p tcp -m tcp --dport 9200 -j ACCEPT ip…

---

## [Elasticsearch - Setting replica to 0 for new indices](https://discuss.elastic.co/t/elasticsearch-setting-replica-to-0-for-new-indices/248986)

<div class="topic-metadata">

**Author:** [@Elk\_huh](https://discuss.elastic.co/u/Elk_huh)\
**Replies:** 1\
**Last updated:** [September 17, 2020, 10:03pm UTC](https://discuss.elastic.co/t/elasticsearch-setting-replica-to-0-for-new-indices/248986 "2020-09-17T22:03:09Z")

</div>

If I wanted to set all new replicas to 0 , will the \* affect system indices ? { "index\_patterns": \["\*"\], "settings": { "index": { "number\_of\_replicas": 0 } } }

---

## [Title validation is not allowing to post question in the forum](https://discuss.elastic.co/t/title-validation-is-not-allowing-to-post-question-in-the-forum/248911)

<div class="topic-metadata">

**Author:** [@habeebperwad](https://discuss.elastic.co/u/habeebperwad)\
**Replies:** 4\
**Last updated:** [September 17, 2020, 9:53pm UTC](https://discuss.elastic.co/t/title-validation-is-not-allowing-to-post-question-in-the-forum/248911 "2020-09-17T21:53:00Z")

</div>

Why don't make it as just a suggestion rather than preventing from posting? Not everyone will be good at English.

---

## [Elasticsearch query works in kibana but not code](https://discuss.elastic.co/t/elasticsearch-query-works-in-kibana-but-not-code/249032)

<div class="topic-metadata">

**Author:** [@martinradio](https://discuss.elastic.co/u/martinradio)\
**Replies:** 3\
**Last updated:** [September 17, 2020, 8:50pm UTC](https://discuss.elastic.co/t/elasticsearch-query-works-in-kibana-but-not-code/249032 "2020-09-17T20:50:26Z")

</div>

I have a query string source.keyword: "chewy" and is\_discontinued:"false" that if I run in the Kibana UI, returns the correct number: If I try to run the query in code though, it returns an incorrect number: GET /i…

---

## [ShardNotInPrimaryModeException when indexing to a cluster while shards move](https://discuss.elastic.co/t/shardnotinprimarymodeexception-when-indexing-to-a-cluster-while-shards-move/248925)

<div class="topic-metadata">

**Author:** [@zorah](https://discuss.elastic.co/u/zorah)\
**Replies:** 0\
**Last updated:** [September 17, 2020, 7:28am UTC](https://discuss.elastic.co/t/shardnotinprimarymodeexception-when-indexing-to-a-cluster-while-shards-move/248925 "2020-09-17T07:28:43Z")

</div>

When I add a new node to my Elasticsearch cluster, the cluster will rebalance shards and shards will move onto the new node. When I want to remove a node from the cluster, I will force shards off the node before decommis…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1230)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1232)
