# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1239

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1240

---

## [Access elasticsearch from outside network \< my static public ip address \>:9200](https://discuss.elastic.co/t/access-elasticsearch-from-outside-network-my-static-public-ip-address-9200/248340)

<div class="topic-metadata">

**Author:** [@Abdul\_Samad](https://discuss.elastic.co/u/Abdul_Samad)\
**Replies:** 2\
**Last updated:** [September 13, 2020, 11:19pm UTC](https://discuss.elastic.co/t/access-elasticsearch-from-outside-network-my-static-public-ip-address-9200/248340 "2020-09-13T23:19:01Z")

</div>

I have my Elasticsearch running on my windows 10 server. I want to access it with \< my static public ip address \>:9200 I can access it with: localhost:9200 127.0.0.1:9200 \< my ipv4 address from ipconfig \>:9200 But i …

---

## [Logstash always creates elasticsearch indexes if they dont exist](https://discuss.elastic.co/t/logstash-always-creates-elasticsearch-indexes-if-they-dont-exist/248444)

<div class="topic-metadata">

**Author:** [@ejhayes](https://discuss.elastic.co/u/ejhayes)\
**Replies:** 3\
**Last updated:** [September 13, 2020, 11:16pm UTC](https://discuss.elastic.co/t/logstash-always-creates-elasticsearch-indexes-if-they-dont-exist/248444 "2020-09-13T23:16:30Z")

</div>

I precreated Elasticsearch indexes with alias "logstash-beats" and "logstash-postgres" and that works fine with Logstash output. However I would also like to completely disable logstash from creating new indexes at all …

---

## [Not performing POST when running command twice](https://discuss.elastic.co/t/not-performing-post-when-running-command-twice/248454)

<div class="topic-metadata">

**Author:** [@gdiaz](https://discuss.elastic.co/u/gdiaz)\
**Replies:** 1\
**Last updated:** [September 13, 2020, 10:28pm UTC](https://discuss.elastic.co/t/not-performing-post-when-running-command-twice/248454 "2020-09-13T22:28:00Z")

</div>

Hi all, I'm running es with the following command docker run -d -p 9200:9200 -p 9300:9300 --name=elasticsearch -e "discovery.type=single-node" -v elasticsearch-data:/usr/share/elasticsearch/data docker.elastic.co/elast…

---

## [Dashboard link on to canvas](https://discuss.elastic.co/t/dashboard-link-on-to-canvas/248451)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 2\
**Last updated:** [September 13, 2020, 7:16pm UTC](https://discuss.elastic.co/t/dashboard-link-on-to-canvas/248451 "2020-09-13T19:16:54Z")

</div>

I have multiple dashbaord and I want to put link of that in to canvas. how do I do that When I do this in tsvb or markdown it works fine \[link back to dashboard1\](#/dashboard/b9b2bee0-e5d7-11ea-ab58-ff0b09b8c93d) but…

---

## [Nested search and bulk update](https://discuss.elastic.co/t/nested-search-and-bulk-update/248421)

<div class="topic-metadata">

**Author:** [@doniv](https://discuss.elastic.co/u/doniv)\
**Replies:** 5\
**Last updated:** [September 13, 2020, 7:12pm UTC](https://discuss.elastic.co/t/nested-search-and-bulk-update/248421 "2020-09-13T19:12:44Z")

</div>

Hello, guys. I am trying to figured out the best practice to solve following case: I have two data tables in sql db: transactions and bank\_accounts (one transaction has one bank account). And i would like to search tho…

---

## [Query not working in different environments](https://discuss.elastic.co/t/query-not-working-in-different-environments/245609)

<div class="topic-metadata">

**Author:** [@gdiaz](https://discuss.elastic.co/u/gdiaz)\
**Replies:** 4\
**Last updated:** [September 13, 2020, 7:07pm UTC](https://discuss.elastic.co/t/query-not-working-in-different-environments/245609 "2020-09-13T19:07:09Z")

</div>

I have an elastic instance running in the cloud. I'm developing a REST service in Node. The same elastic instance is used when Node is in localhost and when is in develop env. When Node runs in localhost all queries work…

---

## [User credentials cannot be used for local connections](https://discuss.elastic.co/t/user-credentials-cannot-be-used-for-local-connections/247751)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 2\
**Last updated:** [September 13, 2020, 5:44pm UTC](https://discuss.elastic.co/t/user-credentials-cannot-be-used-for-local-connections/247751 "2020-09-13T17:44:50Z")

</div>

Hello, I want to use WMI logstash plugin to download information from hosts. I have logstash 7.9.0 installed on Windows 2019 Terminal Server. When I use below config input { wmi { query =\> "win32\_bios" host …

---

## [java.lang.NoClassDefFoundError: Could not initialize class com.sun.jna.Native](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-could-not-initialize-class-com-sun-jna-native/248441)

<div class="topic-metadata">

**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\
**Replies:** 13\
**Last updated:** [September 13, 2020, 3:24pm UTC](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-could-not-initialize-class-com-sun-jna-native/248441 "2020-09-13T15:24:26Z")

</div>

Hi, Greetings !! I have installed ES 7.9 version and jdk 8u202 version. But unable to start the ES service. Sep 13 16:03:20 FRAKHRPL100N systemd-entrypoint\[72677\]: fatal error in thread \[main\], exiting Sep 13 16:03:2…

---

## [java.lang.IllegalArgumentException: unknown setting \[path.conf\] please check that any required plugins are installed, or check the breaking changes documentation for removed settings](https://discuss.elastic.co/t/java-lang-illegalargumentexception-unknown-setting-path-conf-please-check-that-any-required-plugins-are-installed-or-check-the-breaking-changes-documentation-for-removed-settings/248438)

<div class="topic-metadata">

**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\
**Replies:** 2\
**Last updated:** [September 13, 2020, 2:53pm UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-unknown-setting-path-conf-please-check-that-any-required-plugins-are-installed-or-check-the-breaking-changes-documentation-for-removed-settings/248438 "2020-09-13T14:53:49Z")

</div>

Hi All, Greeting !! I am creating the new setup of ELK, and now i am unable to start ES service. Logs are below for reference. ES Version: 7.9 elasticsearch.yml config:- cluster.name: BPOConnectElasticSearch 2 node…

---

## [Empty report for predefined date filters like yesterday](https://discuss.elastic.co/t/empty-report-for-predefined-date-filters-like-yesterday/247842)

<div class="topic-metadata">

**Author:** [@aelrwiny](https://discuss.elastic.co/u/aelrwiny)\
**Replies:** 2\
**Last updated:** [September 13, 2020, 12:36pm UTC](https://discuss.elastic.co/t/empty-report-for-predefined-date-filters-like-yesterday/247842 "2020-09-13T12:36:08Z")

</div>

I defined yesterday date filter like { "from": "now-1d/d", "to": "now-1d/d", "display": "Yesterday" } when applying this date filter for dashboard it is showing the data correctly but when downloading csv report from …

---

## [Metatrader: How Parse Such Logs?](https://discuss.elastic.co/t/metatrader-how-parse-such-logs/248406)

<div class="topic-metadata">

**Author:** [@mzubairsaleem](https://discuss.elastic.co/u/mzubairsaleem)\
**Replies:** 2\
**Last updated:** [September 13, 2020, 11:56am UTC](https://discuss.elastic.co/t/metatrader-how-parse-such-logs/248406 "2020-09-13T11:56:31Z")

</div>

Hi, 0 23:35:01.102 Monitor connections: 354 free memory: 3124552 kb cpu: 3% net: 0 Kbyte/s sockets: 513 threads: 71 handles: 1423 0 23:35:01.102 Monitor max. memory block: 2064156 kb process cpu: 0% net in: 0 Kbyte/…

---

## [Lucene query on nested type](https://discuss.elastic.co/t/lucene-query-on-nested-type/248434)

<div class="topic-metadata">

**Author:** [@Yuval99](https://discuss.elastic.co/u/Yuval99)\
**Replies:** 1\
**Last updated:** [September 13, 2020, 10:43am UTC](https://discuss.elastic.co/t/lucene-query-on-nested-type/248434 "2020-09-13T10:43:48Z")

</div>

Hi guys! We are trying to make a search based on lucene syntax on object with nested type fields. We looked on DSL but it's not fitted to our requirements. Our data looks like: { scans: \[ { ip: "1.2.3.4", is\_malware:…

---

## [Unable to execute POST request to Kibana](https://discuss.elastic.co/t/unable-to-execute-post-request-to-kibana/245992)

<div class="topic-metadata">

**Author:** [@peternijem](https://discuss.elastic.co/u/peternijem)\
**Replies:** 29\
**Last updated:** [September 13, 2020, 7:29am UTC](https://discuss.elastic.co/t/unable-to-execute-post-request-to-kibana/245992 "2020-09-13T07:29:12Z")

</div>

Hi, I've built a UI that executes REST API for creating user, role, and a space in Kibana. But, the POST requests fail due to CORS poilicy: In the kibana.yml I have the following: server.cors: true server.cors.or…

---

## [Timestamp is ingest timestamp, not event timestamp](https://discuss.elastic.co/t/timestamp-is-ingest-timestamp-not-event-timestamp/248351)

<div class="topic-metadata">

**Author:** [@batninja24601](https://discuss.elastic.co/u/batninja24601)\
**Replies:** 5\
**Last updated:** [September 13, 2020, 4:03am UTC](https://discuss.elastic.co/t/timestamp-is-ingest-timestamp-not-event-timestamp/248351 "2020-09-13T04:03:52Z")

</div>

I am using Filebeat to send single line ELFF formatted logs from a Bluecoat proxy to Logstash. I believe I am grokking out the timestamp field correctly from the message, but the timestamp in ElasticSearch for all these…

---

## [Phrase suggester doesn't provide the correct suggestions](https://discuss.elastic.co/t/phrase-suggester-doesnt-provide-the-correct-suggestions/248428)

<div class="topic-metadata">

**Author:** [@smuthuka](https://discuss.elastic.co/u/smuthuka)\
**Replies:** 0\
**Last updated:** [September 13, 2020, 3:18am UTC](https://discuss.elastic.co/t/phrase-suggester-doesnt-provide-the-correct-suggestions/248428 "2020-09-13T03:18:47Z")

</div>

Phrase suggester doesn't provide the correct suggestions. This usually happens after adding/deleting documents. Index Mapping PUT sugg\_test { "settings": { "index": { "number\_of\_shards": "1", "number\_…

---

## [Alternative to using filtered index alias](https://discuss.elastic.co/t/alternative-to-using-filtered-index-alias/248419)

<div class="topic-metadata">

**Author:** [@ilya.rybak](https://discuss.elastic.co/u/ilya.rybak)\
**Replies:** 1\
**Last updated:** [September 12, 2020, 8:32pm UTC](https://discuss.elastic.co/t/alternative-to-using-filtered-index-alias/248419 "2020-09-12T20:32:51Z")

</div>

I'm trying to figure out possible solution to the following problem. In my current implementation I'm relying on so called filtered aliases where I can create a view of the same index for each user e.g.: POST /aliases { …

---

## [Alternative to filtered index alias](https://discuss.elastic.co/t/alternative-to-filtered-index-alias/248388)

<div class="topic-metadata">

**Author:** [@ilya.rybak](https://discuss.elastic.co/u/ilya.rybak)\
**Replies:** 3\
**Last updated:** [September 12, 2020, 8:31pm UTC](https://discuss.elastic.co/t/alternative-to-filtered-index-alias/248388 "2020-09-12T20:31:27Z")

</div>

As with many solutions that require retention policy for data stored in elasticsearch, we’ve implemented the commonly used pattern of having a single index per day. With this pattern removing the old data would be as sim…

---

## [Can Kibana do more than visualize?](https://discuss.elastic.co/t/can-kibana-do-more-than-visualize/248399)

<div class="topic-metadata">

**Author:** [@DThompson55](https://discuss.elastic.co/u/DThompson55)\
**Replies:** 1\
**Last updated:** [September 12, 2020, 12:26pm UTC](https://discuss.elastic.co/t/can-kibana-do-more-than-visualize/248399 "2020-09-12T12:26:12Z")

</div>

Once I search for and find a specific row (if that's the right word) in an index, I need some way to act on it, like send it to a kafka topic for example. Is there a way to do that in kibana, or do I need something else? …

---

## [What's the performance difference between \`ids query\` and \`terms query\`?](https://discuss.elastic.co/t/whats-the-performance-difference-between-ids-query-and-terms-query/248398)

<div class="topic-metadata">

**Author:** [@Morriaty](https://discuss.elastic.co/u/Morriaty)\
**Replies:** 1\
**Last updated:** [September 12, 2020, 8:54am UTC](https://discuss.elastic.co/t/whats-the-performance-difference-between-ids-query-and-terms-query/248398 "2020-09-12T08:54:46Z")

</div>

Say we got a large id set, then which query would be the best choice? # ids query { "query": { "bool": { "filter": \[ { "ids" : { "values" : \["1", "2", ....,"100000"\] }…

---

## [Can I create an Elastic Search index manually against an existing mongodb collection?](https://discuss.elastic.co/t/can-i-create-an-elastic-search-index-manually-against-an-existing-mongodb-collection/248383)

<div class="topic-metadata">

**Author:** [@Juan\_Pablo\_Realini](https://discuss.elastic.co/u/Juan_Pablo_Realini)\
**Replies:** 1\
**Last updated:** [September 12, 2020, 8:00am UTC](https://discuss.elastic.co/t/can-i-create-an-elastic-search-index-manually-against-an-existing-mongodb-collection/248383 "2020-09-12T08:00:36Z")

</div>

Hi.. I am new to ES, and have some very specific scenario I would like to achieve. I am an SDET testing a web app (Blazor / Mongo). For one of my tests I need to seed the db with 5000 records... before they implemented …

---

## [Elasticsearch could not run on public ip on AWS](https://discuss.elastic.co/t/elasticsearch-could-not-run-on-public-ip-on-aws/248354)

<div class="topic-metadata">

**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\
**Replies:** 2\
**Last updated:** [September 12, 2020, 7:42am UTC](https://discuss.elastic.co/t/elasticsearch-could-not-run-on-public-ip-on-aws/248354 "2020-09-12T07:42:05Z")

</div>

I am trying to bind my public ip on Elasticsearch but it does not working. however, it is working ok while doing curl from localhost, but giving connection timed out on browser. I read almost every article here in commu…

---

## [No space left on device](https://discuss.elastic.co/t/no-space-left-on-device/248400)

<div class="topic-metadata">

**Author:** [@Sarang\_Dharmapurikar](https://discuss.elastic.co/u/Sarang_Dharmapurikar)\
**Replies:** 2\
**Last updated:** [September 12, 2020, 5:01am UTC](https://discuss.elastic.co/t/no-space-left-on-device/248400 "2020-09-12T05:01:54Z")

</div>

Hi folks, I'm using elasticsearch docker image but unable to run it on my Mac. It used to be fine. $ docker run -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" docker.elastic.co/elasticsearch/elasticsearch:7.…

---

## [Elasticsearch Ports apart from 9200 and 9300](https://discuss.elastic.co/t/elasticsearch-ports-apart-from-9200-and-9300/248312)

<div class="topic-metadata">

**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\
**Replies:** 3\
**Last updated:** [September 12, 2020, 4:11am UTC](https://discuss.elastic.co/t/elasticsearch-ports-apart-from-9200-and-9300/248312 "2020-09-12T04:11:15Z")

</div>

Which other ports do elasticsearch uses apart from 9200 and 9300? Can I use 9201 for kibana assuming that Elasticsearch won't use other port in 920\* ranges? What issues it could create?

---

## [Elastic Mapping Question for Nested List of Objects](https://discuss.elastic.co/t/elastic-mapping-question-for-nested-list-of-objects/248397)

<div class="topic-metadata">

**Author:** [@vastevenson](https://discuss.elastic.co/u/vastevenson)\
**Replies:** 0\
**Last updated:** [September 12, 2020, 1:16am UTC](https://discuss.elastic.co/t/elastic-mapping-question-for-nested-list-of-objects/248397 "2020-09-12T01:16:48Z")

</div>

Hi, I am trying to upload data to an Elastic index. The each document can have many authors associated with it. How should I structure the mapping for this index so that authors will contain a list of first and last nam…

---

## [Kibana 7.9.1 - Date type mapping error](https://discuss.elastic.co/t/kibana-7-9-1-date-type-mapping-error/248223)

<div class="topic-metadata">

**Author:** [@kercio](https://discuss.elastic.co/u/kercio)\
**Replies:** 11\
**Last updated:** [September 11, 2020, 9:34pm UTC](https://discuss.elastic.co/t/kibana-7-9-1-date-type-mapping-error/248223 "2020-09-11T21:34:58Z")

</div>

My data dates are in the epoch format thus I am trying to use mapping to display the date in the proper format in Kibana, however, it's failing with the following error message: \[2020-09-10T18:39:43,718\]\[INFO \]\[o.e.a.b.…

---

## [How can receive log in elastic siem using logstash](https://discuss.elastic.co/t/how-can-receive-log-in-elastic-siem-using-logstash/248258)

<div class="topic-metadata">

**Author:** [@111387](https://discuss.elastic.co/u/111387)\
**Replies:** 1\
**Last updated:** [September 11, 2020, 9:14pm UTC](https://discuss.elastic.co/t/how-can-receive-log-in-elastic-siem-using-logstash/248258 "2020-09-11T21:14:13Z")

</div>

I installed suricata, and i want using elastic siem so. i installed filebeat and send to elastic search and kibana i well. but i want to using logstash. i try that filebeat send log to logstash and logstash pass to el…

---

## [Média de unique count](https://discuss.elastic.co/t/media-de-unique-count/248372)

<div class="topic-metadata">

**Author:** [@ormenese](https://discuss.elastic.co/u/ormenese)\
**Replies:** 2\
**Last updated:** [September 11, 2020, 8:29pm UTC](https://discuss.elastic.co/t/media-de-unique-count/248372 "2020-09-11T20:29:29Z")

</div>

Boa tarde. Elastic 7.8 Kibana Tenho um índice onde armazeno todas as consultas e atendimentos médicos de pacientes. Gostaria de obter a média de pacientes atendidos em um período. De preferência em um gráfico Metric. …

---

## [Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \\"=\>\\" at line](https://discuss.elastic.co/t/expected-one-of-t-r-n-at-line/248050)

<div class="topic-metadata">

**Author:** [@teej](https://discuss.elastic.co/u/teej)\
**Replies:** 5\
**Last updated:** [September 11, 2020, 6:45pm UTC](https://discuss.elastic.co/t/expected-one-of-t-r-n-at-line/248050 "2020-09-11T18:45:39Z")

</div>

Hi, I am trying to extract one alphanumeric field in an XML file but the config is not happy. I've search this one out for a while but I cannot seem to figure out what isnt right about this simple config: input { fil…

---

## [Upgrade Assistant API Not Responding](https://discuss.elastic.co/t/upgrade-assistant-api-not-responding/247138)

<div class="topic-metadata">

**Author:** [@ajrvester](https://discuss.elastic.co/u/ajrvester)\
**Replies:** 3\
**Last updated:** [September 11, 2020, 5:45pm UTC](https://discuss.elastic.co/t/upgrade-assistant-api-not-responding/247138 "2020-09-11T17:45:42Z")

</div>

Hello, I'm attempting to resolve an issue with one of our indexes before we perform an upgrade. We're currently running v6.8.8 of Elastic Cloud. I'm following the docs here to add a default field to our index to resolv…

---

## [Kibana string search](https://discuss.elastic.co/t/kibana-string-search/248363)

<div class="topic-metadata">

**Author:** [@newmember](https://discuss.elastic.co/u/newmember)\
**Replies:** 3\
**Last updated:** [September 11, 2020, 5:45pm UTC](https://discuss.elastic.co/t/kibana-string-search/248363 "2020-09-11T17:45:14Z")

</div>

I cant filter for SC tried: :SC:: nothing SC nothing :SC: nothing "SC" nothing How do I find "SC" in this string? CDR|N|09:11:2020 09:00:06:939|BIG|20010|boat02|30862|35|BIG\_InitiateSMS|\_sngtv\_|02-P35-09112:SC:…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1238)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1240)
