# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1240 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1241 --- ## [Twitter plugin : Twitter client error {:message=\>"", :exception=\>"Twitter::Error::BadRequest",](https://discuss.elastic.co/t/twitter-plugin-twitter-client-error-message-exception-twitter-badrequest/248129)
**Author:** [@HansPeterSloot](https://discuss.elastic.co/u/HansPeterSloot)\ **Replies:** 1\ **Last updated:** [September 11, 2020, 5:28pm UTC](https://discuss.elastic.co/t/twitter-plugin-twitter-client-error-message-exception-twitter-badrequest/248129 "2020-09-11T17:28:32Z")
Hi My version of elasticsearch, logstash is 7.9.1 I am trying to get the twitter input plugin working. My input config is: input { twitter { consumer\_key =\> "aaaa" consumer\_secret =\> "bbb" oauth\_token =\> "ccc" o… --- ## [Can we get the list of all the saved objects with errors like missing references etc?](https://discuss.elastic.co/t/can-we-get-the-list-of-all-the-saved-objects-with-errors-like-missing-references-etc/248227)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 4\ **Last updated:** [September 11, 2020, 4:54pm UTC](https://discuss.elastic.co/t/can-we-get-the-list-of-all-the-saved-objects-with-errors-like-missing-references-etc/248227 "2020-09-11T16:54:28Z")
Can we get the list of all the saved objects with errors like missing references etc? Also can we get a list of all saved objects related to a index pattern? --- ## [Dynamic template for complex types](https://discuss.elastic.co/t/dynamic-template-for-complex-types/205059)
**Author:** [@parosio](https://discuss.elastic.co/u/parosio)\ **Replies:** 5\ **Last updated:** [September 11, 2020, 2:58pm UTC](https://discuss.elastic.co/t/dynamic-template-for-complex-types/205059 "2020-09-11T14:58:27Z")
Hello, is it possible to have a complex type (like a geopoint) dinamically recognized using the dynamic\_templates section of a template/index mapping? Sort of: PUT test\_loc/doc/1 { "position" : \[-64, -19.4\] } resu… --- ## [Ansible ECE install](https://discuss.elastic.co/t/ansible-ece-install/248349)
**Author:** [@andrew.luke](https://discuss.elastic.co/u/andrew.luke)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 2:47pm UTC](https://discuss.elastic.co/t/ansible-ece-install/248349 "2020-09-11T14:47:43Z")
I'm trying to use the Anisble install role following this: and this: I've made up an inventory file for a small 1AZ hot/warm deployment. My plan is to setup up to a full 3AZ, but I'm having trouble getting this smal… --- ## [Execute a PLSQL procedure or funtion](https://discuss.elastic.co/t/execute-a-plsql-procedure-or-funtion/248348)
**Author:** [@Rui\_Goncalves](https://discuss.elastic.co/u/Rui_Goncalves)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 2:42pm UTC](https://discuss.elastic.co/t/execute-a-plsql-procedure-or-funtion/248348 "2020-09-11T14:42:27Z")
Hi, I'm new to elk. I needed on logstash to execute a PLSQL procedure with an input parameter and an output one or as an option execute a PLSQL function with an input parameter and receive a return value. These output/re… --- ## [Search as you type field, best practice](https://discuss.elastic.co/t/search-as-you-type-field-best-practice/248289)
**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\ **Replies:** 1\ **Last updated:** [September 11, 2020, 2:03pm UTC](https://discuss.elastic.co/t/search-as-you-type-field-best-practice/248289 "2020-09-11T14:03:34Z")
Hi, I made some tests with search as you type field: https://www.elastic.co/guide/en/elasticsearch/reference/7.x/search-as-you-type.html I've an index containing products. Each product(document) have many fields like: … --- ## [Composite query and filter agregation on a .ml-anomalies index](https://discuss.elastic.co/t/composite-query-and-filter-agregation-on-a-ml-anomalies-index/248201)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 6\ **Last updated:** [September 11, 2020, 1:56pm UTC](https://discuss.elastic.co/t/composite-query-and-filter-agregation-on-a-ml-anomalies-index/248201 "2020-09-11T13:56:17Z")
HI, Im trying to query the ML anomalies index with a composite query and a filter aggregation, but the filter aggs is not working, I want to get a specific job but it gets me others jobs in the index. Any ideas what is… --- ## [Grok Parse Help](https://discuss.elastic.co/t/grok-parse-help/248221)
**Author:** [@Jim\_Thunder](https://discuss.elastic.co/u/Jim_Thunder)\ **Replies:** 3\ **Last updated:** [September 11, 2020, 1:38pm UTC](https://discuss.elastic.co/t/grok-parse-help/248221 "2020-09-11T13:38:35Z")
I am trying to pull one piece of information out of a field using grok. I've tried a couple different way and nothing seems to work. Nothing crashes at all, it's just that I don't see the new field that I am expecting to… --- ## [Logstash is not pushing logs to Azure](https://discuss.elastic.co/t/logstash-is-not-pushing-logs-to-azure/248204)
**Author:** [@Henri.C.Lefevre](https://discuss.elastic.co/u/Henri.C.Lefevre)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 4:50pm UTC](https://discuss.elastic.co/t/logstash-is-not-pushing-logs-to-azure/248204 "2020-09-10T16:50:35Z")
Hello, I am using Logstash 7.9 on Ubuntu 18.04 LTS with OpenJDK 11. I configured an Azure Log Analytics plugin with a configuration file which works on logstash 2.3. Logstash seems to start well but no logs are pushed … --- ## [How to have CURL command equivalent of triple quotes?](https://discuss.elastic.co/t/how-to-have-curl-command-equivalent-of-triple-quotes/248332)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 1:27pm UTC](https://discuss.elastic.co/t/how-to-have-curl-command-equivalent-of-triple-quotes/248332 "2020-09-11T13:27:49Z")
hi, we have a watcher code which contains "actions": { "index\_alert": { "transform": { "script": { "source": """ return \[ 'watch\_id': ctx.watch\_id, … --- ## [Does eager\_global\_ordinals speed up metrics calcaulations on high cardinality keyword fields?](https://discuss.elastic.co/t/does-eager-global-ordinals-speed-up-metrics-calcaulations-on-high-cardinality-keyword-fields/248330)
**Author:** [@Peter\_Steenbergen](https://discuss.elastic.co/u/Peter_Steenbergen)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 1:19pm UTC](https://discuss.elastic.co/t/does-eager-global-ordinals-speed-up-metrics-calcaulations-on-high-cardinality-keyword-fields/248330 "2020-09-11T13:19:43Z")
Hi, I was wondering if people have tested with a dataset with around 1.5M records with 40k of unique terms in a particular field to do metric calculations on or a regex filtering. I know there is a wildcard field (does … --- ## [Logstash shuts down if gelf output TCP connection is refused](https://discuss.elastic.co/t/logstash-shuts-down-if-gelf-output-tcp-connection-is-refused/248132)
**Author:** [@Samuel\_Delepiere](https://discuss.elastic.co/u/Samuel_Delepiere)\ **Replies:** 3\ **Last updated:** [September 11, 2020, 1:19pm UTC](https://discuss.elastic.co/t/logstash-shuts-down-if-gelf-output-tcp-connection-is-refused/248132 "2020-09-11T13:19:03Z")
I have configured logstash with a TCP gelf output. However, if the TCP connection cannot be established (e.g graylog is down or hasn't yet been configured to listen on the port), the pipeline aborts and logstash shuts do… --- ## [Regex field starts with a string](https://discuss.elastic.co/t/regex-field-starts-with-a-string/248235)
**Author:** [@ankitachow](https://discuss.elastic.co/u/ankitachow)\ **Replies:** 2\ **Last updated:** [September 11, 2020, 1:12pm UTC](https://discuss.elastic.co/t/regex-field-starts-with-a-string/248235 "2020-09-11T13:12:29Z")
I want to add a new field if a field start with a certain string. Added below code in filter { }, to set a new field error as "Y" if text starts with ERROR: . Doesnt seem to work. if "\[dest\]\[text\]" =~ /^ERROR: .\*/ { … --- ## [Not able to start elasticsearch service](https://discuss.elastic.co/t/not-able-to-start-elasticsearch-service/246761)
**Author:** [@nidhi1](https://discuss.elastic.co/u/nidhi1)\ **Replies:** 4\ **Last updated:** [September 11, 2020, 12:53pm UTC](https://discuss.elastic.co/t/not-able-to-start-elasticsearch-service/246761 "2020-09-11T12:53:08Z")
Unit elasticsearch.service entered failed state. systemd\[1\]: elasticsearch.service failed. Unregistered Authentication Agent for u (system bus name :1.89340, object path /org/freedesktop/Po polkitd\[1243\]: Registere… --- ## [How to create new User in Kibana by using nginx](https://discuss.elastic.co/t/how-to-create-new-user-in-kibana-by-using-nginx/248317)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 1\ **Last updated:** [September 11, 2020, 12:39pm UTC](https://discuss.elastic.co/t/how-to-create-new-user-in-kibana-by-using-nginx/248317 "2020-09-11T12:39:54Z")
ELK is very old version 4.2 :frowning: So, unable to find anything on internet or without nginx also fine --- ## [Authentication through Nginx on Kibana 7.9](https://discuss.elastic.co/t/authentication-through-nginx-on-kibana-7-9/248318)
**Author:** [@barbarad](https://discuss.elastic.co/u/barbarad)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 12:27pm UTC](https://discuss.elastic.co/t/authentication-through-nginx-on-kibana-7-9/248318 "2020-09-11T12:27:44Z")
Hi, I'm try to automatically authenticate in kibana 7.9 using nginx but it's not working. I'm using native default users define in elasticsearch. This is my nginx configuration running in docker, kibana is also deploy… --- ## [Filter search results with same ID using different indices](https://discuss.elastic.co/t/filter-search-results-with-same-id-using-different-indices/248316)
**Author:** [@tim\_cgn](https://discuss.elastic.co/u/tim_cgn)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 12:18pm UTC](https://discuss.elastic.co/t/filter-search-results-with-same-id-using-different-indices/248316 "2020-09-11T12:18:01Z")
Hello together, i have a simple query that performs a search on an alias. This alias contains several indices. Documents are stored in the different indexes with the same id, but have a different status, so they differ… --- ## [Cluster Yellow - Heap size overload](https://discuss.elastic.co/t/cluster-yellow-heap-size-overload/248292)
**Author:** [@Thomas74](https://discuss.elastic.co/u/Thomas74)\ **Replies:** 1\ **Last updated:** [September 11, 2020, 12:15pm UTC](https://discuss.elastic.co/t/cluster-yellow-heap-size-overload/248292 "2020-09-11T12:15:16Z")
Hi, An ILM policy had a conflict with curator last night. It wasn't working because of closed index. I reopen it and retry ilm policy and seems ok. But my cluster still yellow and cannot reallocate shard because of th… --- ## [Cumulative Sum over Terms or Hour Only](https://discuss.elastic.co/t/cumulative-sum-over-terms-or-hour-only/247257)
**Author:** [@Alexandre.Bernier](https://discuss.elastic.co/u/Alexandre.Bernier)\ **Replies:** 2\ **Last updated:** [September 11, 2020, 11:55am UTC](https://discuss.elastic.co/t/cumulative-sum-over-terms-or-hour-only/247257 "2020-09-11T11:55:51Z")
Hello dear forum members, I'm desperately trying to reproduce such a simple graphic in Kibana and it doesn't seem to be possible. The first column, textual data. The second column, numeric data. The third column, the… --- ## [HttpStatus conversion to integer](https://discuss.elastic.co/t/httpstatus-conversion-to-integer/244137)
**Author:** [@graimato](https://discuss.elastic.co/u/graimato)\ **Replies:** 4\ **Last updated:** [September 11, 2020, 10:55am UTC](https://discuss.elastic.co/t/httpstatus-conversion-to-integer/244137 "2020-09-11T10:55:23Z")
Dear All, I created a custom filebeat 7.8.x module to load log data into Elastic . I created a pipeline to manage logs. I was able to convert datetime convert DATA into float But I'm trying to convert httpStatusCode … --- ## [Adding new element to list of objects with the new name of field](https://discuss.elastic.co/t/adding-new-element-to-list-of-objects-with-the-new-name-of-field/248275)
**Author:** [@charvi23](https://discuss.elastic.co/u/charvi23)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 7:10am UTC](https://discuss.elastic.co/t/adding-new-element-to-list-of-objects-with-the-new-name-of-field/248275 "2020-09-11T07:10:33Z")
I am trying to add new object to list of object in an elastic search index with java HighLevelRestClient. I know I can do it with following query: String query = "ctx.\_source.custom\_analysis.custom\_analysis\_list.add(par… --- ## [Percentage difference over two different periods](https://discuss.elastic.co/t/percentage-difference-over-two-different-periods/247838)
**Author:** [@Thomas74](https://discuss.elastic.co/u/Thomas74)\ **Replies:** 2\ **Last updated:** [September 11, 2020, 9:32am UTC](https://discuss.elastic.co/t/percentage-difference-over-two-different-periods/247838 "2020-09-11T09:32:24Z")
Hi, I would like to see how I receive specifics logs during two periods : Current month Current month - 1 The goal is to see the difference, in percentage, between them. For example, this month we increased log integ… --- ## [ElasticSearch 7 nest 7 return attribute from result all result](https://discuss.elastic.co/t/elasticsearch-7-nest-7-return-attribute-from-result-all-result/247834)
**Author:** [@Isanka\_Thalagala](https://discuss.elastic.co/u/Isanka_Thalagala)\ **Replies:** 2\ **Last updated:** [September 11, 2020, 8:24am UTC](https://discuss.elastic.co/t/elasticsearch-7-nest-7-return-attribute-from-result-all-result/247834 "2020-09-11T08:24:06Z")
I'm using ElarsticSearch 7.7 & NEST 7.7 and on my web page, I'm getting 9 search result documents per page. Even I'm showing the first 9 results on the page, I need to return some property values from all the results for… --- ## [Problem indexing ES with batches](https://discuss.elastic.co/t/problem-indexing-es-with-batches/247961)
**Author:** [@magorbe](https://discuss.elastic.co/u/magorbe)\ **Replies:** 2\ **Last updated:** [September 11, 2020, 7:36am UTC](https://discuss.elastic.co/t/problem-indexing-es-with-batches/247961 "2020-09-11T07:36:29Z")
Hello. I am doing reindexing in ES with the next command : nohup curl -XPOST http:/bla:9200/\_reindex -d '{ "source": { "index": "origin\_index", "size": 5000 }, "dest": {"index": "dest\_index" }}' \> reindex\_100\_21.out … --- ## [ES performance reliablity issue](https://discuss.elastic.co/t/es-performance-reliablity-issue/247974)
**Author:** [@wangxr1985](https://discuss.elastic.co/u/wangxr1985)\ **Replies:** 6\ **Last updated:** [September 11, 2020, 7:27am UTC](https://discuss.elastic.co/t/es-performance-reliablity-issue/247974 "2020-09-11T07:27:31Z")
My query is very simple, just like this: { "query": {"bool": { "filter": {"term": {"user\_guid": "xxxx" }}}}} the user\_guid is equal to document id, and the query contains routing argument. If I do this query sever… --- ## [ES SQL - Order by Count](https://discuss.elastic.co/t/es-sql-order-by-count/248195)
**Author:** [@Jose\_H](https://discuss.elastic.co/u/Jose_H)\ **Replies:** 2\ **Last updated:** [September 11, 2020, 7:02am UTC](https://discuss.elastic.co/t/es-sql-order-by-count/248195 "2020-09-11T07:02:51Z")
Hi all, Im trying to order and display by the highest count for @computed.message field, but encountering the below error: POST /\_sql?format=txt { "query":"SELECT \\"@timestamp\\", \\"@computed.message\\", \\"@computed.… --- ## [This action would add \[2\] total shards, but this cluster currently has \[2000\]/\[2000\] maximum shards open;](https://discuss.elastic.co/t/this-action-would-add-2-total-shards-but-this-cluster-currently-has-2000-2000-maximum-shards-open/248255)
**Author:** [@Maricar\_Laygo](https://discuss.elastic.co/u/Maricar_Laygo)\ **Replies:** 1\ **Last updated:** [September 11, 2020, 5:12am UTC](https://discuss.elastic.co/t/this-action-would-add-2-total-shards-but-this-cluster-currently-has-2000-2000-maximum-shards-open/248255 "2020-09-11T05:12:05Z")
Invalid Bulk items: operation\[0\]: index returned 400 \_index: transactions-es-nfnxl530-20200911 \_type: \_doc \_id: 909090892 \_version: 0 error: Type: validation\_exception Reason: Validation Failed: 1: this action would add … --- ## [Elasticsearch group by, having and pagenation](https://discuss.elastic.co/t/elasticsearch-group-by-having-and-pagenation/248251)
**Author:** [@coolyrat](https://discuss.elastic.co/u/coolyrat)\ **Replies:** 0\ **Last updated:** [September 11, 2020, 2:24am UTC](https://discuss.elastic.co/t/elasticsearch-group-by-having-and-pagenation/248251 "2020-09-11T02:24:42Z")
I have a SQL that would like to query the same result set in ES. The result set would need to pagination. So I've tried Composite aggregation, it works fine for pagination and order. But I have no idea how to filter with… --- ## [Index Allocation based on attribute not working](https://discuss.elastic.co/t/index-allocation-based-on-attribute-not-working/248147)
**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\ **Replies:** 9\ **Last updated:** [September 11, 2020, 6:25am UTC](https://discuss.elastic.co/t/index-allocation-based-on-attribute-not-working/248147 "2020-09-11T06:25:38Z")
Hi! Can someone pls explain to me why some shards dont get relocated to the correct node in my cluster? I want no shard on node-4 at the moment. Infos: GET \_cat/nodeattrs node-4 172.21.2.174 172.21.2.174 ml.machine\_m… --- ## [Host.keyword shows no value](https://discuss.elastic.co/t/host-keyword-shows-no-value/247864)
**Author:** [@Stevek](https://discuss.elastic.co/u/Stevek)\ **Replies:** 2\ **Last updated:** [September 11, 2020, 6:10am UTC](https://discuss.elastic.co/t/host-keyword-shows-no-value/247864 "2020-09-11T06:10:59Z")
Hello all, I am currently struggling to get my host.keyword working for filtering the nodes in dashboard. From the discovery tab it is visible there are 3 different values within host(image1), but host.keyword only pro… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1239) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1241)