# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1265 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1266 --- ## [Elasticsearch for small datasets?](https://discuss.elastic.co/t/elasticsearch-for-small-datasets/246139)
**Author:** [@Courtan](https://discuss.elastic.co/u/Courtan)\ **Replies:** 4\ **Last updated:** [August 26, 2020, 8:05am UTC](https://discuss.elastic.co/t/elasticsearch-for-small-datasets/246139 "2020-08-26T08:05:00Z")
I've just implemented an autocomplete suggestion using Elasticsearch which works like a charm. The index-size is just about 100kb, containing about 500 filter-combinations which clients then use to make further requests… --- ## [How to handle empty result in jdbc\_streaming filter plugin in Logstash](https://discuss.elastic.co/t/how-to-handle-empty-result-in-jdbc-streaming-filter-plugin-in-logstash/246347)
**Author:** [@naveen007](https://discuss.elastic.co/u/naveen007)\ **Replies:** 4\ **Last updated:** [August 26, 2020, 7:42am UTC](https://discuss.elastic.co/t/how-to-handle-empty-result-in-jdbc-streaming-filter-plugin-in-logstash/246347 "2020-08-26T07:42:36Z")
Hi, I'm using the jdbc\_streaming filter plugin to get data from query. But in some case query return empty result or null value. parameters =\> { "firstName" =\> "firstName" } statement =\> "SELECT DISTINCT… --- ## [Elasticsearch: How to insert geo points into a list coordinate](https://discuss.elastic.co/t/elasticsearch-how-to-insert-geo-points-into-a-list-coordinate/246239)
**Author:** [@Hung\_M\_Le](https://discuss.elastic.co/u/Hung_M_Le)\ **Replies:** 2\ **Last updated:** [August 26, 2020, 7:41am UTC](https://discuss.elastic.co/t/elasticsearch-how-to-insert-geo-points-into-a-list-coordinate/246239 "2020-08-26T07:41:31Z")
Hi I have followed the example in the document to draw a polygon on a map. Here are the setting. PUT /admnycoord { "mappings": { "properties": { "location": { "type": "geo\_shape" } } } } POST /admnycoord/\_do… --- ## [Why "now-60m" is not equal to "now-1h"](https://discuss.elastic.co/t/why-now-60m-is-not-equal-to-now-1h/246400)
**Author:** [@cold](https://discuss.elastic.co/u/cold)\ **Replies:** 0\ **Last updated:** [August 26, 2020, 7:13am UTC](https://discuss.elastic.co/t/why-now-60m-is-not-equal-to-now-1h/246400 "2020-08-26T07:13:54Z")
elasticsearch version 7.1.1 index mapping is: { "mappings": { "properties": { "@timestamp": { "type": "date" }, "value": { "type": "integer" } } } } index data is: {"index":{"\_index":"t… --- ## [Line chart performance degradation (7.9)](https://discuss.elastic.co/t/line-chart-performance-degradation-7-9/246355)
**Author:** [@Mads\_Jon\_Nielsen](https://discuss.elastic.co/u/Mads_Jon_Nielsen)\ **Replies:** 4\ **Last updated:** [August 26, 2020, 6:58am UTC](https://discuss.elastic.co/t/line-chart-performance-degradation-7-9/246355 "2020-08-26T06:58:23Z")
Have any one else experienced a massive javascript hit (6-7 seconds), when showing line chart visualization in the latest Kibana ? I'm pretty sure its some sort of of javascript bug. If I make the same visualization … --- ## [How to get rid of \_type field](https://discuss.elastic.co/t/how-to-get-rid-of-type-field/246230)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 6:55am UTC](https://discuss.elastic.co/t/how-to-get-rid-of-type-field/246230 "2020-08-25T06:55:52Z")
Hi, I have old indices that still contain the \_type field. I want to get rid of this so that I am prepared for 8.X whenever its coming. How can I remove this field from all my indices? What I tried: Reindex, Did not h… --- ## [Visualize: Scripted field and median aggregation](https://discuss.elastic.co/t/visualize-scripted-field-and-median-aggregation/246225)
**Author:** [@boernd](https://discuss.elastic.co/u/boernd)\ **Replies:** 2\ **Last updated:** [August 26, 2020, 6:28am UTC](https://discuss.elastic.co/t/visualize-scripted-field-and-median-aggregation/246225 "2020-08-26T06:28:03Z")
Hi, after upgrading Kibana to 7.8.1 (also tested with 7.9.0) from 7.5.2 some visualizations using the median aggregation on scripted fields seem broken as they do not display anything. I could reproduce this quite easil… --- ## [New Unassigned shards getting created](https://discuss.elastic.co/t/new-unassigned-shards-getting-created/246392)
**Author:** [@manohar\_deepu](https://discuss.elastic.co/u/manohar_deepu)\ **Replies:** 0\ **Last updated:** [August 26, 2020, 6:15am UTC](https://discuss.elastic.co/t/new-unassigned-shards-getting-created/246392 "2020-08-26T06:15:14Z")
Hi, I have 1 data node, 2 masters/1 cordinators/2 ingestor/2 apm server/1 kibana machine in my production setup. On start of the cluster and after ingestion of apm data, my cluster health is yellow because I am seeing … --- ## [Getting "\_groktimeout" error for a particular filter sometimes. Need help optimizing the filter](https://discuss.elastic.co/t/getting-groktimeout-error-for-a-particular-filter-sometimes-need-help-optimizing-the-filter/246342)
**Author:** [@saurabhc](https://discuss.elastic.co/u/saurabhc)\ **Replies:** 2\ **Last updated:** [August 26, 2020, 5:36am UTC](https://discuss.elastic.co/t/getting-groktimeout-error-for-a-particular-filter-sometimes-need-help-optimizing-the-filter/246342 "2020-08-26T05:36:04Z")
The particular line is a "multiline". Hence using "codec =\> multiline" to get the line and then applying grok filter to it. But sometimes when the particular line is having large content the parsing fails with "\_groktim… --- ## [Reducing number of shards in 6.5 ES](https://discuss.elastic.co/t/reducing-number-of-shards-in-6-5-es/245709)
**Author:** [@divya\_lakshmi](https://discuss.elastic.co/u/divya_lakshmi)\ **Replies:** 12\ **Last updated:** [August 26, 2020, 5:17am UTC](https://discuss.elastic.co/t/reducing-number-of-shards-in-6-5-es/245709 "2020-08-26T05:17:13Z")
I tried to reduce number of shards in ES 6.5 version from default(5) to 1 using 'PUT \_template/temp\_new1 { "index\_patterns" : \["test1-\*"\], "settings" : { "number\_of\_shards" : 1, "number\_of\_replicas" : 1 } }' It … --- ## [Hadoop Training in Hyderabad](https://discuss.elastic.co/t/hadoop-training-in-hyderabad/21732)
**Author:** [@madhu\_k](https://discuss.elastic.co/u/madhu_k)\ **Replies:** 1\ **Last updated:** [December 6, 2016, 9:10am UTC](https://discuss.elastic.co/t/hadoop-training-in-hyderabad/21732 "2016-12-06T09:10:50Z")
Hadoop Training in Hyderabad, Online Hadoop Training in USA, Online Hadoop Training in UK, Online Hadoop Training in Canada, Online Hadoop Training in Austria, Online Hadoop Training in Singapore,Online Hadoo… --- ## [How to Move existing Index data to warm nodes](https://discuss.elastic.co/t/how-to-move-existing-index-data-to-warm-nodes/246077)
**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\ **Replies:** 5\ **Last updated:** [August 26, 2020, 4:56am UTC](https://discuss.elastic.co/t/how-to-move-existing-index-data-to-warm-nodes/246077 "2020-08-26T04:56:41Z")
Currently I have a 6 node cluster (4 hot nodes and 2 warm nodes). hot nodes contain less disk space and warm nodes are almost free.. The indexes are currently active and data ingestion is going on. below are my doubt: … --- ## [How to compare and sum docs with different values](https://discuss.elastic.co/t/how-to-compare-and-sum-docs-with-different-values/246364)
**Author:** [@Den1](https://discuss.elastic.co/u/Den1)\ **Replies:** 8\ **Last updated:** [August 26, 2020, 4:44am UTC](https://discuss.elastic.co/t/how-to-compare-and-sum-docs-with-different-values/246364 "2020-08-26T04:44:29Z")
Hello, I have docs with such data: sessionState: Active statusBoolean: true statusInt:-1 timeStamp:Aug 26, 2020 @ 02:08:21.522 OR sessionState: Disconnected statusBoolean: false statusInt:1 timeStamp:Aug 26, 20… --- ## [Logstash status is active but logs showing error as "\[2020-08-25T02:48:59,350\]\[ERROR\]\[org.logstash.Logstash \] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit"](https://discuss.elastic.co/t/logstash-status-is-active-but-logs-showing-error-as-2020-08-25t0259-350-error-org-logstash-logstash-java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-systemexit-exit/246245)
**Author:** [@divya\_lakshmi](https://discuss.elastic.co/u/divya_lakshmi)\ **Replies:** 1\ **Last updated:** [August 26, 2020, 4:39am UTC](https://discuss.elastic.co/t/logstash-status-is-active-but-logs-showing-error-as-2020-08-25t0259-350-error-org-logstash-logstash-java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-systemexit-exit/246245 "2020-08-26T04:39:45Z")
Hi, I have been trying to add one more conf file to pipeline.yml and did troubleshooting using sudo /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/new.conf and it worked fine.Later during another troubleshooti… --- ## [Monitor SOAP response using with Heartbeat](https://discuss.elastic.co/t/monitor-soap-response-using-with-heartbeat/246298)
**Author:** [@Santosh\_Patil](https://discuss.elastic.co/u/Santosh_Patil)\ **Replies:** 1\ **Last updated:** [August 26, 2020, 4:35am UTC](https://discuss.elastic.co/t/monitor-soap-response-using-with-heartbeat/246298 "2020-08-26T04:35:46Z")
MY SOAP XML Request: \ **Author:** [@sundarcse1216](https://discuss.elastic.co/u/sundarcse1216)\ **Replies:** 1\ **Last updated:** [August 26, 2020, 4:28am UTC](https://discuss.elastic.co/t/elasticsearch-query/246332 "2020-08-26T04:28:33Z") Hi All, I have record in Elasticsearch index like below. Can any one pls help me for curl query with following conditions. Conditions: Type must be 'A' user must be 'U1' OR 'U3' date range between '8/22/2020' and '8/… --- ## [ECONNREFUSED: Connection refused - connect (2) for "localhost" port 587](https://discuss.elastic.co/t/econnrefused-connection-refused-connect-2-for-localhost-port-587/246087)
**Author:** [@David03](https://discuss.elastic.co/u/David03)\ **Replies:** 2\ **Last updated:** [August 26, 2020, 2:48am UTC](https://discuss.elastic.co/t/econnrefused-connection-refused-connect-2-for-localhost-port-587/246087 "2020-08-26T02:48:36Z")
Hi, good day. I used email config and i encounter this Connection refused - connect (2) for "localhost" port 587 output { elasticsearch { hosts =\> \["localhost:9200"\] } stdout { codec =\> rubydebug } if "shouldmail… --- ## [【Filebeat S3 input】JSONファイルの取込について](https://discuss.elastic.co/t/filebeat-s3-input-json/245729)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 1\ **Last updated:** [August 26, 2020, 2:21am UTC](https://discuss.elastic.co/t/filebeat-s3-input-json/245729 "2020-08-26T02:21:35Z")
お世話になります。 FilebeatのS3 inputを使用し、JSONファイルの取込を検証しています。 FilebeatのアウトプットはElasticSearchで、ingest node(JSON processor)を使用しindex登録します。 ▼filebeat.yml(抜粋) filebeat.inputs: type: s3 enabled: true queue\_url: XXXX access\_key… --- ## [Getting mapper\_parsing\_exception while trying to create index in 7.8](https://discuss.elastic.co/t/getting-mapper-parsing-exception-while-trying-to-create-index-in-7-8/246204)
**Author:** [@elastic78](https://discuss.elastic.co/u/elastic78)\ **Replies:** 6\ **Last updated:** [August 25, 2020, 11:22pm UTC](https://discuss.elastic.co/t/getting-mapper-parsing-exception-while-trying-to-create-index-in-7-8/246204 "2020-08-25T23:22:57Z")
Suppressed: org.elasticsearch.client.ResponseException: method \[PUT\], host \[http://localhost:9200\], URI \[/ise?master\_timeout=30s&timeout=30s\], status line \[HTTP/1.1 400 Bad Request\] {"error":{"root\_cause":\[{"type":"mapp… --- ## [Redeploy admin-console-elasticsearch?](https://discuss.elastic.co/t/redeploy-admin-console-elasticsearch/246203)
**Author:** [@neutronscott](https://discuss.elastic.co/u/neutronscott)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 9:23pm UTC](https://discuss.elastic.co/t/redeploy-admin-console-elasticsearch/246203 "2020-08-25T21:23:02Z")
I tried to do an update from 6.8.9 to 6.8.12 on admin-console-elasticsearch. I guess also it moved to a new allocator that had issues and welp, it's gone now. the UI lets me login but times out for about everything and … --- ## [Date in Filter not respecting Browser Timezone](https://discuss.elastic.co/t/date-in-filter-not-respecting-browser-timezone/246179)
**Author:** [@oong](https://discuss.elastic.co/u/oong)\ **Replies:** 3\ **Last updated:** [August 25, 2020, 8:59pm UTC](https://discuss.elastic.co/t/date-in-filter-not-respecting-browser-timezone/246179 "2020-08-25T20:59:15Z")
We have our timestamps in our logs stored in UTC. When the logs are returned in queries, the times are shown converted based on the brower's timezone. This is great! However, when applying a date filter on the search … --- ## [User Deleted All Files Inside Node0 Directory](https://discuss.elastic.co/t/user-deleted-all-files-inside-node0-directory/245818)
**Author:** [@ELKNub](https://discuss.elastic.co/u/ELKNub)\ **Replies:** 5\ **Last updated:** [August 25, 2020, 8:45pm UTC](https://discuss.elastic.co/t/user-deleted-all-files-inside-node0-directory/245818 "2020-08-25T20:45:42Z")
Hey Folks, So one if my users deleted everything inside my directory C:\\ProgramData\\Elastic\\Elasticsearch\\data\\nodes\\0\\indices 'Now I can't start the service "elasticsearch" ' My worry is the configuration is totally … --- ## [Recreation of Index Patterns, Lost Visualizations](https://discuss.elastic.co/t/recreation-of-index-patterns-lost-visualizations/245468)
**Author:** [@chaitanya1127](https://discuss.elastic.co/u/chaitanya1127)\ **Replies:** 7\ **Last updated:** [August 25, 2020, 8:35pm UTC](https://discuss.elastic.co/t/recreation-of-index-patterns-lost-visualizations/245468 "2020-08-25T20:35:57Z")
Hi, I found a lot of topics on this forum on this subject but I was not able to figure out how to solve the problem. I recreated index patterns as they got deleted. I do not see any visualizations or Dashboards which w… --- ## [Want to modify the Kibana login page Logo](https://discuss.elastic.co/t/want-to-modify-the-kibana-login-page-logo/246344)
**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 6:43pm UTC](https://discuss.elastic.co/t/want-to-modify-the-kibana-login-page-logo/246344 "2020-08-25T18:43:59Z")
I want little modification in Kibana Home page Logo and want to change the name of Kibana in Menu.Is it possible? --- ## [Error: called with an invalid endpoint: security.getToken](https://discuss.elastic.co/t/error-called-with-an-invalid-endpoint-security-gettoken/246194)
**Author:** [@npm\_install](https://discuss.elastic.co/u/npm_install)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 6:26pm UTC](https://discuss.elastic.co/t/error-called-with-an-invalid-endpoint-security-gettoken/246194 "2020-08-25T18:26:38Z")
I am creating a Kibana Plugin using the kibana plugin generator, and I have a route defined that is using the elasticsearch dataClient to get a token: context.core.elasticsearch.dataClient.callAsCurrentUser('security.ge… --- ## [Need Help Parsing PS command Output using logstash](https://discuss.elastic.co/t/need-help-parsing-ps-command-output-using-logstash/244145)
**Author:** [@saurabhc](https://discuss.elastic.co/u/saurabhc)\ **Replies:** 7\ **Last updated:** [August 25, 2020, 6:17pm UTC](https://discuss.elastic.co/t/need-help-parsing-ps-command-output-using-logstash/244145 "2020-08-25T18:17:36Z")
Need Help Parsing PS command Output using logstash. My input file looks like below. Linux VM Ubuntu zzz \*\*\*Thu Jul 23 13:00:11 UTC 2020 USER PID PPID PRI %CPU %MEM VSZ RSS WCHAN S STARTED … --- ## [Calculate Difference between 2 Dates](https://discuss.elastic.co/t/calculate-difference-between-2-dates/246300)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 6:03pm UTC](https://discuss.elastic.co/t/calculate-difference-between-2-dates/246300 "2020-08-25T18:03:21Z")
Hi All, it's possible to calculate the difference between two dates in a TSVB visualization! i use Kibana 7.7.0 --- ## [Endpoint config on elastic](https://discuss.elastic.co/t/endpoint-config-on-elastic/245878)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 4\ **Last updated:** [August 25, 2020, 5:29pm UTC](https://discuss.elastic.co/t/endpoint-config-on-elastic/245878 "2020-08-25T17:29:54Z")
Hi all, After elastic annoucing that the endpoint will have free plan i immediately try it and i have some issue. After i i config tls so that i can use the fleet option, then every time i try to go in to the administr… --- ## [Main ERROR Null object returned for RollingFile in Appenders](https://discuss.elastic.co/t/main-error-null-object-returned-for-rollingfile-in-appenders/246335)
**Author:** [@divya\_lakshmi](https://discuss.elastic.co/u/divya_lakshmi)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 5:24pm UTC](https://discuss.elastic.co/t/main-error-null-object-returned-for-rollingfile-in-appenders/246335 "2020-08-25T17:24:35Z")
i use ES 6.5 , on trying to start ES getting following error 2020-08-25 11:58:01,121 main ERROR Null object returned for RollingFile in Appenders. 2020-08-25 11:58:01,122 main ERROR Unable to locate appender "rolling" … --- ## [XML key:value Extraction](https://discuss.elastic.co/t/xml-key-value-extraction/246182)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 3\ **Last updated:** [August 25, 2020, 4:51pm UTC](https://discuss.elastic.co/t/xml-key-value-extraction/246182 "2020-08-25T16:51:59Z")
Apologies, I have searched but cannot seem to find a good example on how to extract and then index the remaining data. If this is addressed elsewhere and Ive missed it please direct me there. Being new to logstash and i… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1264) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1266)