# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1269

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1270

---

## [Confused about ignore\_above and how to update](https://discuss.elastic.co/t/confused-about-ignore-above-and-how-to-update/245962)

<div class="topic-metadata">

**Author:** [@gswartz](https://discuss.elastic.co/u/gswartz)\
**Replies:** 2\
**Last updated:** [August 24, 2020, 2:12pm UTC](https://discuss.elastic.co/t/confused-about-ignore-above-and-how-to-update/245962 "2020-08-24T14:12:30Z")

</div>

I have an index that I created simply by importing a bunch of docs, so elasticsearch created all the mappings by default. One of the fields is a potentially large text field that we need the whole thing to be keyword se…

---

## [Logstash can't send to elastic higher 3500 rps on one node](https://discuss.elastic.co/t/logstash-cant-send-to-elastic-higher-3500-rps-on-one-node/246126)

<div class="topic-metadata">

**Author:** [@karvet](https://discuss.elastic.co/u/karvet)\
**Replies:** 0\
**Last updated:** [August 24, 2020, 1:38pm UTC](https://discuss.elastic.co/t/logstash-cant-send-to-elastic-higher-3500-rps-on-one-node/246126 "2020-08-24T13:38:19Z")

</div>

Hi i tested ELK stack to use in our enviroment. I send about 5k and more for one logstash node but always saw in Kibana about 3000-3500 reqest. All node is Ubuntu Os 18.04 used 1.9 version of ELK stack. When i used 4 no…

---

## [Kibana 6.8.3 doesn't show numbers](https://discuss.elastic.co/t/kibana-6-8-3-doesnt-show-numbers/246082)

<div class="topic-metadata">

**Author:** [@111382](https://discuss.elastic.co/u/111382)\
**Replies:** 6\
**Last updated:** [August 24, 2020, 1:12pm UTC](https://discuss.elastic.co/t/kibana-6-8-3-doesnt-show-numbers/246082 "2020-08-24T13:12:59Z")

</div>

Hi! I tried to create a simple visualization: one number value in date histogram. Values actually are in docs, but I receive only zeros on the graph and I can't fix it. Please help. I thought the mistake is in wr…

---

## [Collection terminated exception for min aggregation when field is not present in the documents](https://discuss.elastic.co/t/collection-terminated-exception-for-min-aggregation-when-field-is-not-present-in-the-documents/246111)

<div class="topic-metadata">

**Author:** [@ahmadimt07](https://discuss.elastic.co/u/ahmadimt07)\
**Replies:** 0\
**Last updated:** [August 24, 2020, 12:04pm UTC](https://discuss.elastic.co/t/collection-terminated-exception-for-min-aggregation-when-field-is-not-present-in-the-documents/246111 "2020-08-24T12:04:23Z")

</div>

I am getting collection\_terminated\_exception when running nested min aggregation. However, max, avg, and sum are returning empty buckets. This is happening when the field we are doing aggregation is not present in any of…

---

## [Kibana prone to CSRF Attack](https://discuss.elastic.co/t/kibana-prone-to-csrf-attack/245873)

<div class="topic-metadata">

**Author:** [@robinhood\_lko](https://discuss.elastic.co/u/robinhood_lko)\
**Replies:** 3\
**Last updated:** [August 24, 2020, 12:19pm UTC](https://discuss.elastic.co/t/kibana-prone-to-csrf-attack/245873 "2020-08-24T12:19:53Z")

</div>

Dear Team, Security team has raised a flag that Kibana is prone to CSRF attack . We have deployed latest version of ECK Components. Please can you guide me if there is any settings which can help to fix this. ECK 1.1.2 …

---

## [How to rewrite this groovy script into painless script ? Facing a lot of issues](https://discuss.elastic.co/t/how-to-rewrite-this-groovy-script-into-painless-script-facing-a-lot-of-issues/246110)

<div class="topic-metadata">

**Author:** [@prasad98](https://discuss.elastic.co/u/prasad98)\
**Replies:** 0\
**Last updated:** [August 24, 2020, 11:52am UTC](https://discuss.elastic.co/t/how-to-rewrite-this-groovy-script-into-painless-script-facing-a-lot-of-issues/246110 "2020-08-24T11:52:15Z")

</div>

My ES document model is as follows "hits": \[ { "\_source": { "variant\_group": { "variant\_info": \[ { "name": …

---

## [Elasticsearch upgrade Snapshot in cluster nodes](https://discuss.elastic.co/t/elasticsearch-upgrade-snapshot-in-cluster-nodes/245532)

<div class="topic-metadata">

**Author:** [@katara](https://discuss.elastic.co/u/katara)\
**Replies:** 4\
**Last updated:** [August 24, 2020, 11:17am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-snapshot-in-cluster-nodes/245532 "2020-08-24T11:17:42Z")

</div>

Hi Team, I am trying to upgrade my 7.2 ES cluster to 7.7.1. I have a few questions on the snapshot process. I have a 6 node cluster - 3 Master and 3 Data Nodes. 1. How should i take snapshots? Should i create a repo…

---

## [Can we achieve TreeMap like functionality using canvas](https://discuss.elastic.co/t/can-we-achieve-treemap-like-functionality-using-canvas/245850)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 3\
**Last updated:** [August 24, 2020, 11:06am UTC](https://discuss.elastic.co/t/can-we-achieve-treemap-like-functionality-using-canvas/245850 "2020-08-24T11:06:52Z")

</div>

Hello Team, Could you please help me understand if treemap is possible using Vega or Canvas ref: Thank you, Aditya

---

## [Logstash script for both insert and update](https://discuss.elastic.co/t/logstash-script-for-both-insert-and-update/246088)

<div class="topic-metadata">

**Author:** [@Vamshi3](https://discuss.elastic.co/u/Vamshi3)\
**Replies:** 0\
**Last updated:** [August 24, 2020, 10:11am UTC](https://discuss.elastic.co/t/logstash-script-for-both-insert-and-update/246088 "2020-08-24T10:11:36Z")

</div>

Newbie with Elastic Stack I have an oracle database table where rows gets inserted daily at 12 AM and later on those column values will get updated if there is any change in their values. I tried with doc\_as\_upsert but…

---

## [Canvas display current date](https://discuss.elastic.co/t/canvas-display-current-date/246068)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 4\
**Last updated:** [August 24, 2020, 10:08am UTC](https://discuss.elastic.co/t/canvas-display-current-date/246068 "2020-08-24T10:08:58Z")

</div>

Hi, I am looking to put the current date in to canvas for our reports, any ideas how i could do this? Thanks

---

## [Elastic 401 error after upgrading to version 7.5.1](https://discuss.elastic.co/t/elastic-401-error-after-upgrading-to-version-7-5-1/242762)

<div class="topic-metadata">

**Author:** [@Aadil](https://discuss.elastic.co/u/Aadil)\
**Replies:** 1\
**Last updated:** [August 24, 2020, 9:54am UTC](https://discuss.elastic.co/t/elastic-401-error-after-upgrading-to-version-7-5-1/242762 "2020-08-24T09:54:51Z")

</div>

Hi Team, i am new to this system, I had upgraded from version 6.3.2 to version 7.5.1 and now i get the below error on all 3 nodes: {"error":{"root\_cause":\[{"type":"security\_exception","reason":"missing authentication cr…

---

## [Throttle filter pluginの動作のマニュアルとの違いについて](https://discuss.elastic.co/t/throttle-filter-plugin/245875)

<div class="topic-metadata">

**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\
**Replies:** 3\
**Last updated:** [August 24, 2020, 9:46am UTC](https://discuss.elastic.co/t/throttle-filter-plugin/245875 "2020-08-24T09:46:39Z")

</div>

お世話になります。 Throttle filter pluginの動作について教えてください。 以下のconfでlogstashを動作させています。 input { ～ } filter { ～ throttle { before\_count =\> -1 after\_count =\> 1 period =\> 60 max\_age =\> 120 key =\> "%{item}" …

---

## [Logstash configuration input error with if statement](https://discuss.elastic.co/t/logstash-configuration-input-error-with-if-statement/246019)

<div class="topic-metadata">

**Author:** [@anon56147639](https://discuss.elastic.co/u/anon56147639)\
**Replies:** 10\
**Last updated:** [August 24, 2020, 9:11am UTC](https://discuss.elastic.co/t/logstash-configuration-input-error-with-if-statement/246019 "2020-08-24T09:11:25Z")

</div>

Hi everyone, I'm trying to create a pipeline in logstash which receives CEF events and other input from Filebeat. Since not all input is in CEF format, I created an IF-statement. My logstash.conf looks like this: b…

---

## [Send data to logstash from filebeat using HTTP/HTTPS](https://discuss.elastic.co/t/send-data-to-logstash-from-filebeat-using-http-https/246078)

<div class="topic-metadata">

**Author:** [@aaleman](https://discuss.elastic.co/u/aaleman)\
**Replies:** 0\
**Last updated:** [August 24, 2020, 9:07am UTC](https://discuss.elastic.co/t/send-data-to-logstash-from-filebeat-using-http-https/246078 "2020-08-24T09:07:23Z")

</div>

Hello, Do you know how can I send my filebeat data to logstash through HTTP/HTTPS?¿ I think that beats are not compatible with this, is correct? I have: Filebeat machines outside my private cloud -- NGINX 80/443 loadba…

---

## [Sync data from mssql to elasticsearch](https://discuss.elastic.co/t/sync-data-from-mssql-to-elasticsearch/246074)

<div class="topic-metadata">

**Author:** [@Gagana\_C](https://discuss.elastic.co/u/Gagana_C)\
**Replies:** 0\
**Last updated:** [August 24, 2020, 8:58am UTC](https://discuss.elastic.co/t/sync-data-from-mssql-to-elasticsearch/246074 "2020-08-24T08:58:54Z")

</div>

i have mssql database as source of truth, and people keep inserting or updating data into that, but i need to sync all that transaction by traction to elastic search, how can i do that. i tried using CDC and kafka to ge…

---

## [ECK Kib Service Annotation](https://discuss.elastic.co/t/eck-kib-service-annotation/245937)

<div class="topic-metadata">

**Author:** [@robinhood\_lko](https://discuss.elastic.co/u/robinhood_lko)\
**Replies:** 2\
**Last updated:** [August 24, 2020, 8:49am UTC](https://discuss.elastic.co/t/eck-kib-service-annotation/245937 "2020-08-24T08:49:48Z")

</div>

Hi Team, We have one requirement in which Kibana service need an annotation while deployment. ECK Deployment manages service deployment by itself. Is there any mechanism to handle this. Thanks. Regards AK

---

## [Filter by value on multiple events](https://discuss.elastic.co/t/filter-by-value-on-multiple-events/245907)

<div class="topic-metadata">

**Author:** [@Unkownfo](https://discuss.elastic.co/u/Unkownfo)\
**Replies:** 4\
**Last updated:** [August 24, 2020, 8:28am UTC](https://discuss.elastic.co/t/filter-by-value-on-multiple-events/245907 "2020-08-24T08:28:43Z")

</div>

Hi, I'm starting with Elastic Stack. My purpose is to handle log for many applications (stored in same index because i need to follow reference field across all applications), i got application in a json field as key/v…

---

## [Sophos module not working](https://discuss.elastic.co/t/sophos-module-not-working/245629)

<div class="topic-metadata">

**Author:** [@Ameer\_Mukadam](https://discuss.elastic.co/u/Ameer_Mukadam)\
**Replies:** 3\
**Last updated:** [August 24, 2020, 8:13am UTC](https://discuss.elastic.co/t/sophos-module-not-working/245629 "2020-08-24T08:13:23Z")

</div>

So I have been waiting for the Sophos XG module for some time since we use Sophos XG FW and when I got to know that 7.9 was released I quickly updated my filebeat and tried setting up the ingest pipeline for sophos but t…

---

## [org.elasticsearch.search.SearchHit](https://discuss.elastic.co/t/org-elasticsearch-search-searchhit/246069)

<div class="topic-metadata">

**Author:** [@Pete\_Watcharawit](https://discuss.elastic.co/u/Pete_Watcharawit)\
**Replies:** 0\
**Last updated:** [August 24, 2020, 7:51am UTC](https://discuss.elastic.co/t/org-elasticsearch-search-searchhit/246069 "2020-08-24T07:51:43Z")

</div>

From version 2.3.1, there is a method called isSourceEmpty() Is it compatible with 7.8.1 hasSource()? I bet they are very similar in terms of logic.

---

## [Kibana 7.8 can't start but Elastic 7.8 was running normally](https://discuss.elastic.co/t/kibana-7-8-cant-start-but-elastic-7-8-was-running-normally/245586)

<div class="topic-metadata">

**Author:** [@psanggabuana](https://discuss.elastic.co/u/psanggabuana)\
**Replies:** 2\
**Last updated:** [August 24, 2020, 7:34am UTC](https://discuss.elastic.co/t/kibana-7-8-cant-start-but-elastic-7-8-was-running-normally/245586 "2020-08-24T07:34:28Z")

</div>

I have issue which my Kibana 7.8 cant start. My Kibana connect to Elastic 7.8, elastic was running normally. The Elastic Output: { "name" : "DEVGRAFANA", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "eQ8SrmsG…

---

## [How to implement pagination using java](https://discuss.elastic.co/t/how-to-implement-pagination-using-java/246018)

<div class="topic-metadata">

**Author:** [@abhishek\_chaturvedi](https://discuss.elastic.co/u/abhishek_chaturvedi)\
**Replies:** 4\
**Last updated:** [August 24, 2020, 6:59am UTC](https://discuss.elastic.co/t/how-to-implement-pagination-using-java/246018 "2020-08-24T06:59:32Z")

</div>

Hi All, Could someone guide me with some code snippet on writing pagination logic using ES java rest high level client api. Below is my service code: @Override public List getResponses(ZonedDateTime startDate, ZonedDa…

---

## [Kibana server is not ready yet with 503 status but the service is running](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-with-503-status-but-the-service-is-running/245897)

<div class="topic-metadata">

**Author:** [@BTH.S3](https://discuss.elastic.co/u/BTH.S3)\
**Replies:** 2\
**Last updated:** [August 24, 2020, 4:46am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-with-503-status-but-the-service-is-running/245897 "2020-08-24T04:46:18Z")

</div>

I've installed the products version 6.8.4 both Kibana and Elasticsearch on Ubuntu 18.04 on two nodes (Kibana only installed on 1 node). However when I start the Kibana server, the errors are produce as log below {"type"…

---

## [Failed to execute action {:id=\>:main, :action\_type=\>LogStash::ConvergeResult::FailedAction, :message=\>"Could not execute action: PipelineAction::Create\<main\>, action\_result: false", :backtrace=\>nil}](https://discuss.elastic.co/t/failed-to-execute-action-id-main-action-type-logstash-failedaction-message-could-not-execute-action-pipelineaction-create-main-action-result-false-backtrace-nil/245372)

<div class="topic-metadata">

**Author:** [@joel.ng](https://discuss.elastic.co/u/joel.ng)\
**Replies:** 5\
**Last updated:** [August 24, 2020, 3:29am UTC](https://discuss.elastic.co/t/failed-to-execute-action-id-main-action-type-logstash-failedaction-message-could-not-execute-action-pipelineaction-create-main-action-result-false-backtrace-nil/245372 "2020-08-24T03:29:12Z")

</div>

Trying out logstash for the first time, but I'm getting this error on a very basic localhost:5044 to S3 configuration: \[2020-08-18T08:15:53,638\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.version"=\>"…

---

## [Elasticsearch clustering with External Storage](https://discuss.elastic.co/t/elasticsearch-clustering-with-external-storage/245215)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 4\
**Last updated:** [August 24, 2020, 3:07am UTC](https://discuss.elastic.co/t/elasticsearch-clustering-with-external-storage/245215 "2020-08-24T03:07:38Z")

</div>

Im having an elasticsearch cluster with local storage. Can I point all elasticsearch data nodes to same external hard disk? This will help me in Kubernetes to pull storage out of nodes/pods and keep it separate

---

## [Elasticsearch 7.9 doesn't start](https://discuss.elastic.co/t/elasticsearch-7-9-doesnt-start/245995)

<div class="topic-metadata">

**Author:** [@Peter123](https://discuss.elastic.co/u/Peter123)\
**Replies:** 3\
**Last updated:** [August 24, 2020, 1:07am UTC](https://discuss.elastic.co/t/elasticsearch-7-9-doesnt-start/245995 "2020-08-24T01:07:14Z")

</div>

I have Elasticsearch 7.9 and it doesn't start. How fix this problem? Centos 7 Java version openjdk version "1.8.0\_262" OpenJDK Runtime Environment (build 1.8.0\_262-b10) OpenJDK 64-Bit Server VM (build 25.262-b10, mi…

---

## [Index not appearing in Kibana via logstash](https://discuss.elastic.co/t/index-not-appearing-in-kibana-via-logstash/244255)

<div class="topic-metadata">

**Author:** [@Umang\_Mahant](https://discuss.elastic.co/u/Umang_Mahant)\
**Replies:** 6\
**Last updated:** [August 22, 2020, 1:50pm UTC](https://discuss.elastic.co/t/index-not-appearing-in-kibana-via-logstash/244255 "2020-08-22T13:50:41Z")

</div>

Hello once again... Being new to ELK, i cannot see the index "truck" in Kibana. There is no error in logstash, i dont know if its going to elastic search, if yes i dont know y its not reaching kibana... pleasee help! …

---

## [My first centralized log server](https://discuss.elastic.co/t/my-first-centralized-log-server/246002)

<div class="topic-metadata">

**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\
**Replies:** 5\
**Last updated:** [August 23, 2020, 10:52pm UTC](https://discuss.elastic.co/t/my-first-centralized-log-server/246002 "2020-08-23T22:52:56Z")

</div>

Hi guys , im learning elk. Just asking for some advices building my first loggin server. I need to gather al logs incoming from my mikrotik devices. Question is: What do I need to accomplish that ? (I already have m…

---

## [Create new aggregation index periodically](https://discuss.elastic.co/t/create-new-aggregation-index-periodically/245999)

<div class="topic-metadata">

**Author:** [@Vester](https://discuss.elastic.co/u/Vester)\
**Replies:** 2\
**Last updated:** [August 23, 2020, 9:08pm UTC](https://discuss.elastic.co/t/create-new-aggregation-index-periodically/245999 "2020-08-23T21:08:10Z")

</div>

Hi, I'm trying to create periodically a new index based on aggregation, something like: "size": 0, "aggs": { "group\_by\_xpto": { "terms": { "field": "xpto.keyword", "size": 10000 }, "aggs": { "latest\_position":…

---

## [Filtering two different time pattern in logstash](https://discuss.elastic.co/t/filtering-two-different-time-pattern-in-logstash/244370)

<div class="topic-metadata">

**Author:** [@Altair](https://discuss.elastic.co/u/Altair)\
**Replies:** 6\
**Last updated:** [August 10, 2020, 12:30pm UTC](https://discuss.elastic.co/t/filtering-two-different-time-pattern-in-logstash/244370 "2020-08-10T12:30:42Z")

</div>

Hello, I have two different time format in my logs like "Aug 10 09:18:10" and "2020-08-10T08:59:59.415319+02:00" I tried many different ways to have them in one grok but I fail date { match =\> \[ "syslog\_timestamp", "…

---

## [Unable to start elasticsearch on after enabling xpack](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-after-enabling-xpack/245996)

<div class="topic-metadata">

**Author:** [@bijender\_kr](https://discuss.elastic.co/u/bijender_kr)\
**Replies:** 0\
**Last updated:** [August 22, 2020, 8:20pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-after-enabling-xpack/245996 "2020-08-22T20:20:19Z")

</div>

Hello, I have 4 node cluster and after enabling xpack TLS/SSL, I am having issue in starting the elasticsearch service on 2 nodes. Getting below error message on both the nodes. \[2020-08-22T14:21:40,269\]\[INFO \]\[o.e.n.N…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1268)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1270)
