# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1280

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1281

---

## [How to use elastic search for storing & fetching document as json](https://discuss.elastic.co/t/how-to-use-elastic-search-for-storing-fetching-document-as-json/245232)

<div class="topic-metadata">

**Author:** [@mmuzammil45](https://discuss.elastic.co/u/mmuzammil45)\
**Replies:** 0\
**Last updated:** [August 17, 2020, 12:13pm UTC](https://discuss.elastic.co/t/how-to-use-elastic-search-for-storing-fetching-document-as-json/245232 "2020-08-17T12:13:12Z")

</div>

I am working on ElasticSearch for the purpose of storing & fetching data as json. The problem is ES treats json as text/string when I use search/highlight function and does not complete my requirement i.e. to get all the…

---

## [How to control Logstash multiple output rate](https://discuss.elastic.co/t/how-to-control-logstash-multiple-output-rate/245224)

<div class="topic-metadata">

**Author:** [@vaishno.avi](https://discuss.elastic.co/u/vaishno.avi)\
**Replies:** 0\
**Last updated:** [August 17, 2020, 11:15am UTC](https://discuss.elastic.co/t/how-to-control-logstash-multiple-output-rate/245224 "2020-08-17T11:15:10Z")

</div>

Hello, I am using logstash with multiple output, with the below config if \[channel\] == "test" { elasticsearch { hosts =\> \["elk\_url"\] index =\> "logs-%{+YYYY.MM.dd}" } …

---

## [How to keep enrich index updated](https://discuss.elastic.co/t/how-to-keep-enrich-index-updated/245188)

<div class="topic-metadata">

**Author:** [@askids](https://discuss.elastic.co/u/askids)\
**Replies:** 2\
**Last updated:** [August 17, 2020, 12:07pm UTC](https://discuss.elastic.co/t/how-to-keep-enrich-index-updated/245188 "2020-08-17T12:07:44Z")

</div>

hi, When we create a enrich index to use in enrich policy, is there a way to keep the enrich index updated based on changes happening in source index from which enrich index was created? If I have to constantly update …

---

## [Different number of hits for the same time range](https://discuss.elastic.co/t/different-number-of-hits-for-the-same-time-range/244912)

<div class="topic-metadata">

**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\
**Replies:** 2\
**Last updated:** [August 17, 2020, 11:59am UTC](https://discuss.elastic.co/t/different-number-of-hits-for-the-same-time-range/244912 "2020-08-17T11:59:58Z")

</div>

As I am using the same time range for the same query, it is returning different numbers of hits on re-query. { "size": "0", "query": { "bool": { "must": \[ { "range": { "timest…

---

## [Rollup Jobs Performance](https://discuss.elastic.co/t/rollup-jobs-performance/245228)

<div class="topic-metadata">

**Author:** [@michaelpietzsch](https://discuss.elastic.co/u/michaelpietzsch)\
**Replies:** 0\
**Last updated:** [August 17, 2020, 11:45am UTC](https://discuss.elastic.co/t/rollup-jobs-performance/245228 "2020-08-17T11:45:53Z")

</div>

Hi Gals and Guys, i am having issues with Rollup Jobs on my system. The Data Quantity is quite large (100861815 Documents streched over 50gb per index) I am trying to run a job to roll up the information of the passt d…

---

## [Kibana visualisation from SQL query](https://discuss.elastic.co/t/kibana-visualisation-from-sql-query/244013)

<div class="topic-metadata">

**Author:** [@Mkapustin](https://discuss.elastic.co/u/Mkapustin)\
**Replies:** 2\
**Last updated:** [August 17, 2020, 10:45am UTC](https://discuss.elastic.co/t/kibana-visualisation-from-sql-query/244013 "2020-08-17T10:45:44Z")

</div>

Hello friends! Need help with visualisation in Kibana from sql query: I have the same table from sql query: I need to group results values by columns of actions values and by Mail ID. In splunk I realise it with cha…

---

## [Count unique values from the filter query result, taking two fields into account](https://discuss.elastic.co/t/count-unique-values-from-the-filter-query-result-taking-two-fields-into-account/245220)

<div class="topic-metadata">

**Author:** [@Miguel\_BA](https://discuss.elastic.co/u/Miguel_BA)\
**Replies:** 0\
**Last updated:** [August 17, 2020, 10:32am UTC](https://discuss.elastic.co/t/count-unique-values-from-the-filter-query-result-taking-two-fields-into-account/245220 "2020-08-17T10:32:05Z")

</div>

I have a query that filters the "desc = mls or door = 33". Next I want a count value with a agregations the unique values in two fields. "query": { "nested": { "path": "data.addresses", "inner\_hits": { …

---

## [DLQ - dead\_letter\_queue input plugin features and ability](https://discuss.elastic.co/t/dlq-dead-letter-queue-input-plugin-features-and-ability/245219)

<div class="topic-metadata">

**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\
**Replies:** 0\
**Last updated:** [August 17, 2020, 10:27am UTC](https://discuss.elastic.co/t/dlq-dead-letter-queue-input-plugin-features-and-ability/245219 "2020-08-17T10:27:12Z")

</div>

Hello all Running Logstash v7.8.1 and dead\_letter\_queue input plugin v1.1.5. Just a question about the functionalilty of the DLQ input plugin for Logstash. Seeing a couple of issues myself and then after looking aroun…

---

## [Unable to use after first install](https://discuss.elastic.co/t/unable-to-use-after-first-install/245115)

<div class="topic-metadata">

**Author:** [@carterdacat](https://discuss.elastic.co/u/carterdacat)\
**Replies:** 1\
**Last updated:** [August 17, 2020, 10:26am UTC](https://discuss.elastic.co/t/unable-to-use-after-first-install/245115 "2020-08-17T10:26:52Z")

</div>

Hi! I tried to install Kibana using these steps: wget https://artifacts.elastic.co/downloads/kibana/kibana-5.6.16-linux-x86.tar.gz sha1sum kibana-5.6.16-linux-x86.tar.gz tar -xzf kibana-5.6.16-linux-x86.tar.gz cd kiban…

---

## [How to get aggregation bucket keys in the term query block](https://discuss.elastic.co/t/how-to-get-aggregation-bucket-keys-in-the-term-query-block/245214)

<div class="topic-metadata">

**Author:** [@Shrikanth\_M](https://discuss.elastic.co/u/Shrikanth_M)\
**Replies:** 0\
**Last updated:** [August 17, 2020, 10:14am UTC](https://discuss.elastic.co/t/how-to-get-aggregation-bucket-keys-in-the-term-query-block/245214 "2020-08-17T10:14:47Z")

</div>

How to get aggregation bucket keys in the term query block in the same query? Query { "size": 0, "query": {....}, "aggs": { "customerId": { "composite": { "sources": \[ { "customerId": {…

---

## [Kibana upgrade from 6.6.1 to 7.8.0 fails with resource already exists exception](https://discuss.elastic.co/t/kibana-upgrade-from-6-6-1-to-7-8-0-fails-with-resource-already-exists-exception/245158)

<div class="topic-metadata">

**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\
**Replies:** 2\
**Last updated:** [August 17, 2020, 10:15am UTC](https://discuss.elastic.co/t/kibana-upgrade-from-6-6-1-to-7-8-0-fails-with-resource-already-exists-exception/245158 "2020-08-17T10:15:24Z")

</div>

Hi, I am upgrading ELK stack from 6.6.1 to 7.8.0(oss) in kubernetes environment. Elasticsearch upgrade works fine, but new kibana pod fails with this error - {"type":"log","@timestamp":"2020-08-16T18:01:43Z","tags":\["…

---

## [Yaxis data value loses precision in timelion when using percent as units with tickDecimals](https://discuss.elastic.co/t/yaxis-data-value-loses-precision-in-timelion-when-using-percent-as-units-with-tickdecimals/244281)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 2\
**Last updated:** [August 17, 2020, 10:00am UTC](https://discuss.elastic.co/t/yaxis-data-value-loses-precision-in-timelion-when-using-percent-as-units-with-tickdecimals/244281 "2020-08-17T10:00:55Z")

</div>

Kibana Version \[ywatanabe@fedora-desktop ~\]$ docker ps | awk '{ print $2;}' ID docker.elastic.co/kibana/kibana:7.8.0 docker.elastic.co/elasticsearch/elasticsearch:7.8.0 What had happened If I calculate numeric value as …

---

## [How to split field value into an array?](https://discuss.elastic.co/t/how-to-split-field-value-into-an-array/245197)

<div class="topic-metadata">

**Author:** [@Robo](https://discuss.elastic.co/u/Robo)\
**Replies:** 1\
**Last updated:** [August 17, 2020, 9:57am UTC](https://discuss.elastic.co/t/how-to-split-field-value-into-an-array/245197 "2020-08-17T09:57:15Z")

</div>

Hello, I would like to split a field value into an array of values. Field type is keyword and I would like to separate these values, so we can filter each value separately (e.g. "app1"). example: applname: app1, app2,…

---

## [Actions trace log will cause logs setting to reset](https://discuss.elastic.co/t/actions-trace-log-will-cause-logs-setting-to-reset/245074)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 1\
**Last updated:** [August 17, 2020, 9:32am UTC](https://discuss.elastic.co/t/actions-trace-log-will-cause-logs-setting-to-reset/245074 "2020-08-17T09:32:06Z")

</div>

ELK :7.8.1 After clicking trace log, the page to jump to is empty. This is an error. (link http://192.168.10.145:5601/app/logs/link-to/logs?time=1597469807703&filter=trace.id:"4e41234389a5a38eb16827a5ad9eaeb6"%20OR%2…

---

## [Delete data in index without deleting the data](https://discuss.elastic.co/t/delete-data-in-index-without-deleting-the-data/245116)

<div class="topic-metadata">

**Author:** [@vikramaddagulla](https://discuss.elastic.co/u/vikramaddagulla)\
**Replies:** 2\
**Last updated:** [August 17, 2020, 9:20am UTC](https://discuss.elastic.co/t/delete-data-in-index-without-deleting-the-data/245116 "2020-08-17T09:20:09Z")

</div>

Hello, Could you please share me steps on how to delete the index data without deleting the index itself ?? If yes, then is it possible to delete the data based on timeline ? For ex : Currently I have data from the l…

---

## [Acces to elastic cloud for managing deployments with multiple accounts](https://discuss.elastic.co/t/acces-to-elastic-cloud-for-managing-deployments-with-multiple-accounts/245204)

<div class="topic-metadata">

**Author:** [@ErwinEnableU](https://discuss.elastic.co/u/ErwinEnableU)\
**Replies:** 4\
**Last updated:** [August 17, 2020, 9:20am UTC](https://discuss.elastic.co/t/acces-to-elastic-cloud-for-managing-deployments-with-multiple-accounts/245204 "2020-08-17T09:20:00Z")

</div>

Dear community, Right now we have 2 cloud environments at Elastic (T and P). To manage these deployments we can now only have one account to login and manage these deployments. Is it possible to create more accounts wit…

---

## [Kibana dashboard for ES cluster monitoring](https://discuss.elastic.co/t/kibana-dashboard-for-es-cluster-monitoring/245036)

<div class="topic-metadata">

**Author:** [@dominique.bejean](https://discuss.elastic.co/u/dominique.bejean)\
**Replies:** 8\
**Last updated:** [August 17, 2020, 8:13am UTC](https://discuss.elastic.co/t/kibana-dashboard-for-es-cluster-monitoring/245036 "2020-08-17T08:13:28Z")

</div>

Hi, I have 2 separate ES clusters. One is dedicated to monitoring. I followed these instructions https://www.elastic.co/guide/en/elasticsearch/reference/current/monitoring-production.html On the monitoring cluster I h…

---

## [Heap (Shard Amount and Close Index)](https://discuss.elastic.co/t/heap-shard-amount-and-close-index/245073)

<div class="topic-metadata">

**Author:** [@gogi](https://discuss.elastic.co/u/gogi)\
**Replies:** 3\
**Last updated:** [August 17, 2020, 7:37am UTC](https://discuss.elastic.co/t/heap-shard-amount-and-close-index/245073 "2020-08-17T07:37:29Z")

</div>

Hi all, i have a question regarding saving Heap Space for the ES Nodes. As far as i know there is a shard Limit per Node due to heap usage / management. https://www.elastic.co/guide/en/elasticsearch/reference/current/a…

---

## [ECK flags and env configurations](https://discuss.elastic.co/t/eck-flags-and-env-configurations/244748)

<div class="topic-metadata">

**Author:** [@pup\_seba](https://discuss.elastic.co/u/pup_seba)\
**Replies:** 1\
**Last updated:** [August 17, 2020, 7:24am UTC](https://discuss.elastic.co/t/eck-flags-and-env-configurations/244748 "2020-08-17T07:24:11Z")

</div>

Hi, For configuring Elastic Cloud on Kubernetes (ECK), I tried following the instructions on this link: https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-operator-config.html I would like to change some of the d…

---

## [Upgrading elasticsearch kibana and filebeat](https://discuss.elastic.co/t/upgrading-elasticsearch-kibana-and-filebeat/245142)

<div class="topic-metadata">

**Author:** [@manojk](https://discuss.elastic.co/u/manojk)\
**Replies:** 1\
**Last updated:** [August 17, 2020, 7:09am UTC](https://discuss.elastic.co/t/upgrading-elasticsearch-kibana-and-filebeat/245142 "2020-08-17T07:09:04Z")

</div>

Hi all, we are running below on the kubernetes. Daemonset : logging-elk-filebeat-ds Image: filebeat:6.6.1 Deployments : logging-elk-client Image: elasticsearch:6.6.1 logging-elk-kibana Image: …

---

## [Index Memory issue](https://discuss.elastic.co/t/index-memory-issue/244976)

<div class="topic-metadata">

**Author:** [@KrishK](https://discuss.elastic.co/u/KrishK)\
**Replies:** 3\
**Last updated:** [August 17, 2020, 5:13am UTC](https://discuss.elastic.co/t/index-memory-issue/244976 "2020-08-17T05:13:22Z")

</div>

Hi Support, I checked with one of the elastic testing servers, I found some index memory difference. SS from the testing server - Heap Size: 3GB\[HDD 2TB\] SS from PROD server – Heap Size:30GB \[2TB\] Is there any co…

---

## [Does Elasticsearch Data Node full of replicas routing request to other nodes?](https://discuss.elastic.co/t/does-elasticsearch-data-node-full-of-replicas-routing-request-to-other-nodes/244987)

<div class="topic-metadata">

**Author:** [@vorapoap](https://discuss.elastic.co/u/vorapoap)\
**Replies:** 7\
**Last updated:** [August 17, 2020, 5:08am UTC](https://discuss.elastic.co/t/does-elasticsearch-data-node-full-of-replicas-routing-request-to-other-nodes/244987 "2020-08-17T05:08:58Z")

</div>

If the cluster has 4 nodes and the index has 4 primary shards. Each shard has 3 replicas, it means each node contains all shard data. When search query is sent to a node,. does it route query to other nodes? or it depe…

---

## [Unable to store binary in Elasticsearch through python REST API](https://discuss.elastic.co/t/unable-to-store-binary-in-elasticsearch-through-python-rest-api/245160)

<div class="topic-metadata">

**Author:** [@Dibyendu\_Dutta](https://discuss.elastic.co/u/Dibyendu_Dutta)\
**Replies:** 1\
**Last updated:** [August 17, 2020, 4:26am UTC](https://discuss.elastic.co/t/unable-to-store-binary-in-elasticsearch-through-python-rest-api/245160 "2020-08-17T04:26:59Z")

</div>

I have created a index like \> PUT new\_index\_blob \> { \> "mappings": { \> "properties": { \> "name": { \> "type": "text" \> }, \> "blob": { \> "type": "binary", \> "store": true \> …

---

## [Kibana 7.8.0 auto closed when click on Discover](https://discuss.elastic.co/t/kibana-7-8-0-auto-closed-when-click-on-discover/242296)

<div class="topic-metadata">

**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\
**Replies:** 4\
**Last updated:** [August 17, 2020, 4:05am UTC](https://discuss.elastic.co/t/kibana-7-8-0-auto-closed-when-click-on-discover/242296 "2020-08-17T04:05:06Z")

</div>

Hi All, I am using ELK 7.8.0. I have been inserting data into elasticsearch using logstash. Today, i loaded more data with different date format setting in the config file, i am not able to open Discover. Either Disco…

---

## [Error parsing xml with XmlSimple: Bad encoding name](https://discuss.elastic.co/t/error-parsing-xml-with-xmlsimple-bad-encoding-name/245147)

<div class="topic-metadata">

**Author:** [@insaneboiz](https://discuss.elastic.co/u/insaneboiz)\
**Replies:** 2\
**Last updated:** [August 17, 2020, 3:58am UTC](https://discuss.elastic.co/t/error-parsing-xml-with-xmlsimple-bad-encoding-name/245147 "2020-08-17T03:58:56Z")

</div>

Hi guys, I've been having this trouble with Logstash v7.8.1 and v6.5.4 with EPO Syslog. It's a straight simple XML data, but the XML plugin could not parse it somehow. Sending Logstash logs to /home/XXX/Desktop/logstash…

---

## [Elastic Search Killed on start up!](https://discuss.elastic.co/t/elastic-search-killed-on-start-up/245162)

<div class="topic-metadata">

**Author:** [@carterdacat](https://discuss.elastic.co/u/carterdacat)\
**Replies:** 23\
**Last updated:** [August 17, 2020, 2:53am UTC](https://discuss.elastic.co/t/elastic-search-killed-on-start-up/245162 "2020-08-17T02:53:47Z")

</div>

Hi! I just installed elastic on my pi running ubuntu 20.06, i got v5.6, and when ever i run ./bin/elasticsearch it just returns "killed" ubuntu@ubuntu:~/elasticsearch-5.6.16$ sudo ES\_JAVA\_OPTS="-Xms2g -Xmx2g" ./bin/elas…

---

## [Possible bug in elasticsearch nuget package](https://discuss.elastic.co/t/possible-bug-in-elasticsearch-nuget-package/244568)

<div class="topic-metadata">

**Author:** [@vohanka](https://discuss.elastic.co/u/vohanka)\
**Replies:** 1\
**Last updated:** [August 17, 2020, 1:01am UTC](https://discuss.elastic.co/t/possible-bug-in-elasticsearch-nuget-package/244568 "2020-08-17T01:01:14Z")

</div>

Hi, I found that elastic maybe have error in requirements of his nuget package. On nuget store is: Dependencies: .NET Framework, Version=v4.6.1 System.Diagnostics.DiagnosticSource (\>= 4.5.1). But if I try to run que…

---

## [How do I get elasticsearch endpoint for 3 coordinating node setup in Azure?](https://discuss.elastic.co/t/how-do-i-get-elasticsearch-endpoint-for-3-coordinating-node-setup-in-azure/244646)

<div class="topic-metadata">

**Author:** [@jpatel](https://discuss.elastic.co/u/jpatel)\
**Replies:** 2\
**Last updated:** [August 17, 2020, 12:58am UTC](https://discuss.elastic.co/t/how-do-i-get-elasticsearch-endpoint-for-3-coordinating-node-setup-in-azure/244646 "2020-08-17T00:58:16Z")

</div>

I have installed 3 nodes of elastic search from Azure marketplace and any node can act as master node. Now how do I connect to the cluster ?

---

## [Facets performance: want to know just if has at least one item](https://discuss.elastic.co/t/facets-performance-want-to-know-just-if-has-at-least-one-item/245170)

<div class="topic-metadata">

**Author:** [@cristianossd](https://discuss.elastic.co/u/cristianossd)\
**Replies:** 0\
**Last updated:** [August 16, 2020, 11:30pm UTC](https://discuss.elastic.co/t/facets-performance-want-to-know-just-if-has-at-least-one-item/245170 "2020-08-16T23:30:50Z")

</div>

Hi, everyone! Consider that I have million of documents with its categories A, B and C. I am searching to show the query results and requesting the facets (for a filter) to know if these categories have documents. But, …

---

## [Access sharepoint file as input in Elasticsearch](https://discuss.elastic.co/t/access-sharepoint-file-as-input-in-elasticsearch/244961)

<div class="topic-metadata">

**Author:** [@ranu\_shekhar](https://discuss.elastic.co/u/ranu_shekhar)\
**Replies:** 1\
**Last updated:** [August 16, 2020, 10:03pm UTC](https://discuss.elastic.co/t/access-sharepoint-file-as-input-in-elasticsearch/244961 "2020-08-16T22:03:21Z")

</div>

Hi, I have an excel file which is stored in sharepoint. I want to ingest that file directly in elasticsearch via logstash input filter.But I am not finding any plugin in logstash to ingest the data through logstash.

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1279)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1281)
