# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1297

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1298

---

## [Unable to start ElasticSearch after install on CENTOS 7](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-install-on-centos-7/243733)

<div class="topic-metadata">

**Author:** [@ian-hosting](https://discuss.elastic.co/u/ian-hosting)\
**Replies:** 13\
**Last updated:** [August 6, 2020, 6:27am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-install-on-centos-7/243733 "2020-08-06T06:27:37Z")

</div>

Hi Went through the steps to install the latest ElasticSearch via rpm and all seemed to go well but when I try to start it, there is an error First time attempting to install this so am a bit lost as to where to look f…

---

## [Circuit breaker exception resulted in temination of all the nodes of Elasticsearch](https://discuss.elastic.co/t/circuit-breaker-exception-resulted-in-temination-of-all-the-nodes-of-elasticsearch/242783)

<div class="topic-metadata">

**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\
**Replies:** 4\
**Last updated:** [August 6, 2020, 6:07am UTC](https://discuss.elastic.co/t/circuit-breaker-exception-resulted-in-temination-of-all-the-nodes-of-elasticsearch/242783 "2020-08-06T06:07:58Z")

</div>

Hi All, I am new to ELK and tried load testing for the first time, I did some heavy load testing in ELK and tried to create a report for last three months .When I ran the command . I can see shards started failing and a…

---

## [How can I install systemd module into the ES serverinstalled from the archive?](https://discuss.elastic.co/t/how-can-i-install-systemd-module-into-the-es-serverinstalled-from-the-archive/243656)

<div class="topic-metadata">

**Author:** [@takh777](https://discuss.elastic.co/u/takh777)\
**Replies:** 4\
**Last updated:** [August 6, 2020, 5:34am UTC](https://discuss.elastic.co/t/how-can-i-install-systemd-module-into-the-es-serverinstalled-from-the-archive/243656 "2020-08-06T05:34:11Z")

</div>

I've installed Elasticsearch 7.6 from archive (not RPM) on Cent OS 7 and configuring it. ( I cannot use RPM release of ES in this case, due to a requrement from other software.) Now I could launch the server via comman…

---

## [Failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin\]](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/243766)

<div class="topic-metadata">

**Author:** [@junhuangli](https://discuss.elastic.co/u/junhuangli)\
**Replies:** 8\
**Last updated:** [August 6, 2020, 5:10am UTC](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/243766 "2020-08-06T05:10:26Z")

</div>

Getting the following exception when I try to enable the native ssl cert for es. I have check the permission for "/etc/identity/ca/cacerts.pem". It was also used for envoy proxy and it is working fine with envoy. Any ide…

---

## [Rollup job and how to create new record every minute](https://discuss.elastic.co/t/rollup-job-and-how-to-create-new-record-every-minute/243951)

<div class="topic-metadata">

**Author:** [@GraceYu](https://discuss.elastic.co/u/GraceYu)\
**Replies:** 0\
**Last updated:** [August 6, 2020, 3:33am UTC](https://discuss.elastic.co/t/rollup-job-and-how-to-create-new-record-every-minute/243951 "2020-08-06T03:33:18Z")

</div>

Hi all, I am new to rollup job and would like to schedule to get max and count for an index. I am using sample tutorial index sensor with cron run every minute \*/1 \* \* \* \* ?. The issue is the rollup index is created an…

---

## [Elastic Search Bulk API (Delete) vs DeleteByQuery](https://discuss.elastic.co/t/elastic-search-bulk-api-delete-vs-deletebyquery/243617)

<div class="topic-metadata">

**Author:** [@jbiju94](https://discuss.elastic.co/u/jbiju94)\
**Replies:** 4\
**Last updated:** [August 6, 2020, 3:26am UTC](https://discuss.elastic.co/t/elastic-search-bulk-api-delete-vs-deletebyquery/243617 "2020-08-06T03:26:00Z")

</div>

My requirement is to delete a particular document (with doc\_id) from multiple indices in one go. But the catch is that I am not aware which all indices would have this doc and I will have to fire a delete request for the…

---

## ['Kibana server is not ready' after 7.7.1-7.8.1](https://discuss.elastic.co/t/kibana-server-is-not-ready-after-7-7-1-7-8-1/243937)

<div class="topic-metadata">

**Author:** [@Gavin\_Clark](https://discuss.elastic.co/u/Gavin_Clark)\
**Replies:** 2\
**Last updated:** [August 6, 2020, 2:34am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-after-7-7-1-7-8-1/243937 "2020-08-06T02:34:07Z")

</div>

After experiencing slowness in the Kibana UI from the jump from 6.8.9 to 7.7.1, I was told on the forums I should upgrade to 7.8 as that had a number of UI performance improvements. All elasticsearch nodes were upgraded…

---

## [Kibana unable to create and update index pattern](https://discuss.elastic.co/t/kibana-unable-to-create-and-update-index-pattern/243644)

<div class="topic-metadata">

**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\
**Replies:** 3\
**Last updated:** [August 6, 2020, 2:15am UTC](https://discuss.elastic.co/t/kibana-unable-to-create-and-update-index-pattern/243644 "2020-08-06T02:15:09Z")

</div>

Hi all... I have an issue creating new Index in Kibana 7.5.0; when i want to save the index pattern i get error : the circle only spining but the index pattern still not succes create. the issue not just found w…

---

## [Azure self managed elasticsearch - how to add a node](https://discuss.elastic.co/t/azure-self-managed-elasticsearch-how-to-add-a-node/243948)

<div class="topic-metadata">

**Author:** [@jpatel](https://discuss.elastic.co/u/jpatel)\
**Replies:** 0\
**Last updated:** [August 6, 2020, 1:27am UTC](https://discuss.elastic.co/t/azure-self-managed-elasticsearch-how-to-add-a-node/243948 "2020-08-06T01:27:02Z")

</div>

How do I add a node to the self managed ES cluster running on Azure ? I understand that if it was VM based (and not from market place self-managed), I would add a VM, install ES and modify yml file to add the node. Than…

---

## [Dashboard Drill Down - source of updated viz that support?](https://discuss.elastic.co/t/dashboard-drill-down-source-of-updated-viz-that-support/243812)

<div class="topic-metadata">

**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\
**Replies:** 2\
**Last updated:** [August 5, 2020, 11:18pm UTC](https://discuss.elastic.co/t/dashboard-drill-down-source-of-updated-viz-that-support/243812 "2020-08-05T23:18:58Z")

</div>

Hi - Is there somewhere I can go to see if and when each visualization type (metrics, pie, gauge, TSVB etc) has support for dashboard drill-downs built-in? As I understand I can do dashboard drill-downs from line charts…

---

## [Drilldown using scripted field](https://discuss.elastic.co/t/drilldown-using-scripted-field/243747)

<div class="topic-metadata">

**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 9:59pm UTC](https://discuss.elastic.co/t/drilldown-using-scripted-field/243747 "2020-08-05T21:59:52Z")

</div>

how to apply filter when chart is aggregated using scripted field?

---

## [Is there any way to make a sync line across charts on hover in dashboard?](https://discuss.elastic.co/t/is-there-any-way-to-make-a-sync-line-across-charts-on-hover-in-dashboard/243665)

<div class="topic-metadata">

**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\
**Replies:** 2\
**Last updated:** [August 5, 2020, 9:54pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-make-a-sync-line-across-charts-on-hover-in-dashboard/243665 "2020-08-05T21:54:31Z")

</div>

I find that in stack monitoring, it is default to have such line as screen captured below Is it possible to make the same line on dashboard? Thanks.

---

## [Show the diff between 2 lines in Kibana](https://discuss.elastic.co/t/show-the-diff-between-2-lines-in-kibana/243802)

<div class="topic-metadata">

**Author:** [@jdevilla20](https://discuss.elastic.co/u/jdevilla20)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 9:50pm UTC](https://discuss.elastic.co/t/show-the-diff-between-2-lines-in-kibana/243802 "2020-08-05T21:50:50Z")

</div>

I am using the rollup feature to rollup 2 indexes. They are defined as the following: PUT /frontend { "settings": { "number\_of\_shards": 5 }, "mappings": { "properties": { "owner": { "type": "key…

---

## [Upsert Document on the basis of datetime format](https://discuss.elastic.co/t/upsert-document-on-the-basis-of-datetime-format/243864)

<div class="topic-metadata">

**Author:** [@rishabh\_jain](https://discuss.elastic.co/u/rishabh_jain)\
**Replies:** 0\
**Last updated:** [August 5, 2020, 12:22pm UTC](https://discuss.elastic.co/t/upsert-document-on-the-basis-of-datetime-format/243864 "2020-08-05T12:22:31Z")

</div>

Hello, If I wanted to update an existing document if it satisfies the condition. See an example below: Index: test\_index Add tweet and lastupdated fields to document 1 as below. Please note that the lastupdated fiel…

---

## [Kibana histogram chart](https://discuss.elastic.co/t/kibana-histogram-chart/243808)

<div class="topic-metadata">

**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 9:39pm UTC](https://discuss.elastic.co/t/kibana-histogram-chart/243808 "2020-08-05T21:39:29Z")

</div>

Hi, this pic is an example in "metabase". It shows busiest hours of the day and the best-selling day of week in a month for example. I know I can create a line chart like this in kibana But it shows the busiest hou…

---

## [How to make a graph where x buckets show two different sources of information in the visualization tool?](https://discuss.elastic.co/t/how-to-make-a-graph-where-x-buckets-show-two-different-sources-of-information-in-the-visualization-tool/243830)

<div class="topic-metadata">

**Author:** [@Morrisseyroo](https://discuss.elastic.co/u/Morrisseyroo)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 9:30pm UTC](https://discuss.elastic.co/t/how-to-make-a-graph-where-x-buckets-show-two-different-sources-of-information-in-the-visualization-tool/243830 "2020-08-05T21:30:26Z")

</div>

Hey guys, I'm new to Kibana and trying to learn how to make visualizations. I can do simple ones so far but I'm getting stuck on how to add more than 1 source like in this sample photo. To clarify using the example, see…

---

## [Post ingest, how can I generate lat long fields into geo point](https://discuss.elastic.co/t/post-ingest-how-can-i-generate-lat-long-fields-into-geo-point/243796)

<div class="topic-metadata">

**Author:** [@brasspuma](https://discuss.elastic.co/u/brasspuma)\
**Replies:** 3\
**Last updated:** [August 5, 2020, 9:16pm UTC](https://discuss.elastic.co/t/post-ingest-how-can-i-generate-lat-long-fields-into-geo-point/243796 "2020-08-05T21:16:12Z")

</div>

I've ingested CSV data via Apache NiFi and posted to Elasticsearch. I've come to realize that there are "lat" and "lon" values in my index. My index is already in the 10's of millions of records. \`{"name":"Sam", "lat": …

---

## [Elastic SIEM Map Not Showing Destinations](https://discuss.elastic.co/t/elastic-siem-map-not-showing-destinations/243436)

<div class="topic-metadata">

**Author:** [@Man715](https://discuss.elastic.co/u/Man715)\
**Replies:** 7\
**Last updated:** [August 5, 2020, 8:48pm UTC](https://discuss.elastic.co/t/elastic-siem-map-not-showing-destinations/243436 "2020-08-05T20:48:48Z")

</div>

I have not been able to find any information about this issue. Also, I am very new to the elastic stack. When I look at the SIEM map, it shows some of the destination icons and information but a large amount of destinat…

---

## [Upload multiple synonyms txt files in Elastic Search](https://discuss.elastic.co/t/upload-multiple-synonyms-txt-files-in-elastic-search/243932)

<div class="topic-metadata">

**Author:** [@shefu](https://discuss.elastic.co/u/shefu)\
**Replies:** 0\
**Last updated:** [August 5, 2020, 8:47pm UTC](https://discuss.elastic.co/t/upload-multiple-synonyms-txt-files-in-elastic-search/243932 "2020-08-05T20:47:03Z")

</div>

I have implemented "one index per language" approach in Elastic search as we have multiple languages. Each index will have its own mapping based on language. Defined Synonyms for each language and mapped to specific map…

---

## [Painless script issue in date comparision](https://discuss.elastic.co/t/painless-script-issue-in-date-comparision/243927)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 0\
**Last updated:** [August 5, 2020, 8:08pm UTC](https://discuss.elastic.co/t/painless-script-issue-in-date-comparision/243927 "2020-08-05T20:08:39Z")

</div>

I have written a painless script to get the time difference between two date fields, but i'm not getting the correct answer. default\_date : 01-01-1970 00:00:00 result.taskslatable\_duration.value : 01-01-1970 00:40:00 b…

---

## [Upgrade assistant long reindex time](https://discuss.elastic.co/t/upgrade-assistant-long-reindex-time/243923)

<div class="topic-metadata">

**Author:** [@Tudor\_Frincu](https://discuss.elastic.co/u/Tudor_Frincu)\
**Replies:** 0\
**Last updated:** [August 5, 2020, 7:47pm UTC](https://discuss.elastic.co/t/upgrade-assistant-long-reindex-time/243923 "2020-08-05T19:47:34Z")

</div>

Hello, I have a elasticsearch cluster that we just migrated from 5.6.4 to 6.8.10. The cluster has 3 master nodes, 3 client nodes and 3 data nodes. They have the following resources allocated: master node : CPU 1000MH…

---

## [\[s3 Logstash\] Setting bucket prefix to be specific range of days](https://discuss.elastic.co/t/s3-logstash-setting-bucket-prefix-to-be-specific-range-of-days/243787)

<div class="topic-metadata">

**Author:** [@ian2](https://discuss.elastic.co/u/ian2)\
**Replies:** 2\
**Last updated:** [August 5, 2020, 7:37pm UTC](https://discuss.elastic.co/t/s3-logstash-setting-bucket-prefix-to-be-specific-range-of-days/243787 "2020-08-05T19:37:14Z")

</div>

We're pushing logs into an s3 bucket. We've setup the our indexer configuration and tested with a single folder within our bucket - which naming convention is the date (e.g. my-bucket-of-logs/20200804) however we want to…

---

## [How can I use query match AND instead of comma?](https://discuss.elastic.co/t/how-can-i-use-query-match-and-instead-of-comma/243712)

<div class="topic-metadata">

**Author:** [@Yusuf\_Karatoprak](https://discuss.elastic.co/u/Yusuf_Karatoprak)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 7:08pm UTC](https://discuss.elastic.co/t/how-can-i-use-query-match-and-instead-of-comma/243712 "2020-08-05T19:08:04Z")

</div>

Hi; My question is really simple but I couldn't find any solution for that ? I have a 3 columns "why, target,rate,similarto" . This is a kind of recommendation system . target is "A Hotel", similarto is "B Hotel, C Hote…

---

## [Logstash does not create index on elasticsearch](https://discuss.elastic.co/t/logstash-does-not-create-index-on-elasticsearch/243773)

<div class="topic-metadata">

**Author:** [@asuarez](https://discuss.elastic.co/u/asuarez)\
**Replies:** 4\
**Last updated:** [August 5, 2020, 6:38pm UTC](https://discuss.elastic.co/t/logstash-does-not-create-index-on-elasticsearch/243773 "2020-08-05T18:38:07Z")

</div>

Hello, I am new to Elastic, I need help with the development of Logstash, I could not get any logstash to automatically create indexes in ElasticSearch. I have created 2 logstast .conf and none create the indexes, I lea…

---

## [Illegal character in authority at index 8:](https://discuss.elastic.co/t/illegal-character-in-authority-at-index-8/243795)

<div class="topic-metadata">

**Author:** [@elaair](https://discuss.elastic.co/u/elaair)\
**Replies:** 12\
**Last updated:** [August 5, 2020, 6:37pm UTC](https://discuss.elastic.co/t/illegal-character-in-authority-at-index-8/243795 "2020-08-05T18:37:09Z")

</div>

I am using logstash 7.8 and am seeing this error while using the elasticsearch filter: :error=\>"Illegal character in authority at index 8: https://{:host=\>\\"fqdn.here.com\\", :scheme=\>\\"https\\", :protocol=\>\\"https\\", :po…

---

## [How to configure a cluster with enable X-Pac(security)?](https://discuss.elastic.co/t/how-to-configure-a-cluster-with-enable-x-pac-security/243801)

<div class="topic-metadata">

**Author:** [@HenriqueNogueira](https://discuss.elastic.co/u/HenriqueNogueira)\
**Replies:** 9\
**Last updated:** [August 5, 2020, 6:17pm UTC](https://discuss.elastic.co/t/how-to-configure-a-cluster-with-enable-x-pac-security/243801 "2020-08-05T18:17:16Z")

</div>

I'm using version 7.8.1 with x-pac enabled and I can't get my second node to connect to my cluster, what should I do?

---

## [Where are index templates and lifecycle policies stored?](https://discuss.elastic.co/t/where-are-index-templates-and-lifecycle-policies-stored/243910)

<div class="topic-metadata">

**Author:** [@steven1](https://discuss.elastic.co/u/steven1)\
**Replies:** 0\
**Last updated:** [August 5, 2020, 5:54pm UTC](https://discuss.elastic.co/t/where-are-index-templates-and-lifecycle-policies-stored/243910 "2020-08-05T17:54:05Z")

</div>

Our cluster was shutdown and we had to recover the data nodes. It is now missing all of our index templates and index lifecycles. Index data and other settings seem ok. I'm look for where this data is stored and the p…

---

## [Search query retrieving data from Kibana Dev Console But no hits from Postman](https://discuss.elastic.co/t/search-query-retrieving-data-from-kibana-dev-console-but-no-hits-from-postman/243222)

<div class="topic-metadata">

**Author:** [@allAbout\_Gaming](https://discuss.elastic.co/u/allAbout_Gaming)\
**Replies:** 4\
**Last updated:** [August 5, 2020, 5:36pm UTC](https://discuss.elastic.co/t/search-query-retrieving-data-from-kibana-dev-console-but-no-hits-from-postman/243222 "2020-08-05T17:36:39Z")

</div>

Hi All, The below search query is retrieving data when we run in Dev console in Kibana But when we run from postman it returns 0 hits. Please help. { "query":{ "match": { "name": "ABC" } } }

---

## [Are hashes/objects saved in order?](https://discuss.elastic.co/t/are-hashes-objects-saved-in-order/243881)

<div class="topic-metadata">

**Author:** [@spdoes](https://discuss.elastic.co/u/spdoes)\
**Replies:** 10\
**Last updated:** [August 5, 2020, 5:33pm UTC](https://discuss.elastic.co/t/are-hashes-objects-saved-in-order/243881 "2020-08-05T17:33:15Z")

</div>

if I insert this field in this order: "name\_of\_field": {"first":1,"second":2,"third":3} will it always save in the same order as I inserted ? Based on my test, inserting multiple objects like that can make it save it …

---

## [Drop filter is not dropping the logs](https://discuss.elastic.co/t/drop-filter-is-not-dropping-the-logs/243781)

<div class="topic-metadata">

**Author:** [@srbhklkrn](https://discuss.elastic.co/u/srbhklkrn)\
**Replies:** 4\
**Last updated:** [August 5, 2020, 4:19pm UTC](https://discuss.elastic.co/t/drop-filter-is-not-dropping-the-logs/243781 "2020-08-05T16:19:54Z")

</div>

I need to drop logs when syslog5424\_host is e.g dev.dev.sample-app-109, the number at the end will change but I have regex to accommodate that. This is my current configuration but it's not dropping the logs. The field…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1296)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1298)
