# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1370

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1371

---

## [Where is File Data Visualizer? How to upload CSV in Kibana?](https://discuss.elastic.co/t/where-is-file-data-visualizer-how-to-upload-csv-in-kibana/238404)

<div class="topic-metadata">

**Author:** [@Lan\_Lynn](https://discuss.elastic.co/u/Lan_Lynn)\
**Replies:** 2\
**Last updated:** [June 24, 2020, 9:41am UTC](https://discuss.elastic.co/t/where-is-file-data-visualizer-how-to-upload-csv-in-kibana/238404 "2020-06-24T09:41:29Z")

</div>

Hello ES community. I've learned on the Kibana documentation that it can load CSV files by this method: here is the link of this documentation: https://www.elastic.co/guide/en/kibana/7.7/connect-to-elasticsearch.html…

---

## [Failed to validate incoming join request from node](https://discuss.elastic.co/t/failed-to-validate-incoming-join-request-from-node/238420)

<div class="topic-metadata">

**Author:** [@elk6](https://discuss.elastic.co/u/elk6)\
**Replies:** 0\
**Last updated:** [June 24, 2020, 9:21am UTC](https://discuss.elastic.co/t/failed-to-validate-incoming-join-request-from-node/238420 "2020-06-24T09:21:09Z")

</div>

I'm trying to set up a simple master-1 node with data-1 and data-2 but when I look at the log I get this error. All nodes are fresh CentOS 7 machine that can ping each other. For all the cluster I've set: cluster.na…

---

## [Csv Column -\> Splitstring array and -\> Nested Object Problem](https://discuss.elastic.co/t/csv-column-splitstring-array-and-nested-object-problem/237609)

<div class="topic-metadata">

**Author:** [@Bender](https://discuss.elastic.co/u/Bender)\
**Replies:** 3\
**Last updated:** [June 24, 2020, 9:18am UTC](https://discuss.elastic.co/t/csv-column-splitstring-array-and-nested-object-problem/237609 "2020-06-24T09:18:44Z")

</div>

Dear Community, iam very new in the logstash and Ruby Environment and i have task that i have to solve. Input is a CSV file and on Column has a String with the following content (content length is dynamic but structure…

---

## [Восстановление снапшотов без snap-snapshot\*.dat фалов](https://discuss.elastic.co/t/snap-snapshot-dat/237598)

<div class="topic-metadata">

**Author:** [@mrevilfromhell](https://discuss.elastic.co/u/mrevilfromhell)\
**Replies:** 5\
**Last updated:** [June 24, 2020, 8:45am UTC](https://discuss.elastic.co/t/snap-snapshot-dat/237598 "2020-06-24T08:45:15Z")

</div>

На elasticsearch версии 2.4 были созданы снапшоты индексов. Добавлены в архив файлы из папки indices/name-index и meta-name-index.dat. Файл snap-snapshot-index-name.dat добавлен не был. Возможно ли восстановить снапшот …

---

## [Index with additional field taking less space than the same index without it](https://discuss.elastic.co/t/index-with-additional-field-taking-less-space-than-the-same-index-without-it/237815)

<div class="topic-metadata">

**Author:** [@jnioche](https://discuss.elastic.co/u/jnioche)\
**Replies:** 6\
**Last updated:** [June 24, 2020, 8:36am UTC](https://discuss.elastic.co/t/index-with-additional-field-taking-less-space-than-the-same-index-without-it/237815 "2020-06-24T08:36:14Z")

</div>

Hi, We have been using a field in a similar way to what the old \_all field used to do. We have a bunch of copy\_to from most of our other fields to copy to that field. I have been trying to measure the impact on disk sp…

---

## [Time filter not working in kibaba 7.4 when any one of the shard is down](https://discuss.elastic.co/t/time-filter-not-working-in-kibaba-7-4-when-any-one-of-the-shard-is-down/238365)

<div class="topic-metadata">

**Author:** [@Sundar.rv](https://discuss.elastic.co/u/Sundar.rv)\
**Replies:** 2\
**Last updated:** [June 24, 2020, 8:15am UTC](https://discuss.elastic.co/t/time-filter-not-working-in-kibaba-7-4-when-any-one-of-the-shard-is-down/238365 "2020-06-24T08:15:29Z")

</div>

Hi everyone, Currently we are testing our ELK cluster where we have 5 data nodes. Our index are split up in 5 data nodes (5 shards) as the index size is ~45GB. The index is a live one (its getting events from logstash …

---

## [How to split an Index, number\_of\_routing\_shards issue](https://discuss.elastic.co/t/how-to-split-an-index-number-of-routing-shards-issue/238024)

<div class="topic-metadata">

**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\
**Replies:** 3\
**Last updated:** [June 24, 2020, 8:04am UTC](https://discuss.elastic.co/t/how-to-split-an-index-number-of-routing-shards-issue/238024 "2020-06-24T08:04:44Z")

</div>

Hi, I want to split my index with 5 shards into 10 or 30 shards. At first I tried it with the \_splitAPI but i get the following result the number of routing shards \[5\] must be a multiple of the target shards \[10\] I tr…

---

## [Elastic Search Indexing](https://discuss.elastic.co/t/elastic-search-indexing/238212)

<div class="topic-metadata">

**Author:** [@vijaya](https://discuss.elastic.co/u/vijaya)\
**Replies:** 8\
**Last updated:** [June 24, 2020, 7:51am UTC](https://discuss.elastic.co/t/elastic-search-indexing/238212 "2020-06-24T07:51:06Z")

</div>

Dear Team, How to include aggregations at the time of creating indexing in elastic search. Please help me. Best Regards, Vijaya.

---

## [Kibana - Failed to launch chrome!](https://discuss.elastic.co/t/kibana-failed-to-launch-chrome/238370)

<div class="topic-metadata">

**Author:** [@Roman\_Kagan](https://discuss.elastic.co/u/Roman_Kagan)\
**Replies:** 1\
**Last updated:** [June 24, 2020, 7:37am UTC](https://discuss.elastic.co/t/kibana-failed-to-launch-chrome/238370 "2020-06-24T07:37:45Z")

</div>

Hi: I have Ubuntu server, downloaded tar, extracted it and trying to run. Also installed bunch of packages from: https://github.com/puppeteer/puppeteer/blob/main/docs/troubleshooting.md (see "Chrome headless doesn't la…

---

## [Reindex or sciling index](https://discuss.elastic.co/t/reindex-or-sciling-index/238393)

<div class="topic-metadata">

**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\
**Replies:** 3\
**Last updated:** [June 24, 2020, 7:11am UTC](https://discuss.elastic.co/t/reindex-or-sciling-index/238393 "2020-06-24T07:11:32Z")

</div>

i have one index with size 400GB. its too big so i want slicing it,i do it with reindex to monthly. but i get duplicate hit in index pattern. how to solve it? can i reindex from existing index not copy the data but cut …

---

## [How does must work's for multiple query with in array and in filter if there is null value(for query) then automatically remove that query](https://discuss.elastic.co/t/how-does-must-works-for-multiple-query-with-in-array-and-in-filter-if-there-is-null-value-for-query-then-automatically-remove-that-query/238394)

<div class="topic-metadata">

**Author:** [@akshaybhuradia](https://discuss.elastic.co/u/akshaybhuradia)\
**Replies:** 0\
**Last updated:** [June 24, 2020, 7:06am UTC](https://discuss.elastic.co/t/how-does-must-works-for-multiple-query-with-in-array-and-in-filter-if-there-is-null-value-for-query-then-automatically-remove-that-query/238394 "2020-06-24T07:06:16Z")

</div>

{ "query": { "bool":{ "must": \[ {"match" : { "userid" : "001" } }, {"query\_string" : {"fields":\["searchbar\_content"\],"query" : "\*"} } \], "filter":\[ { "terms" : { "tag" : \["tag yesterday"\] } }, …

---

## [Service Elasticsearch failed](https://discuss.elastic.co/t/service-elasticsearch-failed/238286)

<div class="topic-metadata">

**Author:** [@Weathmious](https://discuss.elastic.co/u/Weathmious)\
**Replies:** 4\
**Last updated:** [June 24, 2020, 7:08am UTC](https://discuss.elastic.co/t/service-elasticsearch-failed/238286 "2020-06-24T07:08:17Z")

</div>

Hi, Hi want to create a Graylog server. He had an error due to elasticsearch so I removed elasticsearch and then install again. The problem is that elasticsearch.service failed after a few seconds when I start it. I wan…

---

## [Elasticsearch DB backup for last one hour for a particular index](https://discuss.elastic.co/t/elasticsearch-db-backup-for-last-one-hour-for-a-particular-index/238377)

<div class="topic-metadata">

**Author:** [@ad1982](https://discuss.elastic.co/u/ad1982)\
**Replies:** 6\
**Last updated:** [June 24, 2020, 7:04am UTC](https://discuss.elastic.co/t/elasticsearch-db-backup-for-last-one-hour-for-a-particular-index/238377 "2020-06-24T07:04:51Z")

</div>

Is there a way to take a backup a particular index for just the last 1 hour ? snapshot doesnt provide the time period option? Any ideas?

---

## [How to recover when the disk is fault](https://discuss.elastic.co/t/how-to-recover-when-the-disk-is-fault/238357)

<div class="topic-metadata">

**Author:** [@jinjinbari](https://discuss.elastic.co/u/jinjinbari)\
**Replies:** 7\
**Last updated:** [June 24, 2020, 6:48am UTC](https://discuss.elastic.co/t/how-to-recover-when-the-disk-is-fault/238357 "2020-06-24T06:48:30Z")

</div>

Hello. My server disk is broken yesterday. I couldn\`t get snapshot, only I have index files. I will make new cluster -\> store old files -\> configure path -\> start. Could I recover if I make new cluster only with inde…

---

## [App Search and v1.2 Branch](https://discuss.elastic.co/t/app-search-and-v1-2-branch/237820)

<div class="topic-metadata">

**Author:** [@SeanPlacchetti](https://discuss.elastic.co/u/SeanPlacchetti)\
**Replies:** 1\
**Last updated:** [June 24, 2020, 6:42am UTC](https://discuss.elastic.co/t/app-search-and-v1-2-branch/237820 "2020-06-24T06:42:28Z")

</div>

My team is very interested in using the operator to deploy App Search nodes in our OpenShift cluster, definitely not looking for a finished product at this point as we're still in development, but we also don't want to c…

---

## [Problem with logstash: java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/problem-with-logstash-java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-systemexit-exit/238390)

<div class="topic-metadata">

**Author:** [@kase](https://discuss.elastic.co/u/kase)\
**Replies:** 1\
**Last updated:** [June 24, 2020, 6:29am UTC](https://discuss.elastic.co/t/problem-with-logstash-java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-systemexit-exit/238390 "2020-06-24T06:29:53Z")

</div>

Hi there, I'm using elastiflow with logstash, I've done these command in this url(https://www.catapultsystems.com/blogs/install-elastiflow-on-ubuntu-18-04-part-3/) And netflow data could came through logstash to elasti…

---

## [Unable to open apm index after closing all](https://discuss.elastic.co/t/unable-to-open-apm-index-after-closing-all/236589)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 12\
**Last updated:** [June 24, 2020, 6:25am UTC](https://discuss.elastic.co/t/unable-to-open-apm-index-after-closing-all/236589 "2020-06-24T06:25:16Z")

</div>

Kibana version : 7.6 Elasticsearch version : 7.6 APM Server version : 7.3.2 APM Agent language and version : java 1.9.0 Fresh install or upgraded from other version? fresh install Is there anything special in your s…

---

## [How to connect to 32-bit Sybase from Logstash Windows](https://discuss.elastic.co/t/how-to-connect-to-32-bit-sybase-from-logstash-windows/238389)

<div class="topic-metadata">

**Author:** [@qkhanhpro](https://discuss.elastic.co/u/qkhanhpro)\
**Replies:** 0\
**Last updated:** [June 24, 2020, 6:14am UTC](https://discuss.elastic.co/t/how-to-connect-to-32-bit-sybase-from-logstash-windows/238389 "2020-06-24T06:14:07Z")

</div>

Hi. I am trying to push some data from 32-bit Sybase to ES but at the moment, using Logstash for Windows, I am not sure which kind of configuration I should use for this to work? I already have a some experience with L…

---

## [I can't add a new node to my cluster](https://discuss.elastic.co/t/i-cant-add-a-new-node-to-my-cluster/238250)

<div class="topic-metadata">

**Author:** [@dferez](https://discuss.elastic.co/u/dferez)\
**Replies:** 5\
**Last updated:** [June 24, 2020, 6:08am UTC](https://discuss.elastic.co/t/i-cant-add-a-new-node-to-my-cluster/238250 "2020-06-24T06:08:31Z")

</div>

Hi. I currently have a two node cluster, each node is separated on a different host. I want to add a third node to the cluster, but it does not start, it has never started. Next I leave the configuration of the nodes: N…

---

## [Where does the export saved Object API put the exported objects?](https://discuss.elastic.co/t/where-does-the-export-saved-object-api-put-the-exported-objects/238378)

<div class="topic-metadata">

**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\
**Replies:** 3\
**Last updated:** [June 24, 2020, 6:00am UTC](https://discuss.elastic.co/t/where-does-the-export-saved-object-api-put-the-exported-objects/238378 "2020-06-24T06:00:39Z")

</div>

OK, used curl to drive the saved object export api: curl -X POST "localhost:9200/api/saved\_objects/\_export" -H "kbn-xsrf: true" -H "Content-Type: application/json" -d "{ \\"objects\\": \[ { \\"type\\": \\"dashboard\\" } \], \\"i…

---

## [Querying limited nested data (However nested type is deprecated in 7.x)](https://discuss.elastic.co/t/querying-limited-nested-data-however-nested-type-is-deprecated-in-7-x/238329)

<div class="topic-metadata">

**Author:** [@emmm-dee](https://discuss.elastic.co/u/emmm-dee)\
**Replies:** 6\
**Last updated:** [June 24, 2020, 5:54am UTC](https://discuss.elastic.co/t/querying-limited-nested-data-however-nested-type-is-deprecated-in-7-x/238329 "2020-06-24T05:54:35Z")

</div>

Elasticsearch 7.7 and I'm using the official php client to interact with the server. My issue was somewhat solved here: Need to return part of a doc from a search query/filter; is parent-child the way to go? - #2 by xa…

---

## [Drill down graph by clicking on a part of the graph](https://discuss.elastic.co/t/drill-down-graph-by-clicking-on-a-part-of-the-graph/238180)

<div class="topic-metadata">

**Author:** [@TUSHAR\_Sinha](https://discuss.elastic.co/u/TUSHAR_Sinha)\
**Replies:** 5\
**Last updated:** [June 24, 2020, 5:51am UTC](https://discuss.elastic.co/t/drill-down-graph-by-clicking-on-a-part-of-the-graph/238180 "2020-06-24T05:51:42Z")

</div>

Hi all, I want to create a drill down graph like, if I have a horizontal bar graph and if I click on any of the bar a new graph should be drilled out with the data related to that bar only. Is it possible to do so?

---

## [Master not discovered or elected yet, an election requires 2 nodes with ids](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-2-nodes-with-ids/237986)

<div class="topic-metadata">

**Author:** [@poetL](https://discuss.elastic.co/u/poetL)\
**Replies:** 2\
**Last updated:** [June 24, 2020, 5:27am UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-2-nodes-with-ids/237986 "2020-06-24T05:27:09Z")

</div>

I have three node clusters, one of which is a master node. The master node has been lost and there are only two slave nodes at present. However, after I rejoin the new master node, it cannot work properly \[node33\] maste…

---

## [Get count of top-level deleted documents in Elasticsearch](https://discuss.elastic.co/t/get-count-of-top-level-deleted-documents-in-elasticsearch/238371)

<div class="topic-metadata">

**Author:** [@kailoofi](https://discuss.elastic.co/u/kailoofi)\
**Replies:** 1\
**Last updated:** [June 24, 2020, 5:24am UTC](https://discuss.elastic.co/t/get-count-of-top-level-deleted-documents-in-elasticsearch/238371 "2020-06-24T05:24:35Z")

</div>

I am looking to get an accurate count of deleted Elasticsearch documents excluding the nested documents at Lucene level. I am aware of the following APIs to get document and deleted document counts but none of them retur…

---

## [How to connect API with Search UI](https://discuss.elastic.co/t/how-to-connect-api-with-search-ui/237970)

<div class="topic-metadata">

**Author:** [@spadel](https://discuss.elastic.co/u/spadel)\
**Replies:** 1\
**Last updated:** [June 24, 2020, 5:07am UTC](https://discuss.elastic.co/t/how-to-connect-api-with-search-ui/237970 "2020-06-24T05:07:50Z")

</div>

I have an API with Flask, that runs on my localhost. Basically, I have a search box, where I can enter any sentence. Furthermore I have a database with sentences (in my case an excel sheet). Through some neural network, …

---

## [Elasticsearch cluster performance tuning](https://discuss.elastic.co/t/elasticsearch-cluster-performance-tuning/236812)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 11\
**Last updated:** [June 24, 2020, 3:54am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-performance-tuning/236812 "2020-06-24T03:54:14Z")

</div>

Hi, Following an error I got in Kibana and the following posts How can I optimise and tune the elastic cluster? Elasticsearch/Kibana version are 7.6.2 I have 5 nodes in the cluster, all run on a CentOS 7 VMs 28G …

---

## [Logstash-plain.log stop recording and logstash failed to start](https://discuss.elastic.co/t/logstash-plain-log-stop-recording-and-logstash-failed-to-start/238201)

<div class="topic-metadata">

**Author:** [@kase](https://discuss.elastic.co/u/kase)\
**Replies:** 1\
**Last updated:** [June 24, 2020, 3:06am UTC](https://discuss.elastic.co/t/logstash-plain-log-stop-recording-and-logstash-failed-to-start/238201 "2020-06-24T03:06:29Z")

</div>

Hi there, I'm using logstash to filter netflow data to save to elasticsearch, it works fine but I also want to filter data in elasticsearch to save to redis, so I wrote a file to do logstash pipeline. Here is my file i…

---

## [7.5 Share the workpad on a websiteedit in a new html in not run success](https://discuss.elastic.co/t/7-5-share-the-workpad-on-a-websiteedit-in-a-new-html-in-not-run-success/238359)

<div class="topic-metadata">

**Author:** [@lily.guo](https://discuss.elastic.co/u/lily.guo)\
**Replies:** 0\
**Last updated:** [June 24, 2020, 2:20am UTC](https://discuss.elastic.co/t/7-5-share-the-workpad-on-a-websiteedit-in-a-new-html-in-not-run-success/238359 "2020-06-24T02:20:20Z")

</div>

---

## [Logstash Google Cloud Storage Output Plugin Error Msg](https://discuss.elastic.co/t/logstash-google-cloud-storage-output-plugin-error-msg/238355)

<div class="topic-metadata">

**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\
**Replies:** 0\
**Last updated:** [June 24, 2020, 1:42am UTC](https://discuss.elastic.co/t/logstash-google-cloud-storage-output-plugin-error-msg/238355 "2020-06-24T01:42:51Z")

</div>

I'm trying to set up the logstash-output-google\_cloud\_storage plugin with a very simple configuration set. The input works just fine, I tested it writing to a local file. output { google\_cloud\_storage { bucket…

---

## [\[WARN \]\[org.logstash.common.io.DeadLetterQueueWriter\] Event previously submitted to dead letter queue. Skipping](https://discuss.elastic.co/t/warn-org-logstash-common-io-deadletterqueuewriter-event-previously-submitted-to-dead-letter-queue-skipping/113250)

<div class="topic-metadata">

**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\
**Replies:** 2\
**Last updated:** [June 23, 2020, 11:07pm UTC](https://discuss.elastic.co/t/warn-org-logstash-common-io-deadletterqueuewriter-event-previously-submitted-to-dead-letter-queue-skipping/113250 "2020-06-23T23:07:03Z")

</div>

I just started working with the Dead Letter Queue, but after restarting my pipelines a few times I am now getting this message repeatedly in my logs: \[WARN \]\[org.logstash.common.io.DeadLetterQueueWriter\] Event previousl…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1369)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1371)
