# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1392 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1393 --- ## [Regarding X-Pack Alerting feature](https://discuss.elastic.co/t/regarding-x-pack-alerting-feature/236662)
**Author:** [@bdn](https://discuss.elastic.co/u/bdn)\ **Replies:** 3\ **Last updated:** [June 12, 2020, 3:55am UTC](https://discuss.elastic.co/t/regarding-x-pack-alerting-feature/236662 "2020-06-12T03:55:27Z")
Hi, X-Pack features provide security, alerting, monitoring, reporting, machine learning, and many other capabilities. I tried some of them and like alerting features a lot more. Can I pay only for alerting feature on my … --- ## [How can i speed up getting all document in an index](https://discuss.elastic.co/t/how-can-i-speed-up-getting-all-document-in-an-index/236805)
**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\ **Replies:** 1\ **Last updated:** [June 12, 2020, 3:37am UTC](https://discuss.elastic.co/t/how-can-i-speed-up-getting-all-document-in-an-index/236805 "2020-06-12T03:37:45Z")
Hello, I have a question. In my index, 50,000,000 documents in there. I want to get all documents by python like below code import elasticsearch import json body\_str = {"query": {"match\_all": {}}} es\_c… --- ## [Null reference error in scripted field](https://discuss.elastic.co/t/null-reference-error-in-scripted-field/236800)
**Author:** [@maxtotaljunk](https://discuss.elastic.co/u/maxtotaljunk)\ **Replies:** 2\ **Last updated:** [June 12, 2020, 3:26am UTC](https://discuss.elastic.co/t/null-reference-error-in-scripted-field/236800 "2020-06-12T03:26:57Z")
My error is this: \[esaggs\] \> Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"null\_pointer\_exception","reason":null}\],"type":"search\_phase\_execution\_exception","reason":"all shards failed","phase":"quer… --- ## [Cannot start logstash in command line](https://discuss.elastic.co/t/cannot-start-logstash-in-command-line/236804)
**Author:** [@azteker](https://discuss.elastic.co/u/azteker)\ **Replies:** 1\ **Last updated:** [June 12, 2020, 2:07am UTC](https://discuss.elastic.co/t/cannot-start-logstash-in-command-line/236804 "2020-06-12T02:07:06Z")
I got "Logstash could not be started because there is already another instance using the configured data directory" "systemctl status logstash" shows "Active: failed". Why I still got this message? Here is the message … --- ## [How to specify custom /etc/default file in elasticsearch 7](https://discuss.elastic.co/t/how-to-specify-custom-etc-default-file-in-elasticsearch-7/236540)
**Author:** [@Nestor\_Manrique](https://discuss.elastic.co/u/Nestor_Manrique)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 11:36pm UTC](https://discuss.elastic.co/t/how-to-specify-custom-etc-default-file-in-elasticsearch-7/236540 "2020-06-11T23:36:42Z")
In the documentation it says explicitly For the package distributions, the config directory location defaults to /etc/elasticsearch . The location of the config directory can also be changed via the ES\_PATH\_CONF env… --- ## [Swap, elasticsearch and docker](https://discuss.elastic.co/t/swap-elasticsearch-and-docker/236427)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [June 11, 2020, 11:08pm UTC](https://discuss.elastic.co/t/swap-elasticsearch-and-docker/236427 "2020-06-11T23:08:38Z")
Its recommended to disable swap in the elasticsearch machine, but I was wandering if I have three elastic nodes on docker, is still recommended to disable swap? --- ## [Logstash Errors mapper\_parsing\_exception vs illegal\_argument\_exception](https://discuss.elastic.co/t/logstash-errors-mapper-parsing-exception-vs-illegal-argument-exception/236783)
**Author:** [@akrzos](https://discuss.elastic.co/u/akrzos)\ **Replies:** 2\ **Last updated:** [June 11, 2020, 10:58pm UTC](https://discuss.elastic.co/t/logstash-errors-mapper-parsing-exception-vs-illegal-argument-exception/236783 "2020-06-11T22:58:23Z")
I am trying to understand the difference between these two errors: \[2020-06-05T13:51:34,267\]\[WARN \]\[logstash.outputs.elasticsearch\]\[filebeat\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:… --- ## [6.8.10 binares seems down](https://discuss.elastic.co/t/6-8-10-binares-seems-down/236565)
**Author:** [@Roger\_9](https://discuss.elastic.co/u/Roger_9)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 10:46pm UTC](https://discuss.elastic.co/t/6-8-10-binares-seems-down/236565 "2020-06-11T22:46:09Z")
hello, seems like 6.8.10 are down https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-6.8.10-linux-x86\_64.tar.gz --- ## [Logstash Crashes... Minimal Config, Default Pipeline!](https://discuss.elastic.co/t/logstash-crashes-minimal-config-default-pipeline/236766)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 4\ **Last updated:** [June 11, 2020, 10:41pm UTC](https://discuss.elastic.co/t/logstash-crashes-minimal-config-default-pipeline/236766 "2020-06-11T22:41:45Z")
Hi Logstash gurus, I have been running the Docker container instance of Logstash (ver 7.4.0, yes, I need to upgrade) for a while now. I had to tear down and rebuild the container, and I decided to take the opportunity … --- ## [Kibana 6.8.2 process shutdown frequently](https://discuss.elastic.co/t/kibana-6-8-2-process-shutdown-frequently/235420)
**Author:** [@bbadhe](https://discuss.elastic.co/u/bbadhe)\ **Replies:** 2\ **Last updated:** [June 11, 2020, 10:25pm UTC](https://discuss.elastic.co/t/kibana-6-8-2-process-shutdown-frequently/235420 "2020-06-11T22:25:49Z")
Hi , We have Kibana 6.8.2 setup with is working with elastic search 6.8.2. We see every few days kibana process dies, not able to get any exception logs. Today I was check logs after the process died and found below i… --- ## [ES7 - how to model 1-n parent-child relations - different ES types](https://discuss.elastic.co/t/es7-how-to-model-1-n-parent-child-relations-different-es-types/236792)
**Author:** [@kcris](https://discuss.elastic.co/u/kcris)\ **Replies:** 0\ **Last updated:** [June 11, 2020, 10:01pm UTC](https://discuss.elastic.co/t/es7-how-to-model-1-n-parent-child-relations-different-es-types/236792 "2020-06-11T22:01:50Z")
Hi, I am migrating an old ES instance to ES7. We need 1-n parent-child relations. We used to have multiple types in the same index and it was easy. Some types were related to their parent via \_parent . But ES7 will on… --- ## [Create new field from existing one](https://discuss.elastic.co/t/create-new-field-from-existing-one/236778)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 9:44pm UTC](https://discuss.elastic.co/t/create-new-field-from-existing-one/236778 "2020-06-11T21:44:53Z")
Create new field with proper url content. this path are sometime 10 level deep and sometime 20. this is what I have full\_file\_name: /home/sachin/Tests/noise/spread/xspread/xspread\_a\_10\_v1.tl.gz project: sachin file\_n… --- ## [How to Enable Alerting With Basic License?](https://discuss.elastic.co/t/how-to-enable-alerting-with-basic-license/236764)
**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\ **Replies:** 4\ **Last updated:** [June 11, 2020, 9:05pm UTC](https://discuss.elastic.co/t/how-to-enable-alerting-with-basic-license/236764 "2020-06-11T21:05:31Z")
According to elastic licensing page alerting is available with basic free license. We have 6 node cluster (with TLS/security enabled) and we are unable to see any alerting options on cluster monitoring dashboards in Kib… --- ## [Runout error when parsing with logstash](https://discuss.elastic.co/t/runout-error-when-parsing-with-logstash/236752)
**Author:** [@nb03briceno](https://discuss.elastic.co/u/nb03briceno)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 8:38pm UTC](https://discuss.elastic.co/t/runout-error-when-parsing-with-logstash/236752 "2020-06-11T20:38:37Z")
Hello everyone, I'm trying to use logstash in order to parse some txt files. When doing it, one of the lines read from the txt file is really big, causing a problem in the grok parsing. A line of the txt file I'm talkin… --- ## [How to update ElasticSearch search\_analyzer mapping without conflict on analyzer?](https://discuss.elastic.co/t/how-to-update-elasticsearch-search-analyzer-mapping-without-conflict-on-analyzer/236533)
**Author:** [@waynebloss](https://discuss.elastic.co/u/waynebloss)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 8:27pm UTC](https://discuss.elastic.co/t/how-to-update-elasticsearch-search-analyzer-mapping-without-conflict-on-analyzer/236533 "2020-06-11T20:27:35Z")
Also asked on StackOverflow I'm using version 7.7 of ElasticSearch, LogStash and Kibana and trying to update an index mapping for a field is resulting in one of 2 errors: mapper\_parsing\_exception: analyzer on field \[t… --- ## [Elasticsearch as a primary Mysql database](https://discuss.elastic.co/t/elasticsearch-as-a-primary-mysql-database/236757)
**Author:** [@Arash\_Soft](https://discuss.elastic.co/u/Arash_Soft)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 7:38pm UTC](https://discuss.elastic.co/t/elasticsearch-as-a-primary-mysql-database/236757 "2020-06-11T19:38:07Z")
hi there is a past topic like this but i want to know what is the solution after 4 years now i use mysql and i have like 6000000 row per table and high request per second and i use slim framework to build my app becau… --- ## [Kibana Search Query](https://discuss.elastic.co/t/kibana-search-query/236528)
**Author:** [@santos1204](https://discuss.elastic.co/u/santos1204)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 7:33pm UTC](https://discuss.elastic.co/t/kibana-search-query/236528 "2020-06-11T19:33:32Z")
Hi, I'm trailing ELK at the moment within the insurance space, have an issue and wondering if Kibana can solve it. Our software creates two messages that identify the start and finish of a quotation that I'm easily able… --- ## [\[Kibana\] Monthly roll-up, sum of averages](https://discuss.elastic.co/t/kibana-monthly-roll-up-sum-of-averages/235955)
**Author:** [@eStrux-MAB](https://discuss.elastic.co/u/eStrux-MAB)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 7:14pm UTC](https://discuss.elastic.co/t/kibana-monthly-roll-up-sum-of-averages/235955 "2020-06-11T19:14:29Z")
I have an incoming stream of data where I monitor devices belonging to clients, and need to aggregate the data every month for billing purposes. Starting situation: The readings of a device are averaged out over the … --- ## [Show all values in control visualization](https://discuss.elastic.co/t/show-all-values-in-control-visualization/236073)
**Author:** [@GilKor](https://discuss.elastic.co/u/GilKor)\ **Replies:** 2\ **Last updated:** [June 11, 2020, 7:06pm UTC](https://discuss.elastic.co/t/show-all-values-in-control-visualization/236073 "2020-06-11T19:06:45Z")
Hi, I am trying to populate data (tags), in a time frame that i know has more than 10 different tags. But in the controls visualization i can only see 10, and from what i read it's the 10 most common tags in the set ti… --- ## [Corrent use of numeric type Long without losing precision](https://discuss.elastic.co/t/corrent-use-of-numeric-type-long-without-losing-precision/236774)
**Author:** [@mmu](https://discuss.elastic.co/u/mmu)\ **Replies:** 0\ **Last updated:** [June 11, 2020, 7:01pm UTC](https://discuss.elastic.co/t/corrent-use-of-numeric-type-long-without-losing-precision/236774 "2020-06-11T19:01:12Z")
What is the correct use of the numeric datatype long? It seems that there are some pitfalls with values greater than +/- 2^53. (see https://stackoverflow.com/questions/38952262/elasticsearch-max-length-of-mapping-type-lo… --- ## [How to aggregate two tabular vizualization each with different time range?](https://discuss.elastic.co/t/how-to-aggregate-two-tabular-vizualization-each-with-different-time-range/235819)
**Author:** [@rajdevworks](https://discuss.elastic.co/u/rajdevworks)\ **Replies:** 4\ **Last updated:** [June 11, 2020, 6:57pm UTC](https://discuss.elastic.co/t/how-to-aggregate-two-tabular-vizualization-each-with-different-time-range/235819 "2020-06-11T18:57:38Z")
I have two data table results each based on certain query and each have different time range. How can I aggregate the results to get a difference of it in a single data table? --- ## [System memory increase when upgrading from 5.6 to 6](https://discuss.elastic.co/t/system-memory-increase-when-upgrading-from-5-6-to-6/236773)
**Author:** [@Travis\_Andelin](https://discuss.elastic.co/u/Travis_Andelin)\ **Replies:** 0\ **Last updated:** [June 11, 2020, 6:53pm UTC](https://discuss.elastic.co/t/system-memory-increase-when-upgrading-from-5-6-to-6/236773 "2020-06-11T18:53:08Z")
When upgrading from 5.6 to 6.1 (and then to 6.8), we have noticed an increase in memory usage. Before and after the upgrade, JVM heap size was configured at 3GB. After the upgrade, overall system memory usage jumped from… --- ## [Failed to load suricata dashboard using filebeat](https://discuss.elastic.co/t/failed-to-load-suricata-dashboard-using-filebeat/236026)
**Author:** [@Jun.8](https://discuss.elastic.co/u/Jun.8)\ **Replies:** 0\ **Last updated:** [June 6, 2020, 9:28am UTC](https://discuss.elastic.co/t/failed-to-load-suricata-dashboard-using-filebeat/236026 "2020-06-06T09:28:21Z")
Hi, I have a trouble with loading suricata dashboard using filebeat.. I followed the steps below and it seems that it is working well... plz check the result message below. ./filebeat setup Overwriting ILM policy i… --- ## [Metricbeat dont create index pattern by itself](https://discuss.elastic.co/t/metricbeat-dont-create-index-pattern-by-itself/235974)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 0\ **Last updated:** [June 5, 2020, 3:14pm UTC](https://discuss.elastic.co/t/metricbeat-dont-create-index-pattern-by-itself/235974 "2020-06-05T15:14:24Z")
Hello, I have installed metricbeat version 7.7.1 in my 7.7.0 cluster. the yaml file of metricbeat is like that: ###################### Metricbeat Configuration Example ####################### # This file is an exampl… --- ## [All data is lost after restarting elasticseach](https://discuss.elastic.co/t/all-data-is-lost-after-restarting-elasticseach/235940)
**Author:** [@ahmed75](https://discuss.elastic.co/u/ahmed75)\ **Replies:** 0\ **Last updated:** [June 5, 2020, 11:09am UTC](https://discuss.elastic.co/t/all-data-is-lost-after-restarting-elasticseach/235940 "2020-06-05T11:09:09Z")
I'm running EFK stack in my EKS cluster however when i restart elasticsearch and access kibana all my previous data are lost including index-pattern and saved objects Here is my elasticsearch file : apiVersion: v1 kind… --- ## [Calculate with Kibana metrics](https://discuss.elastic.co/t/calculate-with-kibana-metrics/235927)
**Author:** [@LWine](https://discuss.elastic.co/u/LWine)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 6:39pm UTC](https://discuss.elastic.co/t/calculate-with-kibana-metrics/235927 "2020-06-11T18:39:27Z")
I'm working in Kibana. I have an index with each document representing a sold product with product\_quantity, order\_id, customer\_id, order\_date and returned\_quantity. I want to calculate a few things: Average number of… --- ## [Appeal field using indice name](https://discuss.elastic.co/t/appeal-field-using-indice-name/235923)
**Author:** [@inchirah](https://discuss.elastic.co/u/inchirah)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 6:29pm UTC](https://discuss.elastic.co/t/appeal-field-using-indice-name/235923 "2020-06-11T18:29:49Z")
Hello, We have a three different indices(contain different type of informations.) with the same field's names. I wonder if we can appeal each field using the indice's name. For exp: tab1.fieldname and tab2.fieldname. … --- ## [Can we have background color in Data Table based on Status Change](https://discuss.elastic.co/t/can-we-have-background-color-in-data-table-based-on-status-change/235921)
**Author:** [@Jayashree\_Teggi](https://discuss.elastic.co/u/Jayashree_Teggi)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 6:28pm UTC](https://discuss.elastic.co/t/can-we-have-background-color-in-data-table-based-on-status-change/235921 "2020-06-11T18:28:49Z")
Based on Status Change I want to assign the colors in the background is this possible in Kibana --- ## [Filebeat always need kibana now?](https://discuss.elastic.co/t/filebeat-always-need-kibana-now/236637)
**Author:** [@azteker](https://discuss.elastic.co/u/azteker)\ **Replies:** 2\ **Last updated:** [June 11, 2020, 5:55pm UTC](https://discuss.elastic.co/t/filebeat-always-need-kibana-now/236637 "2020-06-11T17:55:35Z")
I don't want to set kibana and only need the filebeat to send data. But now I cannot start my filebeat and get this error: Exiting: Error importing Kibana dashboards: fail to create the Kibana loader: Error creating Kib… --- ## [Fatal error enoent no such file or directory mkdtemp - KIBANA](https://discuss.elastic.co/t/fatal-error-enoent-no-such-file-or-directory-mkdtemp-kibana/236214)
**Author:** [@Athiq\_Ahmed](https://discuss.elastic.co/u/Athiq_Ahmed)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 5:50pm UTC](https://discuss.elastic.co/t/fatal-error-enoent-no-such-file-or-directory-mkdtemp-kibana/236214 "2020-06-11T17:50:36Z")
Hi, when ever I run the batch file of Kibana (Elastic search is already running at the backend), I am getting the following error, please advise ASAP. "Fatal Error: ENOCENT: no such file or directory, mkdtemp; \\chromiu… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1391) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1393)