# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1444 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1445 --- ## [Date Dynamic Mapping](https://discuss.elastic.co/t/date-dynamic-mapping/232981)
**Author:** [@AsfK](https://discuss.elastic.co/u/AsfK)\ **Replies:** 3\ **Last updated:** [May 17, 2020, 3:28pm UTC](https://discuss.elastic.co/t/date-dynamic-mapping/232981 "2020-05-17T15:28:25Z")
Hello! I using ES High rest api to upload json as document, no template is provide. I want to make an index pattern by date, therefore I added a 'time' field contains time in various formats but it recognized as string… --- ## [Elastic cluster recommendation for large data set](https://discuss.elastic.co/t/elastic-cluster-recommendation-for-large-data-set/232987)
**Author:** [@Virajsl](https://discuss.elastic.co/u/Virajsl)\ **Replies:** 2\ **Last updated:** [May 17, 2020, 3:05pm UTC](https://discuss.elastic.co/t/elastic-cluster-recommendation-for-large-data-set/232987 "2020-05-17T15:05:05Z")
I'm planing to use elasticsearch for my reporting purposes. I'm very new to elasticsearch therefore looking for some advises in below areas. Scenario For reporting purposes i'm using ES. My data set roughly estimated … --- ## [Elasticsearch change state](https://discuss.elastic.co/t/elasticsearch-change-state/232937)
**Author:** [@khzied](https://discuss.elastic.co/u/khzied)\ **Replies:** 9\ **Last updated:** [May 17, 2020, 2:14pm UTC](https://discuss.elastic.co/t/elasticsearch-change-state/232937 "2020-05-17T14:14:37Z")
Hello, I'm running Elasticsearch 5.6 and when my Cluster became yellow I have these logs In master: \[2020-05-15T14:50:57,908\]\[DEBUG\]\[o.e.a.a.c.n.s.TransportNodesStatsAction\] \[node-elasticsearch\_master\_02\] failed to ex… --- ## [Using numbers in conditionals leads to fatal "java.lang.ClassCastException: class org.jruby.RubyFixnum cannot be cast to class java.lang.Long"](https://discuss.elastic.co/t/using-numbers-in-conditionals-leads-to-fatal-java-lang-classcastexception-class-org-jruby-rubyfixnum-cannot-be-cast-to-class-java-lang-long/231962)
**Author:** [@DavidFineboym](https://discuss.elastic.co/u/DavidFineboym)\ **Replies:** 3\ **Last updated:** [May 17, 2020, 2:00pm UTC](https://discuss.elastic.co/t/using-numbers-in-conditionals-leads-to-fatal-java-lang-classcastexception-class-org-jruby-rubyfixnum-cannot-be-cast-to-class-java-lang-long/231962 "2020-05-17T14:00:06Z")
Hi, I'm having trouble with conditional statements that include numbers in them in Logstash 7.6. The same pipeline configuration worked well in Logstash 6.8. I'm using Windows Server 2019 Datacenter, version 1809, and … --- ## [How to uninstall logstash service?](https://discuss.elastic.co/t/how-to-uninstall-logstash-service/232660)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 3\ **Last updated:** [May 17, 2020, 12:18pm UTC](https://discuss.elastic.co/t/how-to-uninstall-logstash-service/232660 "2020-05-17T12:18:29Z")
Hi, I have installed multiple instances of logstash on a single machine. Installation was done via system-install script provided with logstash package. Each instance has its own configuration folder. But how can I unin… --- ## [Logstash Aggregate with multiple end tags](https://discuss.elastic.co/t/logstash-aggregate-with-multiple-end-tags/232972)
**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\ **Replies:** 5\ **Last updated:** [May 17, 2020, 10:45am UTC](https://discuss.elastic.co/t/logstash-aggregate-with-multiple-end-tags/232972 "2020-05-17T10:45:12Z")
Hi All, I am trying to aggregate elapsed time value for a specific event. But, the event end tags are either one of the two tags (either Saved or Modified) as specified below in the sample data. Sample Data with colu… --- ## [Why does ES need Java 14 to build?](https://discuss.elastic.co/t/why-does-es-need-java-14-to-build/232915)
**Author:** [@Niels\_Basjes](https://discuss.elastic.co/u/Niels_Basjes)\ **Replies:** 5\ **Last updated:** [May 17, 2020, 10:25am UTC](https://discuss.elastic.co/t/why-does-es-need-java-14-to-build/232915 "2020-05-17T10:25:21Z")
Hi, I want to create a custom processing plugin for ES and I ran into the problem that apparently building anything for ES 7.7.0 requires Java 14 ( see https://github.com/elastic/elasticsearch/pull/54696 ). Yet the htt… --- ## [error=\>Worker loop initialization error, "Missing Filter End Vertex"](https://discuss.elastic.co/t/error-worker-loop-initialization-error-missing-filter-end-vertex/232928)
**Author:** [@Stefan\_Sabolowitsch](https://discuss.elastic.co/u/Stefan_Sabolowitsch)\ **Replies:** 3\ **Last updated:** [May 17, 2020, 10:25am UTC](https://discuss.elastic.co/t/error-worker-loop-initialization-error-missing-filter-end-vertex/232928 "2020-05-17T10:25:13Z")
Hi there, Run the latest version of Logstash in Kube here. logstash crashes when starting due to pipline problem. apiVersion: v1 kind: ConfigMap metadata: name: sample-logstash-configmap namespace: elastic-monitoring … --- ## [Elasticsearch - a scale problem? master timeout?](https://discuss.elastic.co/t/elasticsearch-a-scale-problem-master-timeout/232973)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 3\ **Last updated:** [May 17, 2020, 10:14am UTC](https://discuss.elastic.co/t/elasticsearch-a-scale-problem-master-timeout/232973 "2020-05-17T10:14:37Z")
I noticed a new problem. This problem started when I have 40 data nodes and more in the elasticsearch cluster. When on a cluster you are doing a larger scale, e.g. recovery shards (let's assume you are doing some rerou… --- ## [Unable to enter my space in Kibana](https://discuss.elastic.co/t/unable-to-enter-my-space-in-kibana/232689)
**Author:** [@Pablo95](https://discuss.elastic.co/u/Pablo95)\ **Replies:** 6\ **Last updated:** [May 17, 2020, 9:42am UTC](https://discuss.elastic.co/t/unable-to-enter-my-space-in-kibana/232689 "2020-05-17T09:42:14Z")
Hi, I was trying Vega visualization and then Kibana stop wrking in my browser. The service is still up and running, but I'm unable to enter my space. Every time i refresh the page this is what it says to me: Can any… --- ## [Jdbc one to many relationship to logstash](https://discuss.elastic.co/t/jdbc-one-to-many-relationship-to-logstash/232976)
**Author:** [@Mike\_Storm](https://discuss.elastic.co/u/Mike_Storm)\ **Replies:** 0\ **Last updated:** [May 17, 2020, 9:21am UTC](https://discuss.elastic.co/t/jdbc-one-to-many-relationship-to-logstash/232976 "2020-05-17T09:21:29Z")
Hi Guys, I'm little bit confused about how to use the aggregate filter, I've followed the documentation and read some articles, I used a sample database in MySQL (Sakila Database) and created a view in mysql sakila dat… --- ## [Recomendations on Managing Storage Size](https://discuss.elastic.co/t/recomendations-on-managing-storage-size/232905)
**Author:** [@rukmalf](https://discuss.elastic.co/u/rukmalf)\ **Replies:** 5\ **Last updated:** [May 17, 2020, 9:01am UTC](https://discuss.elastic.co/t/recomendations-on-managing-storage-size/232905 "2020-05-17T09:01:15Z")
Hi, I am new to Elasticsearch. I have noticed that Elasticsearch is very generous when it comes to consuming storage. This makes it a challenge when the storage requirements start growing and the type of storage become… --- ## [Volume claim templates cannot be modified](https://discuss.elastic.co/t/volume-claim-templates-cannot-be-modified/219493)
**Author:** [@NickL2](https://discuss.elastic.co/u/NickL2)\ **Replies:** 9\ **Last updated:** [May 17, 2020, 7:40am UTC](https://discuss.elastic.co/t/volume-claim-templates-cannot-be-modified/219493 "2020-05-17T07:40:58Z")
Hi there, I'm trying to upgrade my ECK cluster by bumping up the apiVersion from elasticsearch.k8s.elastic.co/v1beta1 to elasticsearch.k8s.elastic.co/v1 and bumping the version from 7.5.1 to 7.6.0. After applying the c… --- ## [Migrating from old elastic stack cluster to higher subscription of new Elastic stack cluster](https://discuss.elastic.co/t/migrating-from-old-elastic-stack-cluster-to-higher-subscription-of-new-elastic-stack-cluster/232877)
**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\ **Replies:** 1\ **Last updated:** [May 15, 2020, 7:35pm UTC](https://discuss.elastic.co/t/migrating-from-old-elastic-stack-cluster-to-higher-subscription-of-new-elastic-stack-cluster/232877 "2020-05-15T19:35:32Z")
Dear Team, I am tasked to do a migration from an existing Elastic Stack cluster to a new latest version of new Elastic stack cluster. I did went through the theoretical documents https://www.elastic.co/guide/en/cloud/cu… --- ## [Find which index has \_all fields](https://discuss.elastic.co/t/find-which-index-has-all-fields/232967)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 0\ **Last updated:** [May 17, 2020, 12:57am UTC](https://discuss.elastic.co/t/find-which-index-has-all-fields/232967 "2020-05-17T00:57:37Z")
I am preparing to move from version 6.8.8 to 7.x but I still have references to \_all fields in the depreciation logs. The problem is that I can't find any indexes with \_all in the mappings. Is there some way I can find… --- ## [Discovery.zen.minimum\_master\_nodes is set to -1 by default](https://discuss.elastic.co/t/discovery-zen-minimum-master-nodes-is-set-to-1-by-default/232950)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 1\ **Last updated:** [May 16, 2020, 10:12pm UTC](https://discuss.elastic.co/t/discovery-zen-minimum-master-nodes-is-set-to-1-by-default/232950 "2020-05-16T22:12:39Z")
We missed a very important configuration in our elasticsearch.yml discovery.zen.minimum\_master\_nodes and the default for it seems to be -1 according to \_cluster/settings What would be the right steps to update our… --- ## [Drill down to raw events from alert](https://discuss.elastic.co/t/drill-down-to-raw-events-from-alert/232955)
**Author:** [@d.shulinin](https://discuss.elastic.co/u/d.shulinin)\ **Replies:** 0\ **Last updated:** [May 16, 2020, 9:40pm UTC](https://discuss.elastic.co/t/drill-down-to-raw-events-from-alert/232955 "2020-05-16T21:40:08Z")
Hi folks. Wanted to share with you the way I created a sort-of drill down from an alert generated by a watcher to the raw events that had triggered the alert. First of all let me throw in some context. All the descri… --- ## [Getting time range from Kibana into painless scripted field](https://discuss.elastic.co/t/getting-time-range-from-kibana-into-painless-scripted-field/232954)
**Author:** [@angryninja](https://discuss.elastic.co/u/angryninja)\ **Replies:** 0\ **Last updated:** [May 16, 2020, 9:39pm UTC](https://discuss.elastic.co/t/getting-time-range-from-kibana-into-painless-scripted-field/232954 "2020-05-16T21:39:30Z")
Hi, I'm trying to visualize application uptime data which is not regular but is only pushed to elasticsearch when an incident occurs. For the visualization I need the total number of days/hours user selected on the Kiba… --- ## [Ingest node conditional and max script compilations](https://discuss.elastic.co/t/ingest-node-conditional-and-max-script-compilations/232953)
**Author:** [@tterranigma](https://discuss.elastic.co/u/tterranigma)\ **Replies:** 0\ **Last updated:** [May 16, 2020, 9:32pm UTC](https://discuss.elastic.co/t/ingest-node-conditional-and-max-script-compilations/232953 "2020-05-16T21:32:01Z")
I have an ingest node that contains: - date: field: "event.start" formats: - "ISO8601" if: "ctx.event?.start != null && ctx.agent.type == 'packetbeat'" ignore\_fa… --- ## [TSVB, Gauge visualization : only see data when \`Ignore Global Filter\` to \`Yes\`](https://discuss.elastic.co/t/tsvb-gauge-visualization-only-see-data-when-ignore-global-filter-to-yes/232949)
**Author:** [@saroja](https://discuss.elastic.co/u/saroja)\ **Replies:** 0\ **Last updated:** [May 16, 2020, 8:26pm UTC](https://discuss.elastic.co/t/tsvb-gauge-visualization-only-see-data-when-ignore-global-filter-to-yes/232949 "2020-05-16T20:26:00Z")
Hi, I'm using the visual builder to create a Gauge visualization using TSVB and am running into an issue in dashboard, where I only see data when I set Ignore Global Filter to Yes . When I am removing filter in contro… --- ## [See which of the nested objects matched the nested filter?](https://discuss.elastic.co/t/see-which-of-the-nested-objects-matched-the-nested-filter/232663)
**Author:** [@johnc1](https://discuss.elastic.co/u/johnc1)\ **Replies:** 1\ **Last updated:** [May 16, 2020, 6:57pm UTC](https://discuss.elastic.co/t/see-which-of-the-nested-objects-matched-the-nested-filter/232663 "2020-05-16T18:57:45Z")
When I use "nested" query, is it possible to somehow see which specific nested objects matched the query? E.g., suppose I have Streets nested under City, and I run a query: { "query": { "nested": { "path": "… --- ## [Multiline patterns](https://discuss.elastic.co/t/multiline-patterns/232632)
**Author:** [@Satyajeet\_Singh](https://discuss.elastic.co/u/Satyajeet_Singh)\ **Replies:** 4\ **Last updated:** [May 16, 2020, 6:42pm UTC](https://discuss.elastic.co/t/multiline-patterns/232632 "2020-05-16T18:42:05Z")
Hi Trying to create a config for logstash which can aggregate multiple lines with different pattern example loglines: 2020-05-14 13:43:05.222 SSL accepted cipher=ECDHE-RSA-AES128-SHA256 2020-05-14 13:43:05.222 Connect… --- ## [AWS ELBv2 extract latitude, longitude and requests subparts](https://discuss.elastic.co/t/aws-elbv2-extract-latitude-longitude-and-requests-subparts/232919)
**Author:** [@jensolsson.se](https://discuss.elastic.co/u/jensolsson.se)\ **Replies:** 1\ **Last updated:** [May 16, 2020, 6:25pm UTC](https://discuss.elastic.co/t/aws-elbv2-extract-latitude-longitude-and-requests-subparts/232919 "2020-05-16T18:25:56Z")
Hi I just for the first time set up kibana, elasticsearch and logstash to index logs from ELBv2 on AWS. It looks like this in the configuration and works quite well: input { file { path =\> "/home/jensolsson… --- ## [Silence deprecation log without restarting the cluster](https://discuss.elastic.co/t/silence-deprecation-log-without-restarting-the-cluster/232715)
**Author:** [@Khoa\_Le](https://discuss.elastic.co/u/Khoa_Le)\ **Replies:** 7\ **Last updated:** [May 16, 2020, 6:09pm UTC](https://discuss.elastic.co/t/silence-deprecation-log-without-restarting-the-cluster/232715 "2020-05-16T18:09:06Z")
Hi, We had a log4j settings that has set the logging level of org.elasticsearch.deprecation to ERROR that we set from the \_cluster/settings endpoint. Ever since we upgraded to 6.8.6, that settings stopped working and th… --- ## [Hosted Elastic: Basic answers that are hard to find](https://discuss.elastic.co/t/hosted-elastic-basic-answers-that-are-hard-to-find/232939)
**Author:** [@marc-at-qventus](https://discuss.elastic.co/u/marc-at-qventus)\ **Replies:** 0\ **Last updated:** [May 16, 2020, 5:27pm UTC](https://discuss.elastic.co/t/hosted-elastic-basic-answers-that-are-hard-to-find/232939 "2020-05-16T17:27:25Z")
Hi all -- I'm a new elastic user who is bootstrapping a moderate-to-large cluster using hosted Elastic. Several questions have come up for which it is difficult to find answers, given the noise from unrelated questions… --- ## [DateHistogramAggregation with Composite sub-aggregation](https://discuss.elastic.co/t/datehistogramaggregation-with-composite-sub-aggregation/232751)
**Author:** [@plm](https://discuss.elastic.co/u/plm)\ **Replies:** 4\ **Last updated:** [May 16, 2020, 4:57pm UTC](https://discuss.elastic.co/t/datehistogramaggregation-with-composite-sub-aggregation/232751 "2020-05-16T16:57:20Z")
Hi, I got the following exception when trying to execute a DateHistogramAggregation with a sub-aggregation of type CompositeAggregation. Any reason why this wouldn't be supported? Also would this be supported with a reg… --- ## [How to search for duplicates](https://discuss.elastic.co/t/how-to-search-for-duplicates/232203)
**Author:** [@howz](https://discuss.elastic.co/u/howz)\ **Replies:** 2\ **Last updated:** [May 16, 2020, 3:55pm UTC](https://discuss.elastic.co/t/how-to-search-for-duplicates/232203 "2020-05-16T15:55:50Z")
Trying to find duplicate MAC addresses in customer records, what am I doing wrong? GET /\_search { "query": { "match\_all": {} }, "aggs": { "device\_mac": { "terms": { "field": "device\_mac", … --- ## [ServiceConfigurationError: org.apache.spark.sql.sources.DataSourceRegister: Provider org.elasticsearch.spark.sql.DefaultSource15 could not be instantiated](https://discuss.elastic.co/t/serviceconfigurationerror-org-apache-spark-sql-sources-datasourceregister-provider-org-elasticsearch-spark-sql-defaultsource15-could-not-be-instantiated/232933)
**Author:** [@Adi\_Ti](https://discuss.elastic.co/u/Adi_Ti)\ **Replies:** 0\ **Last updated:** [May 16, 2020, 2:17pm UTC](https://discuss.elastic.co/t/serviceconfigurationerror-org-apache-spark-sql-sources-datasourceregister-provider-org-elasticsearch-spark-sql-defaultsource15-could-not-be-instantiated/232933 "2020-05-16T14:17:04Z")
I am trying to index using spark on Amazon EMR cluster. I am facing this issue on the cluster. pom.xml for Elastic org.elasticsearch elasticsearch 6.4.3 org.slf4j slf4j-log4j12 log4j log4j \ **Author:** [@oumy](https://discuss.elastic.co/u/oumy)\ **Replies:** 0\ **Last updated:** [May 16, 2020, 1:26pm UTC](https://discuss.elastic.co/t/soar-for-elk/232929 "2020-05-16T13:26:46Z") hello there, i came upon a solution called SOF-ELK and i was wondering if any of you have any ides if it's better than an ELK based SIEM? Thank you --- ## [Block/remove access of files](https://discuss.elastic.co/t/block-remove-access-of-files/232755)
**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\ **Replies:** 5\ **Last updated:** [May 16, 2020, 1:19pm UTC](https://discuss.elastic.co/t/block-remove-access-of-files/232755 "2020-05-16T13:19:37Z")
Hi Team, In dashboard, found that default files of kibana, elastic search are present in the box which are directly accessible from browser. https://server/kibana/README.txt https://server/kibana/LICENSE.txt https://… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1443) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1445)