# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1458 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1459 --- ## [Tags are not seen in indexer](https://discuss.elastic.co/t/tags-are-not-seen-in-indexer/231977)
**Author:** [@Djamox](https://discuss.elastic.co/u/Djamox)\ **Replies:** 1\ **Last updated:** [May 11, 2020, 12:25pm UTC](https://discuss.elastic.co/t/tags-are-not-seen-in-indexer/231977 "2020-05-11T12:25:38Z")
Hello, I have a configuration like this : Logs -\> Logstash Broker -\> Kafka -\> Logstash Indexer -\> Elasticsearch In the borker, I add a tag "waf" to identify the log source. In the indexer, I use this condition in the… --- ## [Invoke Logstash pipeline from rest endpoint](https://discuss.elastic.co/t/invoke-logstash-pipeline-from-rest-endpoint/232000)
**Author:** [@aviman](https://discuss.elastic.co/u/aviman)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 12:03pm UTC](https://discuss.elastic.co/t/invoke-logstash-pipeline-from-rest-endpoint/232000 "2020-05-11T12:03:41Z")
Hi, Is there any way to inovke/execute logstash pipeline using rest api. Thanks & Regards, Avijit Mandal --- ## [Not able to login to kibana with SAML IdP(Siteminder)](https://discuss.elastic.co/t/not-able-to-login-to-kibana-with-saml-idp-siteminder/231336)
**Author:** [@bansalhp](https://discuss.elastic.co/u/bansalhp)\ **Replies:** 13\ **Last updated:** [May 11, 2020, 12:00pm UTC](https://discuss.elastic.co/t/not-able-to-login-to-kibana-with-saml-idp-siteminder/231336 "2020-05-11T12:00:56Z")
Hi, We are trying to authenticate Elasticsearch with SAML realm using IpD(Siteminder) on a development elasticsearch setup. https://www.elastic.co/guide/en/elasticsearch/reference/master/saml-guide-authentication.html#… --- ## [Sending authorization header to http input plugin](https://discuss.elastic.co/t/sending-authorization-header-to-http-input-plugin/231999)
**Author:** [@mostafaelsayed](https://discuss.elastic.co/u/mostafaelsayed)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 11:54am UTC](https://discuss.elastic.co/t/sending-authorization-header-to-http-input-plugin/231999 "2020-05-11T11:54:22Z")
I am using http input plugin to send an http request from postman with "Authorization" header but apparently logstash is not reading this header name when i try to display headers field, "Authorization" header is not di… --- ## [Avoiding unneccessary datashuffling during datanode downtime](https://discuss.elastic.co/t/avoiding-unneccessary-datashuffling-during-datanode-downtime/231996)
**Author:** [@blacksmith](https://discuss.elastic.co/u/blacksmith)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 11:47am UTC](https://discuss.elastic.co/t/avoiding-unneccessary-datashuffling-during-datanode-downtime/231996 "2020-05-11T11:47:00Z")
Hey! Running ES 5.6.16 on a three-node cluster (all master-eligible, two data-nodes). Will soon perform maintenance (one node at a time) which will take 2 hours tops per node. When one of the data-nodes will be down, I … --- ## [Terms list might be incomplete because the request is taking to long](https://discuss.elastic.co/t/terms-list-might-be-incomplete-because-the-request-is-taking-to-long/230768)
**Author:** [@Fedi\_Ben\_Messaoud](https://discuss.elastic.co/u/Fedi_Ben_Messaoud)\ **Replies:** 18\ **Last updated:** [May 11, 2020, 11:33am UTC](https://discuss.elastic.co/t/terms-list-might-be-incomplete-because-the-request-is-taking-to-long/230768 "2020-05-11T11:33:40Z")
Hello guys, Can you help me to fix this error terms list might be incomplete because the request is taking to long. Adjust the autocomplete settings in kibana.yml for complete results. Im using kibana with 16 RAM to… --- ## [ResourceAlreadyExists Exception After Deleting Index](https://discuss.elastic.co/t/resourcealreadyexists-exception-after-deleting-index/231953)
**Author:** [@ddavid](https://discuss.elastic.co/u/ddavid)\ **Replies:** 3\ **Last updated:** [May 11, 2020, 11:31am UTC](https://discuss.elastic.co/t/resourcealreadyexists-exception-after-deleting-index/231953 "2020-05-11T11:31:06Z")
Background I am using python's behave library to write feature tests for my code in linux environment. Some features have data that is stored in elastic search (no clusters, 5 shards, 1 replica, version 6.4.0). For this… --- ## [Is it possible to make a filter mandatory to choose in controls visualization?](https://discuss.elastic.co/t/is-it-possible-to-make-a-filter-mandatory-to-choose-in-controls-visualization/231527)
**Author:** [@Jaishree\_Pal](https://discuss.elastic.co/u/Jaishree_Pal)\ **Replies:** 2\ **Last updated:** [May 11, 2020, 11:30am UTC](https://discuss.elastic.co/t/is-it-possible-to-make-a-filter-mandatory-to-choose-in-controls-visualization/231527 "2020-05-11T11:30:38Z")
I was trying to add some controls to my visualizations but I faced an issue that results can also be loaded whenever the user has not chosen any field. In my case, if that happens, my dashboard will face errors because o… --- ## [ElasticSearch pod restart very slowly](https://discuss.elastic.co/t/elasticsearch-pod-restart-very-slowly/231993)
**Author:** [@shyhong](https://discuss.elastic.co/u/shyhong)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 11:19am UTC](https://discuss.elastic.co/t/elasticsearch-pod-restart-very-slowly/231993 "2020-05-11T11:19:28Z")
Hi all, recently I encountered a restart issue of Elasticsearch. I have a cluster with 3 nodes, last time I changed some configurations and the pod get restarted, however the pod state took almost 5 hours to become 1/1. … --- ## [Problème de mémoire](https://discuss.elastic.co/t/probleme-de-memoire/231948)
**Author:** [@jof300](https://discuss.elastic.co/u/jof300)\ **Replies:** 5\ **Last updated:** [May 11, 2020, 11:11am UTC](https://discuss.elastic.co/t/probleme-de-memoire/231948 "2020-05-11T11:11:52Z")
Bonjour, J'ai un cluster de 7 nodes (3 master , 4 data) . Les master sont des vm et les data des machines physiques (48 cpu, 64Go ram et 24To disque par machine) On ramene un peu de tout dans le cluster (logs applicati… --- ## [ElasticSearch and RestHighLevelClient and fetching more than 10000 items](https://discuss.elastic.co/t/elasticsearch-and-resthighlevelclient-and-fetching-more-than-10000-items/227903)
**Author:** [@oreo](https://discuss.elastic.co/u/oreo)\ **Replies:** 5\ **Last updated:** [May 11, 2020, 11:08am UTC](https://discuss.elastic.co/t/elasticsearch-and-resthighlevelclient-and-fetching-more-than-10000-items/227903 "2020-05-11T11:08:32Z")
I'm implementing a REST API using Java RestHighLevelClient. The user specifies the pageNumber and the pageSize of the requested data through the REST parameters. By default, because of the "max\_result\_window" limitation… --- ## [Mapped ip with type "ip" but getting mapping parsing error](https://discuss.elastic.co/t/mapped-ip-with-type-ip-but-getting-mapping-parsing-error/231981)
**Author:** [@IanCap](https://discuss.elastic.co/u/IanCap)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 10:38am UTC](https://discuss.elastic.co/t/mapped-ip-with-type-ip-but-getting-mapping-parsing-error/231981 "2020-05-11T10:38:07Z")
Hi, I'm currently trying to fix the following error : index \[log-2020-05-04\], type \[\_doc\], id \[someid\], message \[ElasticsearchException\[Elasticsearch exception \[type=mapper\_parsing\_exception, reason=object mapping for … --- ## [Create new custom aggregator](https://discuss.elastic.co/t/create-new-custom-aggregator/231979)
**Author:** [@Damiano](https://discuss.elastic.co/u/Damiano)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 10:25am UTC](https://discuss.elastic.co/t/create-new-custom-aggregator/231979 "2020-05-11T10:25:42Z")
Hello, I need to create a custom metric aggregator that has its custom logic, like MAX, MIN, AVG etc. Is there an example to understand how to create it in Java? Thank you! --- ## [Kibana visual shows wrong value](https://discuss.elastic.co/t/kibana-visual-shows-wrong-value/231550)
**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\ **Replies:** 4\ **Last updated:** [May 11, 2020, 10:15am UTC](https://discuss.elastic.co/t/kibana-visual-shows-wrong-value/231550 "2020-05-11T10:15:06Z")
Hi, I've made a stacked bar chart as shown below. When I hovered on the particular stack it has shown the count is 8. But when I clicked on the same stack, it has shown the count is 10. See below the reference image. … --- ## [ASA Grok Failure ASA-4-113019](https://discuss.elastic.co/t/asa-grok-failure-asa-4-113019/231976)
**Author:** [@pankaj](https://discuss.elastic.co/u/pankaj)\ **Replies:** 1\ **Last updated:** [May 11, 2020, 10:12am UTC](https://discuss.elastic.co/t/asa-grok-failure-asa-4-113019/231976 "2020-05-11T10:12:45Z")
I am trying to parse and index the cisco asa logs for particular syslog messages . The grok debuger showing the code okay but I dont see the logs indexed in elasticsearch Regards Pankaj --- ## [\[Node.js\] Elasticsearch search latency degrades over time (within hours)](https://discuss.elastic.co/t/node-js-elasticsearch-search-latency-degrades-over-time-within-hours/230948)
**Author:** [@morten\_bo](https://discuss.elastic.co/u/morten_bo)\ **Replies:** 19\ **Last updated:** [May 11, 2020, 9:44am UTC](https://discuss.elastic.co/t/node-js-elasticsearch-search-latency-degrades-over-time-within-hours/230948 "2020-05-11T09:44:30Z")
Problem Elasticsearch search latency degrades over time (from ~2 ms to fluctuations to 50-100 ms until we get circuit\_breaking\_exceptions. Current Fix When we restart our Node.js process (runs within Kubernetes on AWS… --- ## [Clientset for Client-go](https://discuss.elastic.co/t/clientset-for-client-go/231795)
**Author:** [@ReeSilva](https://discuss.elastic.co/u/ReeSilva)\ **Replies:** 1\ **Last updated:** [May 11, 2020, 9:37am UTC](https://discuss.elastic.co/t/clientset-for-client-go/231795 "2020-05-11T09:37:35Z")
Hey guys, I'm trying to write a Terraform Provider to handle ECK resources (@ begin, ES and Kibana). Does the operator implements clientset to create a client using Kubernetes client-go? Or I have to create it myself usi… --- ## [Kibana - Average based on two fields value](https://discuss.elastic.co/t/kibana-average-based-on-two-fields-value/231766)
**Author:** [@JoseLuisEzquerro](https://discuss.elastic.co/u/JoseLuisEzquerro)\ **Replies:** 3\ **Last updated:** [May 11, 2020, 9:26am UTC](https://discuss.elastic.co/t/kibana-average-based-on-two-fields-value/231766 "2020-05-11T09:26:47Z")
Hello all, I'm using Kibana 6.8.2, and I have an index with next parameters \* message\_total\_size \* message\_total\_count \* date \* country I want to make a Vertical Bar visualization to show the average message size per … --- ## [Grok filter for different type of log lines](https://discuss.elastic.co/t/grok-filter-for-different-type-of-log-lines/231933)
**Author:** [@falconpurple](https://discuss.elastic.co/u/falconpurple)\ **Replies:** 3\ **Last updated:** [May 11, 2020, 9:05am UTC](https://discuss.elastic.co/t/grok-filter-for-different-type-of-log-lines/231933 "2020-05-11T09:05:01Z")
Hi, I am shipping data from logstash to Elasticsearch. Can you please help me to write the grok filter . I have attached a part of the log files. \[2018-06-17 20:12:59,754|INFO |https-jkilhhs|com.myfirst.service.ai.f… --- ## [Trying to make search like \`procter&gamble\` and \`procter & gamble\` work the same way](https://discuss.elastic.co/t/trying-to-make-search-like-procter-gamble-and-procter-gamble-work-the-same-way/231961)
**Author:** [@AHeavyObject](https://discuss.elastic.co/u/AHeavyObject)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 9:01am UTC](https://discuss.elastic.co/t/trying-to-make-search-like-procter-gamble-and-procter-gamble-work-the-same-way/231961 "2020-05-11T09:01:50Z")
My task is: Make procter&gamble and procter & gamble produce the same results including score Make it universal, not via synonyms, as it can be any other Somehow&Somewhat Highlight procter&gamble or procter & gamble,… --- ## [Difference in total hits and received documents count](https://discuss.elastic.co/t/difference-in-total-hits-and-received-documents-count/231957)
**Author:** [@sarveshvish97](https://discuss.elastic.co/u/sarveshvish97)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 8:41am UTC](https://discuss.elastic.co/t/difference-in-total-hits-and-received-documents-count/231957 "2020-05-11T08:41:24Z")
Hi, i am using Elasticsearch 7.6.0, i'm using python to pull data from Elasticsearch so far i used scroll function and search\_after query to paginate data but there's difference in total hits and total document i rec… --- ## [How is managed multiple synonyms?](https://discuss.elastic.co/t/how-is-managed-multiple-synonyms/231956)
**Author:** [@granier](https://discuss.elastic.co/u/granier)\ **Replies:** 0\ **Last updated:** [May 11, 2020, 8:33am UTC](https://discuss.elastic.co/t/how-is-managed-multiple-synonyms/231956 "2020-05-11T08:33:48Z")
Hi, iI understood that a following entry can be set in a synonym file : word1, word2 =\> word1, word2 Like that a search on word1 or word2 returns the same set of documents. I do not understand how such synonyms are … --- ## [Refer and extract unknown name attribute](https://discuss.elastic.co/t/refer-and-extract-unknown-name-attribute/231553)
**Author:** [@astrodi](https://discuss.elastic.co/u/astrodi)\ **Replies:** 2\ **Last updated:** [May 11, 2020, 8:31am UTC](https://discuss.elastic.co/t/refer-and-extract-unknown-name-attribute/231553 "2020-05-11T08:31:11Z")
Hi there, I would like to extract the unknown (index) name from JSON in logstash. Structure of input is: ... "indices": { "dna\_master\_v1": { ... } } I want to extra… --- ## [This builder doesn't allow terms that are larger than 1,000 characters](https://discuss.elastic.co/t/this-builder-doesnt-allow-terms-that-are-larger-than-1-000-characters/228529)
**Author:** [@lmourer](https://discuss.elastic.co/u/lmourer)\ **Replies:** 6\ **Last updated:** [May 11, 2020, 8:13am UTC](https://discuss.elastic.co/t/this-builder-doesnt-allow-terms-that-are-larger-than-1-000-characters/228529 "2020-05-11T08:13:33Z")
Hello, Kibana 7.6.2 Elasticsearch 7.6.2 Ubuntu 18.04 When i want to filter a keyword in discover in kibana, i have this error : { "took": 10, "timed\_out": false, "\_shards": { "total": 14, "successful… --- ## [Keep get OOM when reindex](https://discuss.elastic.co/t/keep-get-oom-when-reindex/231741)
**Author:** [@taoliu2019](https://discuss.elastic.co/u/taoliu2019)\ **Replies:** 2\ **Last updated:** [May 11, 2020, 8:17am UTC](https://discuss.elastic.co/t/keep-get-oom-when-reindex/231741 "2020-05-11T08:17:27Z")
Hi, I'm keeping getting OOM alert when try to reindex two index. to avoid make reindex impact, I already set the requests\_per\_second=5. Currently, we have a 5 node cluster. each node with 16G memory and 8 Core. Here is… --- ## [What does "now/d" mean in elasticsearch](https://discuss.elastic.co/t/what-does-now-d-mean-in-elasticsearch/231928)
**Author:** [@rishabh\_jain](https://discuss.elastic.co/u/rishabh_jain)\ **Replies:** 1\ **Last updated:** [May 11, 2020, 7:42am UTC](https://discuss.elastic.co/t/what-does-now-d-mean-in-elasticsearch/231928 "2020-05-11T07:42:41Z")
GET test\_index/\_search { "query": { "bool": { "must": \[ { "range": { "timestamp": { "gte": "now-1d/d", "lte": "now" } } } \] } } } I'am now able to understand what does query means.What does now-1d/d mean… --- ## [Disabling circuit breakers in ES7](https://discuss.elastic.co/t/disabling-circuit-breakers-in-es7/231770)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 1\ **Last updated:** [May 11, 2020, 6:32am UTC](https://discuss.elastic.co/t/disabling-circuit-breakers-in-es7/231770 "2020-05-11T06:32:54Z")
What's the right way to disable circuit breakers in elasticsearch 7? indices.breaker.type be set to none or indices.breaker.total.use\_real\_memory be set to false? --- ## [Need help to exlcude messages which are not having kv pair](https://discuss.elastic.co/t/need-help-to-exlcude-messages-which-are-not-having-kv-pair/231894)
**Author:** [@Nithani25](https://discuss.elastic.co/u/Nithani25)\ **Replies:** 2\ **Last updated:** [May 11, 2020, 6:15am UTC](https://discuss.elastic.co/t/need-help-to-exlcude-messages-which-are-not-having-kv-pair/231894 "2020-05-11T06:15:10Z")
HI Team, I have split last field of my message has greedydata Example Message: %{ts:timestampe} %{loglevel} %{DATA} %{GREEDYDATA:Logmessage} My "Logmessage" here at times contains some kv pair in them and i am able t… --- ## [Multiple terms and multiple filter in single query](https://discuss.elastic.co/t/multiple-terms-and-multiple-filter-in-single-query/231926)
**Author:** [@m.fayazahammed](https://discuss.elastic.co/u/m.fayazahammed)\ **Replies:** 1\ **Last updated:** [May 11, 2020, 5:34am UTC](https://discuss.elastic.co/t/multiple-terms-and-multiple-filter-in-single-query/231926 "2020-05-11T05:34:58Z")
Hi Team, I have basically below documents with multiple collections. {"id" : 1, "stores" :\[1,2,3,4,5\], "items":\[ 55,44,334,155\]} {"id" : 2, "stores" :\[1\], "items":\[ 55\]} {"id" : 3, "stores" :\[1,5\], "items":\[ 155\]} {… --- ## [Cluster goes yellow abruptly](https://discuss.elastic.co/t/cluster-goes-yellow-abruptly/231669)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 2\ **Last updated:** [May 11, 2020, 5:20am UTC](https://discuss.elastic.co/t/cluster-goes-yellow-abruptly/231669 "2020-05-11T05:20:11Z")
We're using elasticsearch 7.2 in production and lately we've been observing our cluster going yellow quite often even though none of the nodes left the cluster! Whenever the cluster have gone yellow, we've seen a sudden… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1457) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1459)