# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1476

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1477

---

## [Snapshot restore fails on Ensuring snapshot repository exists](https://discuss.elastic.co/t/snapshot-restore-fails-on-ensuring-snapshot-repository-exists/230697)

<div class="topic-metadata">

**Author:** [@Joren\_Inghelbrecht](https://discuss.elastic.co/u/Joren_Inghelbrecht)\
**Replies:** 4\
**Last updated:** [May 1, 2020, 11:25am UTC](https://discuss.elastic.co/t/snapshot-restore-fails-on-ensuring-snapshot-repository-exists/230697 "2020-05-01T11:25:04Z")

</div>

I want to switch from a CPU optimized deployment (elastic cloud v7.6.1) to a new IO optimized deployment. I tried the following methods: create a new deployment based on a snapshot create a new deployment and then re…

---

## [Elasticsearch in different zone](https://discuss.elastic.co/t/elasticsearch-in-different-zone/230540)

<div class="topic-metadata">

**Author:** [@amanjain](https://discuss.elastic.co/u/amanjain)\
**Replies:** 3\
**Last updated:** [May 1, 2020, 9:39am UTC](https://discuss.elastic.co/t/elasticsearch-in-different-zone/230540 "2020-05-01T09:39:27Z")

</div>

Hello, I want to confirm about the performance of Elasticsearch if data is separated among different zone but same region. I have tried to install in different zone but the performance (latency) was very bad. Data sha…

---

## [Fundamentals of Securing Elasticsearch- reset environment](https://discuss.elastic.co/t/fundamentals-of-securing-elasticsearch-reset-environment/230658)

<div class="topic-metadata">

**Author:** [@x0rcist](https://discuss.elastic.co/u/x0rcist)\
**Replies:** 1\
**Last updated:** [May 1, 2020, 9:05am UTC](https://discuss.elastic.co/t/fundamentals-of-securing-elasticsearch-reset-environment/230658 "2020-05-01T09:05:28Z")

</div>

Hi I am trying Fundamentals of Securing Elasticsearch I have one issue: 1: Looks like I need reset machines to default, forgot the password I set for user (I tried restart machine but it didn't work). Advise how to re…

---

## [Recovering from missing state .si file](https://discuss.elastic.co/t/recovering-from-missing-state-si-file/229744)

<div class="topic-metadata">

**Author:** [@samuel](https://discuss.elastic.co/u/samuel)\
**Replies:** 7\
**Last updated:** [May 1, 2020, 8:53am UTC](https://discuss.elastic.co/t/recovering-from-missing-state-si-file/229744 "2020-05-01T08:53:12Z")

</div>

Elasticsearch service has been terminated and fails to restart. The error returned is Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticsearch.service"…

---

## [Handle null values in date range](https://discuss.elastic.co/t/handle-null-values-in-date-range/230678)

<div class="topic-metadata">

**Author:** [@maryam\_abdullah](https://discuss.elastic.co/u/maryam_abdullah)\
**Replies:** 0\
**Last updated:** [May 1, 2020, 8:43am UTC](https://discuss.elastic.co/t/handle-null-values-in-date-range/230678 "2020-05-01T08:43:06Z")

</div>

Hello, I'm using elasticseach .net, I was wondering is it possible to handle null values in date range? .Query(q =\> q .FunctionScore(fs =\> fs.Query(qy =\> qy .Bool(b =\>…

---

## [An error in calculating the scoring ball?](https://discuss.elastic.co/t/an-error-in-calculating-the-scoring-ball/230673)

<div class="topic-metadata">

**Author:** [@iva3682](https://discuss.elastic.co/u/iva3682)\
**Replies:** 0\
**Last updated:** [May 1, 2020, 7:37am UTC](https://discuss.elastic.co/t/an-error-in-calculating-the-scoring-ball/230673 "2020-05-01T07:37:49Z")

</div>

Good afternoon! I can’t understand why this is happening? The example in the attachment. Expect item with \["CategoryName": "Бытовая техника / Встраиваемая техника / Микроволновые печи", "FullCategoryName": ""\] will b…

---

## [Api key name as additional field in apm-server data](https://discuss.elastic.co/t/api-key-name-as-additional-field-in-apm-server-data/230566)

<div class="topic-metadata">

**Author:** [@iorfix](https://discuss.elastic.co/u/iorfix)\
**Replies:** 2\
**Last updated:** [May 1, 2020, 7:17am UTC](https://discuss.elastic.co/t/api-key-name-as-additional-field-in-apm-server-data/230566 "2020-05-01T07:17:36Z")

</div>

Hi there, I created a couple of API-key on apmserver and tested it with a GO client. I have 2 comments: I used the Credentials field and not the API Key field. This is not a problem, but it is not clear in the documen…

---

## [Aggregation Wildly Incorrect](https://discuss.elastic.co/t/aggregation-wildly-incorrect/230349)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 3\
**Last updated:** [May 1, 2020, 6:29am UTC](https://discuss.elastic.co/t/aggregation-wildly-incorrect/230349 "2020-05-01T06:29:26Z")

</div>

We are seeing Kibana 7.6.1 (ES 7.6.2) return wildly incorrect numbers when calculating the average and maximum of a value. The data in question is 3 values for a field kpi1: timestamp kpi1 2020-04-29T09:…

---

## [Save field parameter is not valid](https://discuss.elastic.co/t/save-field-parameter-is-not-valid/227849)

<div class="topic-metadata">

**Author:** [@vijay\_kaali](https://discuss.elastic.co/u/vijay_kaali)\
**Replies:** 2\
**Last updated:** [May 1, 2020, 6:24am UTC](https://discuss.elastic.co/t/save-field-parameter-is-not-valid/227849 "2020-05-01T06:24:57Z")

</div>

I am using elk 6.3 i have downloaded dashboard to test environment and i get save field parameter is not valid throws . I checked the individual visualization and actual field name is not listed. issue is in index…

---

## [Getting max\_open\_scroll\_context issue](https://discuss.elastic.co/t/getting-max-open-scroll-context-issue/230667)

<div class="topic-metadata">

**Author:** [@prashanthkumar](https://discuss.elastic.co/u/prashanthkumar)\
**Replies:** 0\
**Last updated:** [May 1, 2020, 6:14am UTC](https://discuss.elastic.co/t/getting-max-open-scroll-context-issue/230667 "2020-05-01T06:14:07Z")

</div>

Hi All, We are using elastic search 7.4.2 and create API of ESActionFactory, I have increased max\_open\_scroll\_context up to 10,000, But still we getting issue create too many scroll contexts issue in our application, P…

---

## [How can i add new index pattern?](https://discuss.elastic.co/t/how-can-i-add-new-index-pattern/230557)

<div class="topic-metadata">

**Author:** [@janmichae.reyes4](https://discuss.elastic.co/u/janmichae.reyes4)\
**Replies:** 2\
**Last updated:** [May 1, 2020, 6:01am UTC](https://discuss.elastic.co/t/how-can-i-add-new-index-pattern/230557 "2020-05-01T06:01:56Z")

</div>

how can i add new index pattern while i already have an existing index pattern? Thank you,

---

## [Logstash Combine two fields of different documents based on another field (without an ID)](https://discuss.elastic.co/t/logstash-combine-two-fields-of-different-documents-based-on-another-field-without-an-id/230461)

<div class="topic-metadata">

**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\
**Replies:** 2\
**Last updated:** [May 1, 2020, 5:35am UTC](https://discuss.elastic.co/t/logstash-combine-two-fields-of-different-documents-based-on-another-field-without-an-id/230461 "2020-05-01T05:35:12Z")

</div>

I am using the latest version of logstash(7.6.2). I am trying to add two fields based on values in an another field. Find below my sample data with fields TimeStamp, Value and Event. Also, find below my desired output. S…

---

## [Stream Data from Elastic Search to CSV](https://discuss.elastic.co/t/stream-data-from-elastic-search-to-csv/230664)

<div class="topic-metadata">

**Author:** [@rsuper\_6616](https://discuss.elastic.co/u/rsuper_6616)\
**Replies:** 0\
**Last updated:** [May 1, 2020, 5:01am UTC](https://discuss.elastic.co/t/stream-data-from-elastic-search-to-csv/230664 "2020-05-01T05:01:47Z")

</div>

I am trying to find a way to stream data from Elastic Search to csv using Logstash.

---

## [Skip the document using a script processor](https://discuss.elastic.co/t/skip-the-document-using-a-script-processor/230608)

<div class="topic-metadata">

**Author:** [@bindu](https://discuss.elastic.co/u/bindu)\
**Replies:** 2\
**Last updated:** [May 1, 2020, 2:51am UTC](https://discuss.elastic.co/t/skip-the-document-using-a-script-processor/230608 "2020-05-01T02:51:37Z")

</div>

My use-case : Before the document is indexed, I would like to Skip the documents with conditions using a script processor (defined in a pipeline). When I try to create a index using the pipeline with the script processor…

---

## [Getting \[esaggs\] \> "field" is a required parameter when pipelining with logstash](https://discuss.elastic.co/t/getting-esaggs-field-is-a-required-parameter-when-pipelining-with-logstash/230652)

<div class="topic-metadata">

**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\
**Replies:** 0\
**Last updated:** [May 1, 2020, 1:04am UTC](https://discuss.elastic.co/t/getting-esaggs-field-is-a-required-parameter-when-pipelining-with-logstash/230652 "2020-05-01T01:04:52Z")

</div>

Output without plugin, with logstash root@ubuntu-s-2vcpu-4gb-blr1-01:~# curl localhost:9200/\_cat/indices yellow open filebeat-2020.04.30 qKQlYmodS4uEEjkPIA4r4w 1 1 8868 0 4.3mb 4.3mb green open .kibana\_task\_m…

---

## [SSO / Azure AD setup](https://discuss.elastic.co/t/sso-azure-ad-setup/230639)

<div class="topic-metadata">

**Author:** [@isaac.antebi](https://discuss.elastic.co/u/isaac.antebi)\
**Replies:** 2\
**Last updated:** [May 1, 2020, 12:49am UTC](https://discuss.elastic.co/t/sso-azure-ad-setup/230639 "2020-05-01T00:49:02Z")

</div>

Having issues getting SAML based SSO setup for Azure AD. Not sure where to get the Identifier / Entity ID, Reply URL etc.. from

---

## [How to create time variable in input plugin](https://discuss.elastic.co/t/how-to-create-time-variable-in-input-plugin/230647)

<div class="topic-metadata">

**Author:** [@alxsss](https://discuss.elastic.co/u/alxsss)\
**Replies:** 1\
**Last updated:** [May 1, 2020, 12:36am UTC](https://discuss.elastic.co/t/how-to-create-time-variable-in-input-plugin/230647 "2020-05-01T00:36:37Z")

</div>

Hello, I use http\_poller plugin as an input plugin. I need to pass current hour and previous hour as parameter values to its url. I wondered how this could be done, since did not find any documentation on this.

---

## [Remove pre-filter phase in search](https://discuss.elastic.co/t/remove-pre-filter-phase-in-search/230580)

<div class="topic-metadata">

**Author:** [@zhangchao](https://discuss.elastic.co/u/zhangchao)\
**Replies:** 2\
**Last updated:** [April 30, 2020, 11:26pm UTC](https://discuss.elastic.co/t/remove-pre-filter-phase-in-search/230580 "2020-04-30T23:26:34Z")

</div>

from this issue Thanks for @jimczi ,Please correct me if there is any mistake.i think it only reduce the search thread pool usage doesn't seem very helpful，Coordinate node will limit maximum number of concurrent shard…

---

## [APM: joining spans and transactions](https://discuss.elastic.co/t/apm-joining-spans-and-transactions/230645)

<div class="topic-metadata">

**Author:** [@Emanuel\_Velzi](https://discuss.elastic.co/u/Emanuel_Velzi)\
**Replies:** 0\
**Last updated:** [April 30, 2020, 11:05pm UTC](https://discuss.elastic.co/t/apm-joining-spans-and-transactions/230645 "2020-04-30T23:05:46Z")

</div>

Hi! I am using Elastic APM and I need to know how much time spent a transaction accessing to my MongoDB. For that I'm trying to make a table visualisation on Kibana joining data about transactions and spans but I have …

---

## [How to increase pipeline workers when running logstash on kubernetes](https://discuss.elastic.co/t/how-to-increase-pipeline-workers-when-running-logstash-on-kubernetes/230643)

<div class="topic-metadata">

**Author:** [@user2416](https://discuss.elastic.co/u/user2416)\
**Replies:** 0\
**Last updated:** [April 30, 2020, 10:03pm UTC](https://discuss.elastic.co/t/how-to-increase-pipeline-workers-when-running-logstash-on-kubernetes/230643 "2020-04-30T22:03:46Z")

</div>

Hi, we are running logstash on kubernetes using stable helm chart. How can i increase pipeline.workers ? is it possible to set in values.yaml.

---

## [Autocomplete for ecommerce](https://discuss.elastic.co/t/autocomplete-for-ecommerce/230641)

<div class="topic-metadata">

**Author:** [@logipad\_Info\_Solutio](https://discuss.elastic.co/u/logipad_Info_Solutio)\
**Replies:** 0\
**Last updated:** [April 30, 2020, 9:45pm UTC](https://discuss.elastic.co/t/autocomplete-for-ecommerce/230641 "2020-04-30T21:45:51Z")

</div>

hi, I am trying implement autosuggest for an ecomm website using elastic. I believe, alongwith returning product links(document matches), the autocomplete must also return most occuring phrases/shingles. Example, if we …

---

## [Can Logstash manage Beats ILM and Templates?](https://discuss.elastic.co/t/can-logstash-manage-beats-ilm-and-templates/230447)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 1\
**Last updated:** [April 30, 2020, 9:34pm UTC](https://discuss.elastic.co/t/can-logstash-manage-beats-ilm-and-templates/230447 "2020-04-30T21:34:59Z")

</div>

For various reasons I can't have my Beats talking directly to Elasticsearch on all the networks I will be monitoring. So I need to use Logstash as a proxy. Beats will ship to Logstash, Logstash will ship to Elasticsearch…

---

## [Which visualization creates this](https://discuss.elastic.co/t/which-visualization-creates-this/230609)

<div class="topic-metadata">

**Author:** [@edvrfn](https://discuss.elastic.co/u/edvrfn)\
**Replies:** 2\
**Last updated:** [April 30, 2020, 9:34pm UTC](https://discuss.elastic.co/t/which-visualization-creates-this/230609 "2020-04-30T21:34:38Z")

</div>

Which visualization creates both bar chart and bubbles.

---

## [Nested Aggregation with Filter](https://discuss.elastic.co/t/nested-aggregation-with-filter/230636)

<div class="topic-metadata">

**Author:** [@relwell](https://discuss.elastic.co/u/relwell)\
**Replies:** 0\
**Last updated:** [April 30, 2020, 9:22pm UTC](https://discuss.elastic.co/t/nested-aggregation-with-filter/230636 "2020-04-30T21:22:44Z")

</div>

I'm trying to get the counts for a given aggregation filtered against a different query. Here's an example document: { "\_index": "studies\_development\_20200403181856384", "\_type": "study", "\_id":…

---

## [Unable to start Elasticsearch 7.6.2 as a service \[RHEL 7.5\]](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-6-2-as-a-service-rhel-7-5/230633)

<div class="topic-metadata">

**Author:** [@rafaelgomesdm](https://discuss.elastic.co/u/rafaelgomesdm)\
**Replies:** 1\
**Last updated:** [April 30, 2020, 9:16pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-6-2-as-a-service-rhel-7-5/230633 "2020-04-30T21:16:40Z")

</div>

Hello fellas I dowloaded and installed the RPM version - and GPG-Key - manually, following the steps given by elastic.co... installation file: "elasticsearch-7.6.2-x86\_64.rpm" The server that I'm working on have stric…

---

## [Received ban for the parent (Ban messages and searches failing)](https://discuss.elastic.co/t/received-ban-for-the-parent-ban-messages-and-searches-failing/230632)

<div class="topic-metadata">

**Author:** [@rpialum](https://discuss.elastic.co/u/rpialum)\
**Replies:** 0\
**Last updated:** [April 30, 2020, 9:05pm UTC](https://discuss.elastic.co/t/received-ban-for-the-parent-ban-messages-and-searches-failing/230632 "2020-04-30T21:05:59Z")

</div>

We're experiencing the following DEBUG & WARN log messages and experiencing an issue where sporadically our searches appear to not be returning when these messages are seen. They all seem to begin with the "Received ban…

---

## [Only few hit content files are showing the correct results - custom analyzer](https://discuss.elastic.co/t/only-few-hit-content-files-are-showing-the-correct-results-custom-analyzer/229330)

<div class="topic-metadata">

**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\
**Replies:** 8\
**Last updated:** [April 30, 2020, 8:58pm UTC](https://discuss.elastic.co/t/only-few-hit-content-files-are-showing-the-correct-results-custom-analyzer/229330 "2020-04-30T20:58:10Z")

</div>

Hi, I have created a custom analyzer to recognize special characters in my files such as @,-, /, etc Here is my custom analyzer when i am creating the index: PUT /s3/ { "settings": { "index": { "number\_…

---

## [Files index being cleared](https://discuss.elastic.co/t/files-index-being-cleared/230625)

<div class="topic-metadata">

**Author:** [@StrifeX](https://discuss.elastic.co/u/StrifeX)\
**Replies:** 1\
**Last updated:** [April 30, 2020, 8:23pm UTC](https://discuss.elastic.co/t/files-index-being-cleared/230625 "2020-04-30T20:23:32Z")

</div>

I'm not sure if this is the appropriate place to ask this question, but any assistance would be greatly appreciated. Our stack has is running fine (aside from a storage issue every so often). The issue I'm running into i…

---

## [How exactly do I shutdown, then restart the cluster?](https://discuss.elastic.co/t/how-exactly-do-i-shutdown-then-restart-the-cluster/230622)

<div class="topic-metadata">

**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\
**Replies:** 8\
**Last updated:** [April 30, 2020, 7:48pm UTC](https://discuss.elastic.co/t/how-exactly-do-i-shutdown-then-restart-the-cluster/230622 "2020-04-30T19:48:14Z")

</div>

I have a cluster of 3 nodes. I need to change a setting in elasticsearch.yml and then restart the cluster. I am a bit confused on the procedure. Here is what I have so far. Is this correct? Make changes to /etc/elast…

---

## [Can i add field with the contents of current year?](https://discuss.elastic.co/t/can-i-add-field-with-the-contents-of-current-year/230439)

<div class="topic-metadata">

**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\
**Replies:** 3\
**Last updated:** [April 30, 2020, 7:22pm UTC](https://discuss.elastic.co/t/can-i-add-field-with-the-contents-of-current-year/230439 "2020-04-30T19:22:23Z")

</div>

Hi, I've seen the notation in the output part of logstash to put %{+YYYY.MM.dd} to name the index, for instance: output { elasticsearch { hosts =\> \["host1:9200"\] index =\> "prefix-%{+YYYY.MM.dd}" user =\> e…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1475)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1477)
