# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1479 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1480 --- ## [RestHighLevel Client : Failed to connect to localhost port 9200: Connection refused](https://discuss.elastic.co/t/resthighlevel-client-failed-to-connect-to-localhost-port-9200-connection-refused/230310)
**Author:** [@Amit\_Porwal](https://discuss.elastic.co/u/Amit_Porwal)\ **Replies:** 4\ **Last updated:** [April 30, 2020, 6:58am UTC](https://discuss.elastic.co/t/resthighlevel-client-failed-to-connect-to-localhost-port-9200-connection-refused/230310 "2020-04-30T06:58:00Z")
Learning ELK stack.I had spent ample of time on it, haven't find any solution yet.Any help would be greatly appreciated. I just referred to this article to create this basic demo. https://www.journaldev.com/18148/spri… --- ## [Error when trying to add a snapshot policy on ELK ECE](https://discuss.elastic.co/t/error-when-trying-to-add-a-snapshot-policy-on-elk-ece/230463)
**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 5:35am UTC](https://discuss.elastic.co/t/error-when-trying-to-add-a-snapshot-policy-on-elk-ece/230463 "2020-04-30T05:35:11Z")
Hello! I've encountered this error when I tried to add a snapshot policy to my ELK cluster (on ECE): { "error" : { "root\_cause" : \[ { "type" : "invalid\_index\_name\_exception", "reason" : "Inv… --- ## [All fields are mapped as text](https://discuss.elastic.co/t/all-fields-are-mapped-as-text/230373)
**Author:** [@martin.s](https://discuss.elastic.co/u/martin.s)\ **Replies:** 4\ **Last updated:** [April 30, 2020, 5:29am UTC](https://discuss.elastic.co/t/all-fields-are-mapped-as-text/230373 "2020-04-30T05:29:52Z")
Hello, I wasn't sure if this is more an Elasticsearch or Logstash issue, hope this is the right place. As you can probably guess I am rather new to Elasticsearch. This is Elasticsearch 6.8 on CentOS 7.7. I have a CSV … --- ## [Why shard unassigned after cluster restart completely?](https://discuss.elastic.co/t/why-shard-unassigned-after-cluster-restart-completely/230460)
**Author:** [@wfeng888](https://discuss.elastic.co/u/wfeng888)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 3:30am UTC](https://discuss.elastic.co/t/why-shard-unassigned-after-cluster-restart-completely/230460 "2020-04-30T03:30:57Z")
I have a cluster with 3 nodes, all have node.master: true and node.data: true. Almost every index loss one or two shards either primary or replica after i restart three nodes 1 by one. All indices have settings of 5 pr… --- ## [Where to start with custom query types](https://discuss.elastic.co/t/where-to-start-with-custom-query-types/230459)
**Author:** [@emarthinsen](https://discuss.elastic.co/u/emarthinsen)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 3:11am UTC](https://discuss.elastic.co/t/where-to-start-with-custom-query-types/230459 "2020-04-30T03:11:40Z")
This is, slightly, hypothetical, but let's say that I wanted to do something like index a matrix and then do a search based upon which documents had a matrix closest to the matrix that I'm searching for. How would I exte… --- ## [Logstash Help Config file](https://discuss.elastic.co/t/logstash-help-config-file/230451)
**Author:** [@vstevenson](https://discuss.elastic.co/u/vstevenson)\ **Replies:** 2\ **Last updated:** [April 30, 2020, 12:44am UTC](https://discuss.elastic.co/t/logstash-help-config-file/230451 "2020-04-30T00:44:58Z")
Hi, I am trying to ingest a bunch of logs into my Elastic cluster through Logstash, however I am having a hard time with the config file. Here is what my log files look like: #Software: Microsoft Internet Informat… --- ## [Add New Multiple Path Data in Elastic](https://discuss.elastic.co/t/add-new-multiple-path-data-in-elastic/230453)
**Author:** [@paulnick](https://discuss.elastic.co/u/paulnick)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 12:06am UTC](https://discuss.elastic.co/t/add-new-multiple-path-data-in-elastic/230453 "2020-04-30T00:06:55Z")
hello I'm a new user at ELK, I have a problem, the ELK server is almost full. So I added a multi path.data configuration in elasticsearch.yml. the following configuration: path: data: - /home/elasticsearch/data/… --- ## [How to update a elasticsearch cluster to new version when some field is not stored](https://discuss.elastic.co/t/how-to-update-a-elasticsearch-cluster-to-new-version-when-some-field-is-not-stored/230452)
**Author:** [@Deng](https://discuss.elastic.co/u/Deng)\ **Replies:** 0\ **Last updated:** [April 30, 2020, 12:05am UTC](https://discuss.elastic.co/t/how-to-update-a-elasticsearch-cluster-to-new-version-when-some-field-is-not-stored/230452 "2020-04-30T00:05:34Z")
As the document said： If you have indices created in 5.x or before, you must reindex or delete them before upgrading to 7.6.2. I have indices when some field have excluded from "\_source" because these field are just ind… --- ## [Kafka Input JSON Codec](https://discuss.elastic.co/t/kafka-input-json-codec/230406)
**Author:** [@lifeofguenter](https://discuss.elastic.co/u/lifeofguenter)\ **Replies:** 1\ **Last updated:** [April 29, 2020, 11:52pm UTC](https://discuss.elastic.co/t/kafka-input-json-codec/230406 "2020-04-29T23:52:17Z")
From version 3.0.0 the default codec for kafka-input-plugin has been changed from json to plain (see: https://github.com/logstash-plugins/logstash-input-kafka/blob/master/CHANGELOG.md#300beta2-1). One possibility would … --- ## [Do I need to convert fields in logstash if I have a index template in elastic?](https://discuss.elastic.co/t/do-i-need-to-convert-fields-in-logstash-if-i-have-a-index-template-in-elastic/230434)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [April 29, 2020, 11:45pm UTC](https://discuss.elastic.co/t/do-i-need-to-convert-fields-in-logstash-if-i-have-a-index-template-in-elastic/230434 "2020-04-29T23:45:52Z")
Hi, I've been converting some fields in logstash, but I was wondering if I really need to do this if I have a index template with those fields already created in elastic mutate { convert =\> { … --- ## [Download CSV permission?](https://discuss.elastic.co/t/download-csv-permission/230443)
**Author:** [@jpigott](https://discuss.elastic.co/u/jpigott)\ **Replies:** 2\ **Last updated:** [April 29, 2020, 11:31pm UTC](https://discuss.elastic.co/t/download-csv-permission/230443 "2020-04-29T23:31:24Z")
I have given a user dashboard access to Kibana and have a visualization of the discovery detail data that they visualize. There is an option export the data to CSV. The users get an error when downloading the CSV. What p… --- ## [Integer Values Saved as Floats](https://discuss.elastic.co/t/integer-values-saved-as-floats/230445)
**Author:** [@Zhenya](https://discuss.elastic.co/u/Zhenya)\ **Replies:** 0\ **Last updated:** [April 29, 2020, 11:03pm UTC](https://discuss.elastic.co/t/integer-values-saved-as-floats/230445 "2020-04-29T23:03:25Z")
I have Legacy application using Elasticsearch 5.6 Tried to duplicate it and I see that on my copy integer fields (including \_id) are saved as floats like curl --location --request GET 'http://localhost:9200/catalo… --- ## [Importing Dashboard via CURL fails with 500 error](https://discuss.elastic.co/t/importing-dashboard-via-curl-fails-with-500-error/230421)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 6\ **Last updated:** [April 29, 2020, 10:50pm UTC](https://discuss.elastic.co/t/importing-dashboard-via-curl-fails-with-500-error/230421 "2020-04-29T22:50:15Z")
On my old dev stack I used the beats setup feature to install the example dashboards. That ended up with a bunch I will never use. So now that I'm building an actual test stack, I want to pick and choose which dashboards… --- ## [How to query a system setting?](https://discuss.elastic.co/t/how-to-query-a-system-setting/230408)
**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\ **Replies:** 1\ **Last updated:** [April 29, 2020, 10:02pm UTC](https://discuss.elastic.co/t/how-to-query-a-system-setting/230408 "2020-04-29T22:02:34Z")
Let's say I want to see the value of xpack.security.enabled or discovery.zen.ping.unicast.hosts. Is there a way to query it? --- ## [Assigning an aggregated event timestamp to @timestamp](https://discuss.elastic.co/t/assigning-an-aggregated-event-timestamp-to-timestamp/229381)
**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\ **Replies:** 5\ **Last updated:** [April 29, 2020, 9:57pm UTC](https://discuss.elastic.co/t/assigning-an-aggregated-event-timestamp-to-timestamp/229381 "2020-04-29T21:57:58Z")
HI, I am aggragating events for each session from log I fetch the log time from event in aggregate filter, i want to have a field startdatetime and assign session open time to this, set timeout\_timestamp\_field =\> "St… --- ## [Query Logs - Calculating QPS](https://discuss.elastic.co/t/query-logs-calculating-qps/230438)
**Author:** [@dmcminn](https://discuss.elastic.co/u/dmcminn)\ **Replies:** 1\ **Last updated:** [April 29, 2020, 9:48pm UTC](https://discuss.elastic.co/t/query-logs-calculating-qps/230438 "2020-04-29T21:48:00Z")
Hi All-- I have been asked to aggregate up query logs from a database platform. This platform does not have a good way to get accurate QPS counts, but it does send the query details to it's logs. So, we have devised a p… --- ## [Found a Timestamp Bug](https://discuss.elastic.co/t/found-a-timestamp-bug/230127)
**Author:** [@zebulyon](https://discuss.elastic.co/u/zebulyon)\ **Replies:** 1\ **Last updated:** [April 29, 2020, 8:42pm UTC](https://discuss.elastic.co/t/found-a-timestamp-bug/230127 "2020-04-29T20:42:01Z")
Hello, I have encounters a weird problem when adding entries to Elasticsearch through the Curl command. The problem however seemingly appears in Kibana. The "bug" is that for somereason kibana adds 1 hour to the times… --- ## [Which node executes the highligting?](https://discuss.elastic.co/t/which-node-executes-the-highligting/230435)
**Author:** [@drs](https://discuss.elastic.co/u/drs)\ **Replies:** 0\ **Last updated:** [April 29, 2020, 8:23pm UTC](https://discuss.elastic.co/t/which-node-executes-the-highligting/230435 "2020-04-29T20:23:44Z")
We're troubleshooting some performance issues with respect to highlighting, where certain queries that contain 10 - 40 terms take 2x - 3x as long with highlighting enabled. We're wondering in which phase (and on which n… --- ## [Get API, refresh=wait\_for not allowed](https://discuss.elastic.co/t/get-api-refresh-wait-for-not-allowed/230396)
**Author:** [@antonio\_antuan](https://discuss.elastic.co/u/antonio_antuan)\ **Replies:** 2\ **Last updated:** [April 29, 2020, 8:14pm UTC](https://discuss.elastic.co/t/get-api-refresh-wait-for-not-allowed/230396 "2020-04-29T20:14:44Z")
Hi! I'm using elasticsearch 7.4.2. Docs are saying that I can set refresh parameter with wait\_for value. But if I try to do this, an error is returned: GET http://0.0.0.0:9200/events/\_doc/31780294-6529-425d-b0fa-7b03b9… --- ## [No mapping Found On \[field\] Sorting Issue](https://discuss.elastic.co/t/no-mapping-found-on-field-sorting-issue/230433)
**Author:** [@Severin\_Simko](https://discuss.elastic.co/u/Severin_Simko)\ **Replies:** 0\ **Last updated:** [April 29, 2020, 8:13pm UTC](https://discuss.elastic.co/t/no-mapping-found-on-field-sorting-issue/230433 "2020-04-29T20:13:55Z")
Hi, I'm currently experiencing a problem when I'm trying to search based on some specific field, I'm seeing this error log: Caused by: org.elasticsearch.index.query.QueryShardException: No mapping found for \[process\_id… --- ## [Logstash is not load-balanced properly](https://discuss.elastic.co/t/logstash-is-not-load-balanced-properly/230021)
**Author:** [@Rakesh\_B](https://discuss.elastic.co/u/Rakesh_B)\ **Replies:** 4\ **Last updated:** [April 29, 2020, 7:49pm UTC](https://discuss.elastic.co/t/logstash-is-not-load-balanced-properly/230021 "2020-04-29T19:49:21Z")
Hi, We are using logstash version: 7.6.1, from the helm chart - https://github.com/elastic/helm-charts/tree/master/logstash. resources: requests: cpu: "2" memory: "6Gi" limits: cpu: "2" memory: "6G… --- ## [Beats & Logstash - What happens if logstash goes offline?](https://discuss.elastic.co/t/beats-logstash-what-happens-if-logstash-goes-offline/230423)
**Author:** [@Ric878](https://discuss.elastic.co/u/Ric878)\ **Replies:** 2\ **Last updated:** [April 29, 2020, 7:10pm UTC](https://discuss.elastic.co/t/beats-logstash-what-happens-if-logstash-goes-offline/230423 "2020-04-29T19:10:33Z")
I've setup an elasticsearch cluster with 3 Elasticsearch nodes, 1 Kibana, 1 Logstash. Everything is working as expected with one exception. I currently have my Beats (metric, file, etc.) sending log data to my Logstash … --- ## [Increased Cluster Latency during adding of aliases with 30 nodes](https://discuss.elastic.co/t/increased-cluster-latency-during-adding-of-aliases-with-30-nodes/230424)
**Author:** [@joe-berg](https://discuss.elastic.co/u/joe-berg)\ **Replies:** 0\ **Last updated:** [April 29, 2020, 7:00pm UTC](https://discuss.elastic.co/t/increased-cluster-latency-during-adding-of-aliases-with-30-nodes/230424 "2020-04-29T19:00:59Z")
Running a 6.8.0 cluster with 30 nodes. All nodes are data nodes and 1 of those nodes is a master enabled data node. Every node in the cluster is sized with 32 CPUs and 64 GB RAM. Cluster is running in Azure deployed via… --- ## [Translate filter with dictionary\_path and a special delimiter](https://discuss.elastic.co/t/translate-filter-with-dictionary-path-and-a-special-delimiter/230407)
**Author:** [@theo1991](https://discuss.elastic.co/u/theo1991)\ **Replies:** 3\ **Last updated:** [April 29, 2020, 6:55pm UTC](https://discuss.elastic.co/t/translate-filter-with-dictionary-path-and-a-special-delimiter/230407 "2020-04-29T18:55:20Z")
Hello, Is it possible to specify a delimiter in a translate filter and how ? I have a dictionnary in csv where the delimiter is | This is my current filter : translate { field =\> \[field\] destination =\> \[destination\] … --- ## [Reason behind "Index creation no longer defaults to five shard"](https://discuss.elastic.co/t/reason-behind-index-creation-no-longer-defaults-to-five-shard/230409)
**Author:** [@nages](https://discuss.elastic.co/u/nages)\ **Replies:** 3\ **Last updated:** [April 29, 2020, 6:28pm UTC](https://discuss.elastic.co/t/reason-behind-index-creation-no-longer-defaults-to-five-shard/230409 "2020-04-29T18:28:33Z")
What was the reasoning behind ""Index creation no longer defaults to five shard but one shard" So far, the assumption was , more shards = more scalability = more parallelism Isnt that change defeating the whole purpos… --- ## [Logstash start error 7.3.0 version](https://discuss.elastic.co/t/logstash-start-error-7-3-0-version/230418)
**Author:** [@krishna\_bhargav](https://discuss.elastic.co/u/krishna_bhargav)\ **Replies:** 0\ **Last updated:** [April 29, 2020, 6:27pm UTC](https://discuss.elastic.co/t/logstash-start-error-7-3-0-version/230418 "2020-04-29T18:27:32Z")
:\\Logstash\\logstash-7.3.0\\bin\>logstash Thread.exclusive is deprecated, use Thread::Mutex \[ERROR\] 2020-04-29 14:23:40.972 \[main\] Logstash - java.lang.IllegalStateException: Logstash stopped processing because of an erro… --- ## [Search\_after doesn't work when sorting descendent](https://discuss.elastic.co/t/search-after-doesnt-work-when-sorting-descendent/230386)
**Author:** [@yv\_2904](https://discuss.elastic.co/u/yv_2904)\ **Replies:** 0\ **Last updated:** [April 29, 2020, 2:02pm UTC](https://discuss.elastic.co/t/search-after-doesnt-work-when-sorting-descendent/230386 "2020-04-29T14:02:20Z")
I am implementing a sear\_after for cursor pagination, my sort is based on a unique Id that is a text field. When I tried to sort this field desc the search\_after doesn't return any result. If I sort asc, it returns resu… --- ## [Elasticsearch aggregation over full index but over query results is needed](https://discuss.elastic.co/t/elasticsearch-aggregation-over-full-index-but-over-query-results-is-needed/230392)
**Author:** [@kengreenlee](https://discuss.elastic.co/u/kengreenlee)\ **Replies:** 0\ **Last updated:** [April 29, 2020, 2:31pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-over-full-index-but-over-query-results-is-needed/230392 "2020-04-29T14:31:27Z")
I have what I think should be a simple query. I'm trying to return the documents in descending order by amount and ascending by name (actually, it's name.keyword). For the cases with duplicate names, I only want one na… --- ## [Indexing docs](https://discuss.elastic.co/t/indexing-docs/230416)
**Author:** [@Kovi\_Diament](https://discuss.elastic.co/u/Kovi_Diament)\ **Replies:** 0\ **Last updated:** [April 29, 2020, 5:57pm UTC](https://discuss.elastic.co/t/indexing-docs/230416 "2020-04-29T17:57:46Z")
Hi, Im trying to start reading through and understanding the elasticsearch java source code. I'm trying to figure out how the indices the search engine uses are stored, how the words and which documents they are in are … --- ## [Log rotation for cluster log file configure in log4j2 properties](https://discuss.elastic.co/t/log-rotation-for-cluster-log-file-configure-in-log4j2-properties/230227)
**Author:** [@Sanjay1](https://discuss.elastic.co/u/Sanjay1)\ **Replies:** 1\ **Last updated:** [April 29, 2020, 5:55pm UTC](https://discuss.elastic.co/t/log-rotation-for-cluster-log-file-configure-in-log4j2-properties/230227 "2020-04-29T17:55:34Z")
We are using the ES 7.4.2 Our log4j2.properties has the following configuration Even policy appender.rolling.policies.time.interval = 1 set to 1 day, still log file is not rotated. As soon as re restart the elasticsea… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1478) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1480)