# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1496 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1497 --- ## [Extraction query for monitor](https://discuss.elastic.co/t/extraction-query-for-monitor/228918)
**Author:** [@Rashmita\_Shetty](https://discuss.elastic.co/u/Rashmita_Shetty)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 11:04am UTC](https://discuss.elastic.co/t/extraction-query-for-monitor/228918 "2020-04-22T11:04:05Z")
Hello, I have recently built a few alerts in Kibana (7.1.1). The alerts that I have using the extraction method is to query a specific value in the field : CustomerEndpoint address. I am trying to understand, if I had t… --- ## [Cannot set up cluster on 3 machines when using Xpack (7.6.2)](https://discuss.elastic.co/t/cannot-set-up-cluster-on-3-machines-when-using-xpack-7-6-2/228650)
**Author:** [@newschapmj1](https://discuss.elastic.co/u/newschapmj1)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 10:50am UTC](https://discuss.elastic.co/t/cannot-set-up-cluster-on-3-machines-when-using-xpack-7-6-2/228650 "2020-04-22T10:50:51Z")
I have successfully set up a 3 node cluster This is based on 3 VMS (Ubuntu 20.04). The machines are named node1, node2 & node3 with static ip addresses (192.168.64.21..23) I have added Kibana on node1 and this also wo… --- ## [Finding nearest locations for a geo-point near antimeridian](https://discuss.elastic.co/t/finding-nearest-locations-for-a-geo-point-near-antimeridian/229110)
**Author:** [@vmanohar1](https://discuss.elastic.co/u/vmanohar1)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 10:21am UTC](https://discuss.elastic.co/t/finding-nearest-locations-for-a-geo-point-near-antimeridian/229110 "2020-04-22T10:21:49Z")
Hi.. I had following questions --\> If I want to find nearest locations from a given location(using sort) and this location happens to be close to anti-meridian, will it cover near by locations across anti-meridian?? … --- ## [MultiNode Cluster Replication Shards](https://discuss.elastic.co/t/multinode-cluster-replication-shards/229018)
**Author:** [@ksremo](https://discuss.elastic.co/u/ksremo)\ **Replies:** 4\ **Last updated:** [April 22, 2020, 10:09am UTC](https://discuss.elastic.co/t/multinode-cluster-replication-shards/229018 "2020-04-22T10:09:28Z")
I case i have 8 ES nodes on 4 physical Hosts with a setting of 8 primary shards and 1 replica shard. So it runs 2 ES Nodes on 1 physical Host. How i can prevent that that the replica shard is stored on one of the two i… --- ## [AWS to Kibana](https://discuss.elastic.co/t/aws-to-kibana/229221)
**Author:** [@John\_Carlo](https://discuss.elastic.co/u/John_Carlo)\ **Replies:** 7\ **Last updated:** [April 22, 2020, 10:05am UTC](https://discuss.elastic.co/t/aws-to-kibana/229221 "2020-04-22T10:05:34Z")
hi. is there any other way to connect my aws ES to kibana 7.6.2? --- ## [NullPointerException while PinnedQuery with aggregation](https://discuss.elastic.co/t/nullpointerexception-while-pinnedquery-with-aggregation/229219)
**Author:** [@IliaIsakhin](https://discuss.elastic.co/u/IliaIsakhin)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 9:49am UTC](https://discuss.elastic.co/t/nullpointerexception-while-pinnedquery-with-aggregation/229219 "2020-04-22T09:49:11Z")
Hi, guys! I have a kotlin application and Elasticsearch v7.5.2 cluster. Im trying to execute common search request with Pinned subquery in parallel. Most of my requests were successfully finished, but couple of them en… --- ## [Can only use prefix queries on keyword and text fields - not on \[soCode\] which is of type](https://discuss.elastic.co/t/can-only-use-prefix-queries-on-keyword-and-text-fields-not-on-socode-which-is-of-type/225358)
**Author:** [@Oh\_Chee\_Peng](https://discuss.elastic.co/u/Oh_Chee_Peng)\ **Replies:** 5\ **Last updated:** [April 22, 2020, 9:41am UTC](https://discuss.elastic.co/t/can-only-use-prefix-queries-on-keyword-and-text-fields-not-on-socode-which-is-of-type/225358 "2020-04-22T09:41:52Z")
I have this scenario, where the keyword is string, ex: customerName, which is string; as well as soCode, which is number. First, I added a record into elasticsearch: POST sales-orders/\_doc/1234 { customerName: "hel… --- ## [Filebeat refuse connect to Logstash port- "Connection timed out error"](https://discuss.elastic.co/t/filebeat-refuse-connect-to-logstash-port-connection-timed-out-error/228803)
**Author:** [@pash123](https://discuss.elastic.co/u/pash123)\ **Replies:** 6\ **Last updated:** [April 22, 2020, 9:38am UTC](https://discuss.elastic.co/t/filebeat-refuse-connect-to-logstash-port-connection-timed-out-error/228803 "2020-04-22T09:38:55Z")
Hi all, I have installed FB on Linux server and LG on my local server. (ES and Kibana installed on local server as well) \*\*LG configuration:\*\* input{ beats{ port =\> 5044 } } output { elasticsearch { hosts… --- ## [About merge policy for a segment of small size](https://discuss.elastic.co/t/about-merge-policy-for-a-segment-of-small-size/229212)
**Author:** [@Hyunsoo\_Shim](https://discuss.elastic.co/u/Hyunsoo_Shim)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 8:45am UTC](https://discuss.elastic.co/t/about-merge-policy-for-a-segment-of-small-size/229212 "2020-04-22T08:45:25Z")
Hello, I have a question about merge policy for a segment of small size. I have found a below segment from a shard and have expected that would be merged with new one since the size seemed to be small (just 3.3mb). "… --- ## [Elastic Cloud Kibana with Single Sign On from Azure Active Directory](https://discuss.elastic.co/t/elastic-cloud-kibana-with-single-sign-on-from-azure-active-directory/228947)
**Author:** [@jpigott](https://discuss.elastic.co/u/jpigott)\ **Replies:** 6\ **Last updated:** [April 22, 2020, 8:39am UTC](https://discuss.elastic.co/t/elastic-cloud-kibana-with-single-sign-on-from-azure-active-directory/228947 "2020-04-22T08:39:27Z")
Is it possible to use Azure Active Directory with the Elastic Cloud Kibana? I see this other article, but it looks like this is probably on-premises? and If there is a good article to set this up that would be nice… --- ## [Node does not reclaim full memory after GC kicks at 75% and it eventually 'dies'](https://discuss.elastic.co/t/node-does-not-reclaim-full-memory-after-gc-kicks-at-75-and-it-eventually-dies/229199)
**Author:** [@itmeze](https://discuss.elastic.co/u/itmeze)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 8:27am UTC](https://discuss.elastic.co/t/node-does-not-reclaim-full-memory-after-gc-kicks-at-75-and-it-eventually-dies/229199 "2020-04-22T08:27:29Z")
Hi, I am new to ElasticSearch and at the moment i am evaluating it as a replacement for our sql server based search (in a couple of months time we will need text search for our products) I have an index for product sea… --- ## [Aggregation of incoming events on common fields for SIEM usecase](https://discuss.elastic.co/t/aggregation-of-incoming-events-on-common-fields-for-siem-usecase/229206)
**Author:** [@ParashB](https://discuss.elastic.co/u/ParashB)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 8:26am UTC](https://discuss.elastic.co/t/aggregation-of-incoming-events-on-common-fields-for-siem-usecase/229206 "2020-04-22T08:26:36Z")
How can I do aggregation of incoming events on common fields to reduce the incoming EPS? Refer the AGGREGATION OF EVENTS section in "https://socprime.com/en/blog/arcsight-optimizing-eps-aggregation-and-filtration/" for m… --- ## [How to use a field's meta data in search results](https://discuss.elastic.co/t/how-to-use-a-fields-meta-data-in-search-results/228996)
**Author:** [@arun\_001](https://discuss.elastic.co/u/arun_001)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 8:25am UTC](https://discuss.elastic.co/t/how-to-use-a-fields-meta-data-in-search-results/228996 "2020-04-22T08:25:54Z")
My requirement is to store some meta data against some fields and retrieve them as part of search results. Looks like the following is what I'm looking for but I'm not sure how use that in a single query. https://www.e… --- ## [\[logstash.outputs.elasticsearch\] Marking url as dead. Elasticsearch Unreachable: \[Manticore::SocketTimeout\] Read timed out. LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-marking-url-as-dead-elasticsearch-unreachable-manticore-sockettimeout-read-timed-out-logstash-hostunreachableerror/227059)
**Author:** [@m\_vibin](https://discuss.elastic.co/u/m_vibin)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 7:39am UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-marking-url-as-dead-elasticsearch-unreachable-manticore-sockettimeout-read-timed-out-logstash-hostunreachableerror/227059 "2020-04-22T07:39:27Z")
Hello Team, We built a new Elastic cluster with 3 masters and 2 data nodes with 2 logstash nodes. On the logstash nodes, we are seeing these errors when pushing the logs. It disconnects from the Elastic cluster and con… --- ## [Kibana watcher custom icon](https://discuss.elastic.co/t/kibana-watcher-custom-icon/229196)
**Author:** [@Silver](https://discuss.elastic.co/u/Silver)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 7:29am UTC](https://discuss.elastic.co/t/kibana-watcher-custom-icon/229196 "2020-04-22T07:29:45Z")
Hello, How to put a custom icon for this? --- ## [Too\_many\_buckets\_exception in Elasticseach.7.0.1](https://discuss.elastic.co/t/too-many-buckets-exception-in-elasticseach-7-0-1/228080)
**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 7:26am UTC](https://discuss.elastic.co/t/too-many-buckets-exception-in-elasticseach-7-0-1/228080 "2020-04-22T07:26:32Z")
Hi, We came across an error where the query for Dashborad threw for Too\_many\_buckets\_exception. We looked into couple of queries on elastic community and found that in Elasticseach 7.X the value for max\_buckets is 10000… --- ## [Get the error : No processor type exist with name \[script\]](https://discuss.elastic.co/t/get-the-error-no-processor-type-exist-with-name-script/229171)
**Author:** [@Dhwanil\_Patel](https://discuss.elastic.co/u/Dhwanil_Patel)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 7:26am UTC](https://discuss.elastic.co/t/get-the-error-no-processor-type-exist-with-name-script/229171 "2020-04-22T07:26:27Z")
My project is in spring boot and i run elastic-search using docker. Now after elastic-search creation when i run my spring boot project i got this error, I checked same thing using kibana but it's there i bit confused… --- ## [Logstash Monitoring API with HTTPS](https://discuss.elastic.co/t/logstash-monitoring-api-with-https/229023)
**Author:** [@jgato](https://discuss.elastic.co/u/jgato)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 7:07am UTC](https://discuss.elastic.co/t/logstash-monitoring-api-with-https/229023 "2020-04-22T07:07:21Z")
Hi there, I am trying to enable HTTPS for monitoring API. To ency this kind of requests curl -XGET 'localhost:9600/\_node/pipelines?pretty' Other option, would be to disable this API? which APIS exposes Logstash by def… --- ## [Reindex failing with SearchContextMissingException: No search context found for id (batch size = 1)](https://discuss.elastic.co/t/reindex-failing-with-searchcontextmissingexception-no-search-context-found-for-id-batch-size-1/229191)
**Author:** [@mrpew](https://discuss.elastic.co/u/mrpew)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 6:49am UTC](https://discuss.elastic.co/t/reindex-failing-with-searchcontextmissingexception-no-search-context-found-for-id-batch-size-1/229191 "2020-04-22T06:49:35Z")
Hello :slight\_smile: I am trying to reindex about 3mil documents (~50gb) trough an ingestion pipeline. POST \_reindex?&wait\_for\_completion=false { "source": { "size": 1, "index": "src" }, "dest": { "i… --- ## [Case insensitive path in match query](https://discuss.elastic.co/t/case-insensitive-path-in-match-query/229192)
**Author:** [@Jogi\_Michal](https://discuss.elastic.co/u/Jogi_Michal)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 6:55am UTC](https://discuss.elastic.co/t/case-insensitive-path-in-match-query/229192 "2020-04-22T06:55:05Z")
Hi folks, I have a problem with case sensitivity in field path... My mapping is dynamic: ... "http\_headers": { "dynamic": true, "properties": { "content-length": { "type": "long" } }, ..… --- ## [ElasticSearch output with alias](https://discuss.elastic.co/t/elasticsearch-output-with-alias/228869)
**Author:** [@Julien1](https://discuss.elastic.co/u/Julien1)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 6:49am UTC](https://discuss.elastic.co/t/elasticsearch-output-with-alias/228869 "2020-04-22T06:49:56Z")
Hello, Do we have to configure manualy first time index name in Elasticsearch output ? Let me explain, the context is : I create a index named : index: "es\_on\_demand\_index-000001" I have an index Lifecycle Policies … --- ## [Switching off security to install the platinum license](https://discuss.elastic.co/t/switching-off-security-to-install-the-platinum-license/229183)
**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 6:37am UTC](https://discuss.elastic.co/t/switching-off-security-to-install-the-platinum-license/229183 "2020-04-22T06:37:38Z")
I am trying to install a license in Kibana via Management / Elasticsearch / License Management. It tells me Error encountered uploading license: Cannot install a \[PLATINUM\] license unless TLS is configured or security… --- ## [Json\_parse\_exception - Unrecognized token 'analytics\_query'](https://discuss.elastic.co/t/json-parse-exception-unrecognized-token-analytics-query/228344)
**Author:** [@ank-patel](https://discuss.elastic.co/u/ank-patel)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 6:36am UTC](https://discuss.elastic.co/t/json-parse-exception-unrecognized-token-analytics-query/228344 "2020-04-22T06:36:42Z")
I am using below command to get details about number of API calls for Product "IBM API Connect - kubernetes version" : Command : kubectl exec -it r480b58da7f-analytics-storage-coordinating-7fc6b48b74-dq6f5 -n apic-analy… --- ## [Elasticsearch input query with sorting](https://discuss.elastic.co/t/elasticsearch-input-query-with-sorting/229178)
**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 5:53am UTC](https://discuss.elastic.co/t/elasticsearch-input-query-with-sorting/229178 "2020-04-22T05:53:41Z")
Hi , On dev tools i am able to see the query working and fetching results as expected. GET index/\_search { "query": { "query\_string": { "query": "FT52402" } }, "sort": \[ { "@timestamp": { … --- ## [Elastic-operator-0 goes into CrashLoopbackOff possibly after underlying node restarted](https://discuss.elastic.co/t/elastic-operator-0-goes-into-crashloopbackoff-possibly-after-underlying-node-restarted/228181)
**Author:** [@dineshabbi](https://discuss.elastic.co/u/dineshabbi)\ **Replies:** 6\ **Last updated:** [April 22, 2020, 5:50am UTC](https://discuss.elastic.co/t/elastic-operator-0-goes-into-crashloopbackoff-possibly-after-underlying-node-restarted/228181 "2020-04-22T05:50:15Z")
I am running elastic-operator 1.0.0-beta1 and hitting following issue. image: docker.elastic.co/eck/eck-operator:1.0.0-beta1 ❯ kubectl get pods -n elasticsearch … --- ## [Logstash keeps regenerating last event](https://discuss.elastic.co/t/logstash-keeps-regenerating-last-event/229051)
**Author:** [@ranadion](https://discuss.elastic.co/u/ranadion)\ **Replies:** 0\ **Last updated:** [April 21, 2020, 1:27pm UTC](https://discuss.elastic.co/t/logstash-keeps-regenerating-last-event/229051 "2020-04-21T13:27:27Z")
Hello everyone. I'm new to Elastic stak and I'm having some issues with my logstash pipeline. I have the following code: input { beats { id =\> "data-collector-filebeat-input" port =\> 5044… --- ## [Trigger on insert to index](https://discuss.elastic.co/t/trigger-on-insert-to-index/229113)
**Author:** [@somethingcool](https://discuss.elastic.co/u/somethingcool)\ **Replies:** 10\ **Last updated:** [April 22, 2020, 5:00am UTC](https://discuss.elastic.co/t/trigger-on-insert-to-index/229113 "2020-04-22T05:00:32Z")
Hello, I am using elasticsearch 6.8 and I couldn't find anything directly to this question, but was curious to know if it is possible to call an external python script after the insert of data into an index. If it is p… --- ## [Index elasticsearch](https://discuss.elastic.co/t/index-elasticsearch/229015)
**Author:** [@Jorge\_Aragon](https://discuss.elastic.co/u/Jorge_Aragon)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 4:56am UTC](https://discuss.elastic.co/t/index-elasticsearch/229015 "2020-04-22T04:56:19Z")
I am using elasticsearch 7.6 and everything works fine, but wordpress requires elasticsearch 7.5 for elasticpress when I use elasticshear 7.5 it does not recognize my index. this iselastic 7.5 \[2020-04-21T12:18:43,868\]… --- ## [Kibana- not able to login using saml](https://discuss.elastic.co/t/kibana-not-able-to-login-using-saml/227321)
**Author:** [@jbaskaran\_123](https://discuss.elastic.co/u/jbaskaran_123)\ **Replies:** 10\ **Last updated:** [April 22, 2020, 4:20am UTC](https://discuss.elastic.co/t/kibana-not-able-to-login-using-saml/227321 "2020-04-22T04:20:49Z")
We have configured SAML for our Elasticsearch cluster running in Kubernetes. when I hit the application URL, it redirects to IDP login (IDMS) but after logging in it shows "you are not authorized to use this application… --- ## [Intercept every request from Kibana plugin](https://discuss.elastic.co/t/intercept-every-request-from-kibana-plugin/229021)
**Author:** [@Digl1](https://discuss.elastic.co/u/Digl1)\ **Replies:** 18\ **Last updated:** [April 22, 2020, 2:57am UTC](https://discuss.elastic.co/t/intercept-every-request-from-kibana-plugin/229021 "2020-04-22T02:57:23Z")
Hi, I have tried a lot, but I can't really get it to work. I want to intercept all requests from kibana to elastic and modify the HTTP request Headers. I am also not sure what the correct approach to this would be - s… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1495) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1497)