# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1624

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1625

---

## [How to use only the search set generated by the previous query for searching the current query in ElasticSearch](https://discuss.elastic.co/t/how-to-use-only-the-search-set-generated-by-the-previous-query-for-searching-the-current-query-in-elasticsearch/217528)

<div class="topic-metadata">

**Author:** [@shikjind](https://discuss.elastic.co/u/shikjind)\
**Replies:** 2\
**Last updated:** [February 17, 2020, 9:58am UTC](https://discuss.elastic.co/t/how-to-use-only-the-search-set-generated-by-the-previous-query-for-searching-the-current-query-in-elasticsearch/217528 "2020-02-17T09:58:20Z")

</div>

I am working on a Search Engine for searching strings. There is around 600 GB of data stored at ElasticSearch index with 4 nodes, having 5 primary shards and 1 replica set. Assume there is a complete data set A(600GB) o…

---

## [The Service of ES don't start](https://discuss.elastic.co/t/the-service-of-es-dont-start/219315)

<div class="topic-metadata">

**Author:** [@Barsash](https://discuss.elastic.co/u/Barsash)\
**Replies:** 1\
**Last updated:** [February 17, 2020, 9:21am UTC](https://discuss.elastic.co/t/the-service-of-es-dont-start/219315 "2020-02-17T09:21:33Z")

</div>

Hello! I have some problem here. First of all i installed ES from .rar file, and did some features in config's files and in registry. But in was ES 7.5, so i download 7.6.0 version .msi, and started install. After all…

---

## [What is the best way to logging any errors in nodejs application?](https://discuss.elastic.co/t/what-is-the-best-way-to-logging-any-errors-in-nodejs-application/218945)

<div class="topic-metadata">

**Author:** [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\
**Replies:** 5\
**Last updated:** [February 17, 2020, 9:09am UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-logging-any-errors-in-nodejs-application/218945 "2020-02-17T09:09:12Z")

</div>

Hi! Can you confirm me what is the best way to logging any errors in javascript (I mean in frontend applications, in web client browser) I would like to know when the application doesnt work in any devices (mobile, ipad…

---

## [Grok pattern works but not applied on Kibana](https://discuss.elastic.co/t/grok-pattern-works-but-not-applied-on-kibana/218752)

<div class="topic-metadata">

**Author:** [@Cuju](https://discuss.elastic.co/u/Cuju)\
**Replies:** 10\
**Last updated:** [February 17, 2020, 9:04am UTC](https://discuss.elastic.co/t/grok-pattern-works-but-not-applied-on-kibana/218752 "2020-02-17T09:04:22Z")

</div>

Hello, I have an issue I try to fix for a couple of days, without success. I need to grok the message field (they don't have the same syntax) from my Kibana but it fails. I created my grok filter, which works on Grok …

---

## [Winlogbeat can't send events to Elasticsearch](https://discuss.elastic.co/t/winlogbeat-cant-send-events-to-elasticsearch/218940)

<div class="topic-metadata">

**Author:** [@smerzlyakov](https://discuss.elastic.co/u/smerzlyakov)\
**Replies:** 1\
**Last updated:** [February 17, 2020, 8:59am UTC](https://discuss.elastic.co/t/winlogbeat-cant-send-events-to-elasticsearch/218940 "2020-02-17T08:59:22Z")

</div>

Hello. We have near 2300 EPS comming on each WEC Windows collector and near 350 EPS that winlogbeat ship to Logstash or Elasticsearch (i test both). I try a lot of things on winlogbeat side, but nothing happen. Then i i…

---

## [Problématique envoie plusieurs mails](https://discuss.elastic.co/t/problematique-envoie-plusieurs-mails/219538)

<div class="topic-metadata">

**Author:** [@reneroy](https://discuss.elastic.co/u/reneroy)\
**Replies:** 3\
**Last updated:** [February 17, 2020, 8:46am UTC](https://discuss.elastic.co/t/problematique-envoie-plusieurs-mails/219538 "2020-02-17T08:46:06Z")

</div>

Bonsoir; je vous sollicite afin que vous m'édifiez si possible sur la fonctionnalité ouput mail de logstash , en effet étant dans un projet où j'expérimente une version basique d'ELK ; j'aimerai utiliser la fonction oup…

---

## [Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline/219168)

<div class="topic-metadata">

**Author:** [@samargh](https://discuss.elastic.co/u/samargh)\
**Replies:** 7\
**Last updated:** [February 13, 2020, 11:21am UTC](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline/219168 "2020-02-13T11:21:54Z")

</div>

i have this code : input { file { path =\> "/home/samar/data/subscriber.csv" start\_position =\> "beginning" sincdb =\> "/dev/null" } } filter { csv { sparator =\> "," columns =\> \["Subscriber ID (MSISDN)","Account …

---

## [ES Multiple configuration files support](https://discuss.elastic.co/t/es-multiple-configuration-files-support/219405)

<div class="topic-metadata">

**Author:** [@yuvald](https://discuss.elastic.co/u/yuvald)\
**Replies:** 1\
**Last updated:** [February 17, 2020, 8:35am UTC](https://discuss.elastic.co/t/es-multiple-configuration-files-support/219405 "2020-02-17T08:35:28Z")

</div>

Is there any option to use multiple configuration files for elasticsearch ? I want to override the defaults of elasticsearch.yml but without touching that file like specifying a second file like local.yml to override. …

---

## [429 retry bulk doc question?](https://discuss.elastic.co/t/429-retry-bulk-doc-question/219578)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 0\
**Last updated:** [February 17, 2020, 8:16am UTC](https://discuss.elastic.co/t/429-retry-bulk-doc-question/219578 "2020-02-17T08:16:00Z")

</div>

Hi all, My elastic cluster have an index that are quite heavily indexed every day so sometime i got the 429 error so i was wondering if the bullk when they retry pushing the doc up does the doc got lost or it still goes…

---

## [Kibana should not be run as root. Use --allow-root to continue](https://discuss.elastic.co/t/kibana-should-not-be-run-as-root-use-allow-root-to-continue/219253)

<div class="topic-metadata">

**Author:** [@dsv](https://discuss.elastic.co/u/dsv)\
**Replies:** 4\
**Last updated:** [February 17, 2020, 8:11am UTC](https://discuss.elastic.co/t/kibana-should-not-be-run-as-root-use-allow-root-to-continue/219253 "2020-02-17T08:11:10Z")

</div>

CentOS Linux release 7.7.1908 (Core) I have the lastest version of the kibana installed from the elasticsearch repo by yum: kibana-7.5.2-1.x86\_64 When I try to install a plugin: /usr/share/kibana/bin/kibana-plugin in…

---

## [Location Mapping in Elasticsearch 7.6](https://discuss.elastic.co/t/location-mapping-in-elasticsearch-7-6/219537)

<div class="topic-metadata">

**Author:** [@Andre\_Bruederle](https://discuss.elastic.co/u/Andre_Bruederle)\
**Replies:** 2\
**Last updated:** [February 17, 2020, 8:05am UTC](https://discuss.elastic.co/t/location-mapping-in-elasticsearch-7-6/219537 "2020-02-17T08:05:58Z")

</div>

Hello, I need help to get the location mapping for my dataset. I have the longitude and latitude and I tried to follow the official documentation about "geo-point datatype", but it doesn't work. Here is the logstash f…

---

## [metrics.gauge.LazyDelegatingGauge unknown type](https://discuss.elastic.co/t/metrics-gauge-lazydelegatinggauge-unknown-type/219195)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 4\
**Last updated:** [February 17, 2020, 7:38am UTC](https://discuss.elastic.co/t/metrics-gauge-lazydelegatinggauge-unknown-type/219195 "2020-02-17T07:38:33Z")

</div>

Updated logstash and are still seeing the warning: constant ::Fixnum upon launching logstash anything to do clear this warning? Downloading Packages: logstash-7.6.0.rpm …

---

## [Logstash file shutdown](https://discuss.elastic.co/t/logstash-file-shutdown/219369)

<div class="topic-metadata">

**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Replies:** 12\
**Last updated:** [February 17, 2020, 6:35am UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369 "2020-02-17T06:35:15Z")

</div>

Logstash file is not starting getting this error please help

---

## [Dynamic tables in logstash v6.3 and above jdbc](https://discuss.elastic.co/t/dynamic-tables-in-logstash-v6-3-and-above-jdbc/219568)

<div class="topic-metadata">

**Author:** [@Kartik\_Kolachina](https://discuss.elastic.co/u/Kartik_Kolachina)\
**Replies:** 0\
**Last updated:** [February 17, 2020, 6:23am UTC](https://discuss.elastic.co/t/dynamic-tables-in-logstash-v6-3-and-above-jdbc/219568 "2020-02-17T06:23:59Z")

</div>

Is there a way to fetch data using logstash jdbc plugin from dynamically generated tables that follows a pattern?

---

## [Elastic community in Vietnam](https://discuss.elastic.co/t/elastic-community-in-vietnam/219527)

<div class="topic-metadata">

**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\
**Replies:** 1\
**Last updated:** [February 17, 2020, 6:00am UTC](https://discuss.elastic.co/t/elastic-community-in-vietnam/219527 "2020-02-17T06:00:02Z")

</div>

I just have known about Elastic Community. It's awesome! I'm from Vietnam. I'm looking for Vietnam's Elastic COmmunity. And 1 ... 2 ... 3 It's here But something wrong, The capital of Vietnam is Hanoi, not Ho Chi Min…

---

## [Add scripted field aggregations into date histogram](https://discuss.elastic.co/t/add-scripted-field-aggregations-into-date-histogram/219565)

<div class="topic-metadata">

**Author:** [@StephenGoodall](https://discuss.elastic.co/u/StephenGoodall)\
**Replies:** 0\
**Last updated:** [February 17, 2020, 5:59am UTC](https://discuss.elastic.co/t/add-scripted-field-aggregations-into-date-histogram/219565 "2020-02-17T05:59:22Z")

</div>

Is it possible to add an aggregated value of a scripted field into a date histogram? I'm trying to create a Vega chart and so far I can get it to graph the "doc\_count" value of the date histogram. What I would like is …

---

## [Count endpoint of elasticsearch service results in HTTP 404](https://discuss.elastic.co/t/count-endpoint-of-elasticsearch-service-results-in-http-404/219564)

<div class="topic-metadata">

**Author:** [@ajmcmiddlin](https://discuss.elastic.co/u/ajmcmiddlin)\
**Replies:** 0\
**Last updated:** [February 17, 2020, 5:42am UTC](https://discuss.elastic.co/t/count-endpoint-of-elasticsearch-service-results-in-http-404/219564 "2020-02-17T05:42:17Z")

</div>

I'm attempting to use the elasticsearch service within my Kibana 7.4 plugin. The plugin works fine when using the search endpoint (I get a HTTP 200 response and search results), however the count endpoint results in a HT…

---

## [Logstash and mongodb connection using JDBC is not working](https://discuss.elastic.co/t/logstash-and-mongodb-connection-using-jdbc-is-not-working/219119)

<div class="topic-metadata">

**Author:** [@SanTiaGo\_KarThiCk](https://discuss.elastic.co/u/SanTiaGo_KarThiCk)\
**Replies:** 5\
**Last updated:** [February 17, 2020, 5:42am UTC](https://discuss.elastic.co/t/logstash-and-mongodb-connection-using-jdbc-is-not-working/219119 "2020-02-17T05:42:01Z")

</div>

This is the configuration file gives output as \[unable to connect to database and no suitable driver was found!\] and I am using logstash version 7.5.1

---

## [How to use custom field type in mappings to achieve multiple type mappings within an index?](https://discuss.elastic.co/t/how-to-use-custom-field-type-in-mappings-to-achieve-multiple-type-mappings-within-an-index/219530)

<div class="topic-metadata">

**Author:** [@prasad98](https://discuss.elastic.co/u/prasad98)\
**Replies:** 2\
**Last updated:** [February 16, 2020, 6:39pm UTC](https://discuss.elastic.co/t/how-to-use-custom-field-type-in-mappings-to-achieve-multiple-type-mappings-within-an-index/219530 "2020-02-16T18:39:47Z")

</div>

Hi, I'm trying to migrate my elasticsearch from 2.4 to 7.5 I was working on fixing breaking changes in the mappings. This example here (for custom field type): https://www.elastic.co/guide/en/elasticsearch/reference/cur…

---

## [If statement incorrectly matches wildcard](https://discuss.elastic.co/t/if-statement-incorrectly-matches-wildcard/219322)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 2\
**Last updated:** [February 17, 2020, 4:04am UTC](https://discuss.elastic.co/t/if-statement-incorrectly-matches-wildcard/219322 "2020-02-17T04:04:53Z")

</div>

Hi, I have the following piece of code and noticed that for some reason when the IP is in the 192.168.150.\* range, both dev and test are matched. If the IP is in the 192.168.1.\* range it correctly matches only dev. If …

---

## [In elasticsearch with logstash, 'doc' property in mapping option had been deprecated?](https://discuss.elastic.co/t/in-elasticsearch-with-logstash-doc-property-in-mapping-option-had-been-deprecated/219556)

<div class="topic-metadata">

**Author:** [@teemoGod](https://discuss.elastic.co/u/teemoGod)\
**Replies:** 3\
**Last updated:** [February 17, 2020, 3:34am UTC](https://discuss.elastic.co/t/in-elasticsearch-with-logstash-doc-property-in-mapping-option-had-been-deprecated/219556 "2020-02-17T03:34:41Z")

</div>

i upgraded my elasticsearch 6.7.1 to 7.5.2 and curator 5.6 to 5.8.1. i used both logstash and fluentd. in first, i used fluentd and curator's create\_index was like this. actions: 1: action: create\_index desc…

---

## [Elasticsearch Scroll Query](https://discuss.elastic.co/t/elasticsearch-scroll-query/219554)

<div class="topic-metadata">

**Author:** [@rickyooi](https://discuss.elastic.co/u/rickyooi)\
**Replies:** 2\
**Last updated:** [February 17, 2020, 2:25am UTC](https://discuss.elastic.co/t/elasticsearch-scroll-query/219554 "2020-02-17T02:25:10Z")

</div>

{ "scroll":"1m", "scroll\_id": "ABCDEF......" } The "1m" (one minute) refers to the query will only available to be called for 1 minute OR the query will stay alive for 1 minute whenever it is being called?

---

## [Java High Level REST Client - order of fields in document during saving and retrieval](https://discuss.elastic.co/t/java-high-level-rest-client-order-of-fields-in-document-during-saving-and-retrieval/217621)

<div class="topic-metadata">

**Author:** [@jb79](https://discuss.elastic.co/u/jb79)\
**Replies:** 7\
**Last updated:** [February 16, 2020, 10:04pm UTC](https://discuss.elastic.co/t/java-high-level-rest-client-order-of-fields-in-document-during-saving-and-retrieval/217621 "2020-02-16T22:04:16Z")

</div>

Is the order of the saved document structure guaranteed in elasticsearch? Currently I see that it is, but I don't know if it's because of some default value of some option in the es-rest-client - generally I'd like to …

---

## [How to avoid duplicate fields copied during bulk indexing?](https://discuss.elastic.co/t/how-to-avoid-duplicate-fields-copied-during-bulk-indexing/219528)

<div class="topic-metadata">

**Author:** [@prasad98](https://discuss.elastic.co/u/prasad98)\
**Replies:** 1\
**Last updated:** [February 16, 2020, 5:46pm UTC](https://discuss.elastic.co/t/how-to-avoid-duplicate-fields-copied-during-bulk-indexing/219528 "2020-02-16T17:46:59Z")

</div>

Hi, I'm trying to create my mappings have multiple types within the same index. This is how it looks: mappings := map\[string\]interface{}{ "properties": map\[string\]interface{}{ "category": map\[string\]interface{}{ …

---

## [Logstash server specification for heavy load](https://discuss.elastic.co/t/logstash-server-specification-for-heavy-load/219458)

<div class="topic-metadata">

**Author:** [@kulwantmor](https://discuss.elastic.co/u/kulwantmor)\
**Replies:** 3\
**Last updated:** [February 16, 2020, 1:45pm UTC](https://discuss.elastic.co/t/logstash-server-specification-for-heavy-load/219458 "2020-02-16T13:45:57Z")

</div>

Hi, I am having requirement where multiple hosts ( count would be approx 120) sending data via filebeat. Amount of data would be more during business hours and less during night. Total avg data ingested is 35 GB per day…

---

## [How to alter GET /index/\_mapping output to work with PUT /index/\_mapping](https://discuss.elastic.co/t/how-to-alter-get-index-mapping-output-to-work-with-put-index-mapping/219260)

<div class="topic-metadata">

**Author:** [@LansK](https://discuss.elastic.co/u/LansK)\
**Replies:** 4\
**Last updated:** [February 16, 2020, 1:43pm UTC](https://discuss.elastic.co/t/how-to-alter-get-index-mapping-output-to-work-with-put-index-mapping/219260 "2020-02-16T13:43:40Z")

</div>

I am upgrading elasticsearch from 2.x to 7.x. I am trying to re-add index mappings from 2.x. I want to know how to alter a mapping to make it compatible with 7.x. Here is the result of GET /syslog/\_mapping from 2.x { …

---

## [Is there any way to get application logged in user id in Logstash input statement configuration](https://discuss.elastic.co/t/is-there-any-way-to-get-application-logged-in-user-id-in-logstash-input-statement-configuration/219513)

<div class="topic-metadata">

**Author:** [@riya1995](https://discuss.elastic.co/u/riya1995)\
**Replies:** 1\
**Last updated:** [February 16, 2020, 1:42pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-get-application-logged-in-user-id-in-logstash-input-statement-configuration/219513 "2020-02-16T13:42:48Z")

</div>

Hi All, My application works based on user roles.The elastic search should return data based on person role.This can be achieved by getting logged in person id in the logstash input statement.Can you guys help me to sor…

---

## [Grok DATA as MONTH-NUMBER](https://discuss.elastic.co/t/grok-data-as-month-number/219243)

<div class="topic-metadata">

**Author:** [@ldistria79](https://discuss.elastic.co/u/ldistria79)\
**Replies:** 1\
**Last updated:** [February 16, 2020, 10:45am UTC](https://discuss.elastic.co/t/grok-data-as-month-number/219243 "2020-02-16T10:45:35Z")

</div>

Hi All, i have two date types: "2020-02-12 09:37:19,334" and "2020Feb07-10:42:22", I'd like to import a unique format into kibana. Currently I worked on the second one, using grok I was able to read "2020Feb07-10:42:2…

---

## ["path: /\_security/api\_key... api keys are not enabled" while loading prebuilt detection rules](https://discuss.elastic.co/t/path-security-api-key-api-keys-are-not-enabled-while-loading-prebuilt-detection-rules/219319)

<div class="topic-metadata">

**Author:** [@Slavik\_Fursov](https://discuss.elastic.co/u/Slavik_Fursov)\
**Replies:** 3\
**Last updated:** [February 16, 2020, 10:33am UTC](https://discuss.elastic.co/t/path-security-api-key-api-keys-are-not-enabled-while-loading-prebuilt-detection-rules/219319 "2020-02-16T10:33:59Z")

</div>

I upgraded to 7.6.0 today. I wanted to try Detections, but I'm getting error (below) when clicking "load prebuilt detection rules". My complete Kibana config: --- ## Default Kibana configuration from Kibana base image…

---

## [Rejecting mapping update to \[test-index\] as the final mapping would have more than 1 type: \[\_doc, products\]](https://discuss.elastic.co/t/rejecting-mapping-update-to-test-index-as-the-final-mapping-would-have-more-than-1-type-doc-products/219282)

<div class="topic-metadata">

**Author:** [@prasad98](https://discuss.elastic.co/u/prasad98)\
**Replies:** 2\
**Last updated:** [February 16, 2020, 10:29am UTC](https://discuss.elastic.co/t/rejecting-mapping-update-to-test-index-as-the-final-mapping-would-have-more-than-1-type-doc-products/219282 "2020-02-16T10:29:41Z")

</div>

Hi, I'm working on migrating my elasticsearch 2.4 to the latest version 7.5. Due to removal of mapping types in the elasticsearch 6.0, I was earlier using multiple types in a single index. Now, I've defined my mappings…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1623)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1625)
