# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1665

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1666

---

## [Preprocess data with python](https://discuss.elastic.co/t/preprocess-data-with-python/216523)

<div class="topic-metadata">

**Author:** [@Cristian\_Bovino](https://discuss.elastic.co/u/Cristian_Bovino)\
**Replies:** 2\
**Last updated:** [January 26, 2020, 12:36pm UTC](https://discuss.elastic.co/t/preprocess-data-with-python/216523 "2020-01-26T12:36:06Z")

</div>

Hi Everyone, I'm quite new to the Elastic suite. My current situation is: Data --\> Logstash (with filters) --\> Elasticsearch --\> Kibana I would like to process data with a python script (ML Model) before store it into…

---

## [Elastic-charts](https://discuss.elastic.co/t/elastic-charts/216567)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 0\
**Last updated:** [January 26, 2020, 11:58am UTC](https://discuss.elastic.co/t/elastic-charts/216567 "2020-01-26T11:58:22Z")

</div>

hi, I'm not sure if that's the correct forum to ask... I'm checking the elastic-charts lib (https://elastic.github.io/elastic-charts), and couldn't find click event handlers for pie charts thanks Lior

---

## [Errors related to http requests](https://discuss.elastic.co/t/errors-related-to-http-requests/216515)

<div class="topic-metadata">

**Author:** [@George\_Wainwright](https://discuss.elastic.co/u/George_Wainwright)\
**Replies:** 2\
**Last updated:** [January 26, 2020, 10:08am UTC](https://discuss.elastic.co/t/errors-related-to-http-requests/216515 "2020-01-26T10:08:21Z")

</div>

Hello, from time to time I see the next errors among elasticsearch logs: \[2020-01-25T01:20:41,285\]\[ERROR\]\[o.e.r.RestController \] failed to send failure response for uri \[/\] java.lang.IllegalArgumentException: Unex…

---

## [How to query elasticsearch using array index?](https://discuss.elastic.co/t/how-to-query-elasticsearch-using-array-index/216458)

<div class="topic-metadata">

**Author:** [@meallhour](https://discuss.elastic.co/u/meallhour)\
**Replies:** 3\
**Last updated:** [January 26, 2020, 8:46am UTC](https://discuss.elastic.co/t/how-to-query-elasticsearch-using-array-index/216458 "2020-01-26T08:46:49Z")

</div>

My Json Response looks as below: { "took": 41, "timed\_out": false, "\_shards": { "total": 3, "successful": 3, "skipped": 0, "failed": 0 }, "hits": { "total": 1, "max\_score": null, "h…

---

## [Huge json data, how to stream records fast to filter and to output](https://discuss.elastic.co/t/huge-json-data-how-to-stream-records-fast-to-filter-and-to-output/216543)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 2\
**Last updated:** [January 26, 2020, 5:23am UTC](https://discuss.elastic.co/t/huge-json-data-how-to-stream-records-fast-to-filter-and-to-output/216543 "2020-01-26T05:23:27Z")

</div>

Hi All I have a json data of overall 50, 000 records coming from http input plugin. When i get the overall response i get it in the column/event : message ( all 50 K records) Now before leaving to filter i want to pro…

---

## [NEST API SUCKS](https://discuss.elastic.co/t/nest-api-sucks/214128)

<div class="topic-metadata">

**Author:** [@han1](https://discuss.elastic.co/u/han1)\
**Replies:** 5\
**Last updated:** [January 26, 2020, 4:33am UTC](https://discuss.elastic.co/t/nest-api-sucks/214128 "2020-01-26T04:33:13Z")

</div>

Not only is there no Documentation for important things we need to do, even when we ask a question due to lack of docs, No one bothers to respond. NEST seems to be not only useless as far as providing an API it actually…

---

## [Is there a prefered way to configure default number\_of\_replicas on ECK?](https://discuss.elastic.co/t/is-there-a-prefered-way-to-configure-default-number-of-replicas-on-eck/216553)

<div class="topic-metadata">

**Author:** [@vroad](https://discuss.elastic.co/u/vroad)\
**Replies:** 0\
**Last updated:** [January 26, 2020, 1:57am UTC](https://discuss.elastic.co/t/is-there-a-prefered-way-to-configure-default-number-of-replicas-on-eck/216553 "2020-01-26T01:57:30Z")

</div>

Just setting node count to 3 does not change number\_of\_replicas value for newly created indices. I'm wondering if there is a way to configure index template using CRD, so that I can change this value easily when creatin…

---

## [I wanna restart logstash, but I get multiple instance error](https://discuss.elastic.co/t/i-wanna-restart-logstash-but-i-get-multiple-instance-error/216468)

<div class="topic-metadata">

**Author:** [@lilyyy](https://discuss.elastic.co/u/lilyyy)\
**Replies:** 2\
**Last updated:** [January 26, 2020, 12:57am UTC](https://discuss.elastic.co/t/i-wanna-restart-logstash-but-i-get-multiple-instance-error/216468 "2020-01-26T00:57:35Z")

</div>

Hi. I have a critical problem to me. When I start Logstash at first, It works well. But after Killing the logstash and restarting, I have a error message. When I turn off and on ubuntu again, then It works well again…

---

## [Undocumented breaking change in integTest runner in 7.5](https://discuss.elastic.co/t/undocumented-breaking-change-in-integtest-runner-in-7-5/216544)

<div class="topic-metadata">

**Author:** [@Itamar\_Syn\_Hershko](https://discuss.elastic.co/u/Itamar_Syn_Hershko)\
**Replies:** 0\
**Last updated:** [January 25, 2020, 9:02pm UTC](https://discuss.elastic.co/t/undocumented-breaking-change-in-integtest-runner-in-7-5/216544 "2020-01-25T21:02:51Z")

</div>

Hi all, We are experiencing the same build issues as in https://discuss.elastic.co/t/task-integtestcluster-did-not-run-automatically-when-run-task-integtest-on-version-7-5/212637 . We have a couple of plugins with YamlT…

---

## [Is it possible to exclude the health/status page from username/pwd when using buckler or xpac as my load balancer doesn’t support credentials](https://discuss.elastic.co/t/is-it-possible-to-exclude-the-health-status-page-from-username-pwd-when-using-buckler-or-xpac-as-my-load-balancer-doesn-t-support-credentials/216501)

<div class="topic-metadata">

**Author:** [@nandersen674](https://discuss.elastic.co/u/nandersen674)\
**Replies:** 4\
**Last updated:** [January 25, 2020, 8:50pm UTC](https://discuss.elastic.co/t/is-it-possible-to-exclude-the-health-status-page-from-username-pwd-when-using-buckler-or-xpac-as-my-load-balancer-doesn-t-support-credentials/216501 "2020-01-25T20:50:59Z")

</div>

Is it possible to exclude the health/status page from username/pwd when using buckler or space as my load balancer doesn’t support credentials Like an exclude tag in buckler.yml

---

## [How to map nested json array with http output plugin](https://discuss.elastic.co/t/how-to-map-nested-json-array-with-http-output-plugin/215950)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 6\
**Last updated:** [January 25, 2020, 8:43pm UTC](https://discuss.elastic.co/t/how-to-map-nested-json-array-with-http-output-plugin/215950 "2020-01-25T20:43:52Z")

</div>

Hi All I have incoming events from input as 2 records Project\_Num, Task Name,Task\_num,Task Date PRJ-001,Task Name1,111,1-Jan-2020 PRJ-001,Task Name2,112,2-Jan-2020 How should i map it with my json payload like bel…

---

## [Logstash 5044 address already in use](https://discuss.elastic.co/t/logstash-5044-address-already-in-use/216416)

<div class="topic-metadata">

**Author:** [@living\_jordi](https://discuss.elastic.co/u/living_jordi)\
**Replies:** 1\
**Last updated:** [January 25, 2020, 6:28pm UTC](https://discuss.elastic.co/t/logstash-5044-address-already-in-use/216416 "2020-01-25T18:28:11Z")

</div>

I'm running logstash docker image 7.5.2 using this configuration file: input { beats { port =\> 5044 } } filter { mutate { add\_tag =\> \[ "logstash\_filter\_applied" \] } } output { elasticsearch { hos…

---

## [JUnit 5 migration](https://discuss.elastic.co/t/junit-5-migration/216527)

<div class="topic-metadata">

**Author:** [@benoitdupont](https://discuss.elastic.co/u/benoitdupont)\
**Replies:** 0\
**Last updated:** [January 25, 2020, 3:19pm UTC](https://discuss.elastic.co/t/junit-5-migration/216527 "2020-01-25T15:19:07Z")

</div>

Hello Logstash team, when browsing the Java code I saw that JUnit version 4.12 is still used, instead of the latest 5.6. If it's not already on the agenda, here's a proposition of a migration plan: First, update the …

---

## [Request of field + value & samefield + anothervalue combinations using bool must or query\_string - ask for help](https://discuss.elastic.co/t/request-of-field-value-samefield-anothervalue-combinations-using-bool-must-or-query-string-ask-for-help/215395)

<div class="topic-metadata">

**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\
**Replies:** 4\
**Last updated:** [January 25, 2020, 10:53am UTC](https://discuss.elastic.co/t/request-of-field-value-samefield-anothervalue-combinations-using-bool-must-or-query-string-ask-for-help/215395 "2020-01-25T10:53:11Z")

</div>

Hi, i just tried to build following request to count documents containing player active status but no match found: GET /players/\_search { "size": 0, "query": { "bool": { "must" : \[ {"ter…

---

## [Logstash parsing data from multiple filebeats](https://discuss.elastic.co/t/logstash-parsing-data-from-multiple-filebeats/216289)

<div class="topic-metadata">

**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\
**Replies:** 1\
**Last updated:** [January 23, 2020, 4:07pm UTC](https://discuss.elastic.co/t/logstash-parsing-data-from-multiple-filebeats/216289 "2020-01-23T16:07:26Z")

</div>

Hey guys! I'm wondering if there is any solution for following scenario: I have one machine on which I have set Elasticsearch and Logstash and shipping there logs via Filebeat from another machine. I'd like to add a ne…

---

## [Elasticsearch public access failure with self-signed certificate. xpack.security is it really needed](https://discuss.elastic.co/t/elasticsearch-public-access-failure-with-self-signed-certificate-xpack-security-is-it-really-needed/215392)

<div class="topic-metadata">

**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\
**Replies:** 2\
**Last updated:** [January 25, 2020, 4:39am UTC](https://discuss.elastic.co/t/elasticsearch-public-access-failure-with-self-signed-certificate-xpack-security-is-it-really-needed/215392 "2020-01-25T04:39:14Z")

</div>

Hi Everyone, Based on my previous post Elasticsearch with xpack.security.enabled throws Cluster is not yet ready I configured xpack.security and selfsigned certificate for elasticsearch. I wonder whether xpack.securit…

---

## [How can I set the date type with create.indices in elasticsearch?](https://discuss.elastic.co/t/how-can-i-set-the-date-type-with-create-indices-in-elasticsearch/216505)

<div class="topic-metadata">

**Author:** [@securisec](https://discuss.elastic.co/u/securisec)\
**Replies:** 0\
**Last updated:** [January 25, 2020, 2:41am UTC](https://discuss.elastic.co/t/how-can-i-set-the-date-type-with-create-indices-in-elasticsearch/216505 "2020-01-25T02:41:55Z")

</div>

I am having trouble setting the date type specially for nested objects in elasticsearch withe nodejs. The data field in my example holds the time in epoch in seconds. I am using the create.indices endpoint along with the…

---

## [Python Elasticsearch-DSL UpdateByQuery Syntax](https://discuss.elastic.co/t/python-elasticsearch-dsl-updatebyquery-syntax/216349)

<div class="topic-metadata">

**Author:** [@\_Joe](https://discuss.elastic.co/u/_Joe)\
**Replies:** 1\
**Last updated:** [January 25, 2020, 1:53am UTC](https://discuss.elastic.co/t/python-elasticsearch-dsl-updatebyquery-syntax/216349 "2020-01-25T01:53:12Z")

</div>

ElasticSearch 7.5 Indices are firewall log data. I am experiencing too many failed GeoIP lookups using GeoLite2-City.mmdb. To fix these issues, I am working on a Python script that will do lookups for documents with m…

---

## [All files collected under on index only. Is it possible to have multiple indexes for multiple files?](https://discuss.elastic.co/t/all-files-collected-under-on-index-only-is-it-possible-to-have-multiple-indexes-for-multiple-files/212806)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 75\
**Last updated:** [January 25, 2020, 1:34am UTC](https://discuss.elastic.co/t/all-files-collected-under-on-index-only-is-it-possible-to-have-multiple-indexes-for-multiple-files/212806 "2020-01-25T01:34:10Z")

</div>

EVery time I search GET cat/index? in kibana, I only get one index under all files are collected. I want to get three indexes for three different log files given in filebeat. This is logstash.conf file input { bea…

---

## [Deleted .kibana\_2 index and now kibana stopped running](https://discuss.elastic.co/t/deleted-kibana-2-index-and-now-kibana-stopped-running/216329)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 5\
**Last updated:** [January 25, 2020, 1:31am UTC](https://discuss.elastic.co/t/deleted-kibana-2-index-and-now-kibana-stopped-running/216329 "2020-01-25T01:31:48Z")

</div>

I was deleting indexes and deleted .kibana\_2 and after that my kibana stopped running. I have another index .kibana\_1. Should I delete that too an drestart kibana? But how do i delete it? I cant access the dev tools page…

---

## [How to send logs from server to local machine to VM. where ELK is running?](https://discuss.elastic.co/t/how-to-send-logs-from-server-to-local-machine-to-vm-where-elk-is-running/216120)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 18\
**Last updated:** [January 25, 2020, 1:19am UTC](https://discuss.elastic.co/t/how-to-send-logs-from-server-to-local-machine-to-vm-where-elk-is-running/216120 "2020-01-25T01:19:12Z")

</div>

I have filebeat running on server which collects logs and ships them to logstash. But I want to try to send logs to logstash on my machine. Not on localhost, but on my windows machine to VM. So it will basically be a di…

---

## [Restrict data forwarding to elasticsearch index](https://discuss.elastic.co/t/restrict-data-forwarding-to-elasticsearch-index/216488)

<div class="topic-metadata">

**Author:** [@bhargav](https://discuss.elastic.co/u/bhargav)\
**Replies:** 0\
**Last updated:** [January 24, 2020, 8:43pm UTC](https://discuss.elastic.co/t/restrict-data-forwarding-to-elasticsearch-index/216488 "2020-01-24T20:43:37Z")

</div>

Greetings, We are storing logs from some applications in our elasticsearch cluster, and every day we index the data to a new index with increased number in the end of the name. E.g.: app-data-0001, app-data-0002 ... U…

---

## [Suggestions from long text fields](https://discuss.elastic.co/t/suggestions-from-long-text-fields/216494)

<div class="topic-metadata">

**Author:** [@hjklo](https://discuss.elastic.co/u/hjklo)\
**Replies:** 0\
**Last updated:** [January 24, 2020, 10:16pm UTC](https://discuss.elastic.co/t/suggestions-from-long-text-fields/216494 "2020-01-24T22:16:25Z")

</div>

We have an ES index that contains a large and constantly increasing number of documents (PDFs, word processord files etc). The index stores several details about each document, including the complete contents of the docu…

---

## [Ingest of data hammering one node only](https://discuss.elastic.co/t/ingest-of-data-hammering-one-node-only/216341)

<div class="topic-metadata">

**Author:** [@Philip\_Brown](https://discuss.elastic.co/u/Philip_Brown)\
**Replies:** 7\
**Last updated:** [January 24, 2020, 10:05pm UTC](https://discuss.elastic.co/t/ingest-of-data-hammering-one-node-only/216341 "2020-01-24T22:05:24Z")

</div>

We have a 14-datanode elastic cluster running version (censored for embarassment), and 3 master nodes We have a bunch of machines sending logfile output, into the cluster, via filebeat and logstash. logstash is pointed…

---

## [How to configure filebeat to restart automatically when it stopped or strucked , when it is runningwith elastic beanstalk app](https://discuss.elastic.co/t/how-to-configure-filebeat-to-restart-automatically-when-it-stopped-or-strucked-when-it-is-runningwith-elastic-beanstalk-app/216491)

<div class="topic-metadata">

**Author:** [@souji](https://discuss.elastic.co/u/souji)\
**Replies:** 0\
**Last updated:** [January 24, 2020, 9:17pm UTC](https://discuss.elastic.co/t/how-to-configure-filebeat-to-restart-automatically-when-it-stopped-or-strucked-when-it-is-runningwith-elastic-beanstalk-app/216491 "2020-01-24T21:17:03Z")

</div>

Hi, I am new to Filebeat. Right now I configured the filebeat in elasticbeanstalk app to collect the logs and sends to logstash. In unit testing I stopped the filebeat, but it didn't restart automatically. How can I ac…

---

## ["The field \[metricset.name\] must be aggregatable across all indices" and a huge rolled-up index](https://discuss.elastic.co/t/the-field-metricset-name-must-be-aggregatable-across-all-indices-and-a-huge-rolled-up-index/216319)

<div class="topic-metadata">

**Author:** [@yagodorea](https://discuss.elastic.co/u/yagodorea)\
**Replies:** 1\
**Last updated:** [January 24, 2020, 9:01pm UTC](https://discuss.elastic.co/t/the-field-metricset-name-must-be-aggregatable-across-all-indices-and-a-huge-rolled-up-index/216319 "2020-01-24T21:01:48Z")

</div>

I'm using an on-prem version of Elasticsearch in a GCP instance, and I'm having to deal with the huge amounts of data quickly accumulating into my instance's storage. Especially Metricbeat data, that is far to extensive …

---

## [Null\_value in mapping for individual components of date\_range](https://discuss.elastic.co/t/null-value-in-mapping-for-individual-components-of-date-range/215632)

<div class="topic-metadata">

**Author:** [@dougbergh](https://discuss.elastic.co/u/dougbergh)\
**Replies:** 2\
**Last updated:** [January 24, 2020, 8:38pm UTC](https://discuss.elastic.co/t/null-value-in-mapping-for-individual-components-of-date-range/215632 "2020-01-24T20:38:30Z")

</div>

Mapping below. Docs need to be able to have non-null start date and null end date. How do I specify null\_value for each date in date\_range individually? { "de-mr-j-2019.06" : { "mappings" : { "date\_det…

---

## [Upgrade ES and Kibana on Windows Server](https://discuss.elastic.co/t/upgrade-es-and-kibana-on-windows-server/216484)

<div class="topic-metadata">

**Author:** [@RunningSmurf](https://discuss.elastic.co/u/RunningSmurf)\
**Replies:** 0\
**Last updated:** [January 24, 2020, 8:00pm UTC](https://discuss.elastic.co/t/upgrade-es-and-kibana-on-windows-server/216484 "2020-01-24T20:00:20Z")

</div>

Good afternoon, I currently have ES 6.5 installed on Windows Server 2012, and want to upgrade to 7.5. Since this is a single node, I assume that this will not be a rolling upgrade, but rather a full-cluster restart up…

---

## [Terminal blocked on \[2020-01-24T15:37:25,971\]\[INFO \]\[o.e.c.r.a.AllocationService\] \[LAPTOP-TRA6NOPS\] Cluster health status changed from \[RED\] to \[GREEN\] (reason: \[shards started \[\[.kibana\_task\_manager\_1\]\[0\], \[.kibana\_1\]\[0\]\]\])](https://discuss.elastic.co/t/terminal-blocked-on-2020-01-24t1525-971-info-o-e-c-r-a-allocationservice-laptop-tra6nops-cluster-health-status-changed-from-red-to-green-reason-shards-started-kibana-task-manager-1-0-kibana-1-0/216446)

<div class="topic-metadata">

**Author:** [@pierrejutard](https://discuss.elastic.co/u/pierrejutard)\
**Replies:** 5\
**Last updated:** [January 24, 2020, 7:12pm UTC](https://discuss.elastic.co/t/terminal-blocked-on-2020-01-24t1525-971-info-o-e-c-r-a-allocationservice-laptop-tra6nops-cluster-health-status-changed-from-red-to-green-reason-shards-started-kibana-task-manager-1-0-kibana-1-0/216446 "2020-01-24T19:12:48Z")

</div>

Hello, i just set up elastic search 7.5.2 on my computer and when runnning on the terminal comand elastic search on windows the terminal stops at this sentence: \[2020-01-24T15:37:25,971\]\[INFO \]\[o.e.c.r.a.AllocationServi…

---

## [Randomly performance issue](https://discuss.elastic.co/t/randomly-performance-issue/214009)

<div class="topic-metadata">

**Author:** [@nmathur](https://discuss.elastic.co/u/nmathur)\
**Replies:** 6\
**Last updated:** [January 24, 2020, 6:44pm UTC](https://discuss.elastic.co/t/randomly-performance-issue/214009 "2020-01-24T18:44:35Z")

</div>

Hello All, We are randomly facing performance issue in elasticsearch read/write operations. The elasticsearch in installed on Azure VM (Linux). This is not constant. Generally a common method to insert/update in elastic…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1664)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1666)
