# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1668 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1669 --- ## [Mistakenly upgraded without reindex or assistant. Now I cannot fix it](https://discuss.elastic.co/t/mistakenly-upgraded-without-reindex-or-assistant-now-i-cannot-fix-it/214457)
**Author:** [@brandondash](https://discuss.elastic.co/u/brandondash)\ **Replies:** 10\ **Last updated:** [January 23, 2020, 7:59pm UTC](https://discuss.elastic.co/t/mistakenly-upgraded-without-reindex-or-assistant-now-i-cannot-fix-it/214457 "2020-01-23T19:59:47Z")
We upgraded from 6.4 to 7.4 thinking we didn't have any 5.x indices. It turns out we did. Elasticsearch wouldn't start (by design, documented here). We tried to roll back to 6.4 so we could start elasticsearch to delete… --- ## [Automate ES query](https://discuss.elastic.co/t/automate-es-query/216241)
**Author:** [@paridhikochar](https://discuss.elastic.co/u/paridhikochar)\ **Replies:** 1\ **Last updated:** [January 23, 2020, 7:12pm UTC](https://discuss.elastic.co/t/automate-es-query/216241 "2020-01-23T19:12:30Z")
Hi I want to automate ES queries and run them at regular intervals in Kibana. How this can be done? I have xpack Kibana license. --- ## [Backup in Kibana](https://discuss.elastic.co/t/backup-in-kibana/216230)
**Author:** [@Gayathri.Srivathsan](https://discuss.elastic.co/u/Gayathri.Srivathsan)\ **Replies:** 1\ **Last updated:** [January 23, 2020, 6:57pm UTC](https://discuss.elastic.co/t/backup-in-kibana/216230 "2020-01-23T18:57:41Z")
Can we take back up of kibana i.e elasticsearch data running on one server and use that data in another server? --- ## [Limitation of storing documents with a timestamp far far in the future](https://discuss.elastic.co/t/limitation-of-storing-documents-with-a-timestamp-far-far-in-the-future/216299)
**Author:** [@fim](https://discuss.elastic.co/u/fim)\ **Replies:** 2\ **Last updated:** [January 23, 2020, 6:57pm UTC](https://discuss.elastic.co/t/limitation-of-storing-documents-with-a-timestamp-far-far-in-the-future/216299 "2020-01-23T18:57:15Z")
Hi Community The @timestamp field of an index template has been set in the format of epoch\_seconds. Unfortunately the application sends the data in epoch\_millis (1577983263046). Hence the json events are stored somewh… --- ## [Insert all records of a table in mysql with no unique column in elastic without repitition](https://discuss.elastic.co/t/insert-all-records-of-a-table-in-mysql-with-no-unique-column-in-elastic-without-repitition/215377)
**Author:** [@RITZ\_VERMA](https://discuss.elastic.co/u/RITZ_VERMA)\ **Replies:** 2\ **Last updated:** [January 23, 2020, 6:44pm UTC](https://discuss.elastic.co/t/insert-all-records-of-a-table-in-mysql-with-no-unique-column-in-elastic-without-repitition/215377 "2020-01-23T18:44:13Z")
I want to send data from mysql table to elastic search .I am currently using jdbc plugin but it keep inserting same records again .I have no unique column in my mysql table.is there a way to send the records exactly once … --- ## [Kibana 6.6.2 - Management reporting - how to “purge” generated .pdf reports](https://discuss.elastic.co/t/kibana-6-6-2-management-reporting-how-to-purge-generated-pdf-reports/216115)
**Author:** [@alvaro.soares](https://discuss.elastic.co/u/alvaro.soares)\ **Replies:** 1\ **Last updated:** [January 23, 2020, 6:40pm UTC](https://discuss.elastic.co/t/kibana-6-6-2-management-reporting-how-to-purge-generated-pdf-reports/216115 "2020-01-23T18:40:27Z")
Hi All, Under the kibana "management" and then "Reporting" I can see and download my reported documents but I'm not able to find any options to remove them ? Is there a way to do that ? Is any one can help me ? Thank… --- ## [Rollup job with distinct/unique count](https://discuss.elastic.co/t/rollup-job-with-distinct-unique-count/215684)
**Author:** [@Matthias\_Seidl](https://discuss.elastic.co/u/Matthias_Seidl)\ **Replies:** 1\ **Last updated:** [January 23, 2020, 5:49pm UTC](https://discuss.elastic.co/t/rollup-job-with-distinct-unique-count/215684 "2020-01-23T17:49:26Z")
Hi, I have to aggregate my data daily based on a couple of fields. Most of this can be done easily with the rollup functionality. I can get the max value of a field per day, the count of the logs and other simple aggreg… --- ## [Cardinality, precision, and Top 10](https://discuss.elastic.co/t/cardinality-precision-and-top-10/216303)
**Author:** [@axlrosen](https://discuss.elastic.co/u/axlrosen)\ **Replies:** 0\ **Last updated:** [January 23, 2020, 5:43pm UTC](https://discuss.elastic.co/t/cardinality-precision-and-top-10/216303 "2020-01-23T17:43:25Z")
We're currently evaluating Elasticsearch, and trying to get a handle on the approximate counts in cardinality aggregations. I understand that the default value for 'precision\_threshold' is 3000, and this means that if th… --- ## [Kibana User Login](https://discuss.elastic.co/t/kibana-user-login/215900)
**Author:** [@lquin1978](https://discuss.elastic.co/u/lquin1978)\ **Replies:** 1\ **Last updated:** [January 23, 2020, 5:40pm UTC](https://discuss.elastic.co/t/kibana-user-login/215900 "2020-01-23T17:40:19Z")
Running ELK 7.5 and I want to enforce login for users, is this aspect free in X-pack or does this functionality require payment? --- ## [Filebeat is shipping old log lines](https://discuss.elastic.co/t/filebeat-is-shipping-old-log-lines/216242)
**Author:** [@kwisatz](https://discuss.elastic.co/u/kwisatz)\ **Replies:** 2\ **Last updated:** [January 23, 2020, 4:53pm UTC](https://discuss.elastic.co/t/filebeat-is-shipping-old-log-lines/216242 "2020-01-23T16:53:22Z")
I've recently noticed that filebeat is shipping not only new lines in my logs, but apparently all the lines, all the time. E.g. I'm shipping nginx logs that are being created very ordinarily: access\_log /v… --- ## [Rollups and ILM](https://discuss.elastic.co/t/rollups-and-ilm/214555)
**Author:** [@RichardH](https://discuss.elastic.co/u/RichardH)\ **Replies:** 2\ **Last updated:** [January 23, 2020, 4:51pm UTC](https://discuss.elastic.co/t/rollups-and-ilm/214555 "2020-01-23T16:51:28Z")
Hi All, A bit of a newbie question. Am I correct in my understanding that Rollups do not delete any data. They just create new aggregate/summary indexes. I would need to set up ILM to delete old granular data from the … --- ## [High Rejections - bulk api](https://discuss.elastic.co/t/high-rejections-bulk-api/216204)
**Author:** [@bikkina\_mahesh](https://discuss.elastic.co/u/bikkina_mahesh)\ **Replies:** 9\ **Last updated:** [January 23, 2020, 4:44pm UTC](https://discuss.elastic.co/t/high-rejections-bulk-api/216204 "2020-01-23T16:44:57Z")
My elastic cluster:- version 7.2.0. 3 data nodes, 1 master node, 2 master+ingress nodes Problem: I could see too many rejections on data nodes. So there is data loss GET \_nodes/moss-eck-es-data-2/stats/thread\_pool?hu… --- ## [Calculate the timedifference between current time and future time](https://discuss.elastic.co/t/calculate-the-timedifference-between-current-time-and-future-time/216274)
**Author:** [@chandu5565](https://discuss.elastic.co/u/chandu5565)\ **Replies:** 2\ **Last updated:** [January 23, 2020, 4:24pm UTC](https://discuss.elastic.co/t/calculate-the-timedifference-between-current-time-and-future-time/216274 "2020-01-23T16:24:27Z")
Hi, I have data in the mongo db like below. "last-date": "2020-01-30T07:30:00Z" "type": "certificate" "daysleft": "7" I had inserted this kind of records in to elasticsearch. I wanted to daily monitor the number of d… --- ## [\_snapshot data takes up disk space](https://discuss.elastic.co/t/snapshot-data-takes-up-disk-space/216267)
**Author:** [@makarchuk](https://discuss.elastic.co/u/makarchuk)\ **Replies:** 2\ **Last updated:** [January 23, 2020, 4:24pm UTC](https://discuss.elastic.co/t/snapshot-data-takes-up-disk-space/216267 "2020-01-23T16:24:32Z")
Hello. We're observing strange behavior. Elasticsearch appears to be storing some snapshot data directly in it's data directory. And there's quiet a lot of space occupied by this data ~\> find /var/lib/elasticsearch/nod… --- ## [Search elements of an array in nested documents](https://discuss.elastic.co/t/search-elements-of-an-array-in-nested-documents/216057)
**Author:** [@styks90](https://discuss.elastic.co/u/styks90)\ **Replies:** 5\ **Last updated:** [January 23, 2020, 4:11pm UTC](https://discuss.elastic.co/t/search-elements-of-an-array-in-nested-documents/216057 "2020-01-23T16:11:28Z")
Suppose I have an index which looks like this: # dummy index PUT nested { "mappings": { "properties": { "address": { "type": "nested", "properties": { "city": { "type": … --- ## [Adding Field Data By Api Call](https://discuss.elastic.co/t/adding-field-data-by-api-call/216211)
**Author:** [@benedery](https://discuss.elastic.co/u/benedery)\ **Replies:** 1\ **Last updated:** [January 23, 2020, 4:01pm UTC](https://discuss.elastic.co/t/adding-field-data-by-api-call/216211 "2020-01-23T16:01:38Z")
Hey, im using elastic,kibana,logstash, metricbeat and i want to add to EVERY document i get from metricbeat, a field that will be set by making an api call from server and fetching data. from my searches, i see i can … --- ## [Yet another exclude\_lines thread](https://discuss.elastic.co/t/yet-another-exclude-lines-thread/216239)
**Author:** [@kwisatz](https://discuss.elastic.co/u/kwisatz)\ **Replies:** 1\ **Last updated:** [January 23, 2020, 3:54pm UTC](https://discuss.elastic.co/t/yet-another-exclude-lines-thread/216239 "2020-01-23T15:54:16Z")
I'm sorry to have to open yet another exclude\_lines thread, but having read all the available threads and checked all possibilities, I still can't get the exclude\_lines option to work. My config is: filebeat: prospec… --- ## [Elasticsearch doesn’t start on Windows 2016 Server](https://discuss.elastic.co/t/elasticsearch-doesn-t-start-on-windows-2016-server/216237)
**Author:** [@balupad14](https://discuss.elastic.co/u/balupad14)\ **Replies:** 3\ **Last updated:** [January 23, 2020, 3:43pm UTC](https://discuss.elastic.co/t/elasticsearch-doesn-t-start-on-windows-2016-server/216237 "2020-01-23T15:43:14Z")
I have the same issue. Thank you Bala --- ## [Elasticsearch needed for 1 hour](https://discuss.elastic.co/t/elasticsearch-needed-for-1-hour/215807)
**Author:** [@royal\_man](https://discuss.elastic.co/u/royal_man)\ **Replies:** 7\ **Last updated:** [January 23, 2020, 3:43pm UTC](https://discuss.elastic.co/t/elasticsearch-needed-for-1-hour/215807 "2020-01-23T15:43:09Z")
I want to use elasticsearch only for 1 hour twice a day (I know specific time). The indexing can be done once per day anytime we want. Is there anyway I can design the system so that it can handle such request and not w… --- ## [Can't resolve \`ui/registry/vis\_types\` \[7.5\]](https://discuss.elastic.co/t/cant-resolve-ui-registry-vis-types-7-5/215056)
**Author:** [@J\_Gil](https://discuss.elastic.co/u/J_Gil)\ **Replies:** 4\ **Last updated:** [January 23, 2020, 3:27pm UTC](https://discuss.elastic.co/t/cant-resolve-ui-registry-vis-types-7-5/215056 "2020-01-23T15:27:37Z")
According to the current (7.5) documentation for "Developing Visualizations": import { VisFactoryProvider } from 'ui/vis/vis\_factory'; import { VisTypesRegistryProvider } from 'ui/registry/vis\_types'; However, after ge… --- ## [Elasticsearch upgraded](https://discuss.elastic.co/t/elasticsearch-upgraded/216244)
**Author:** [@Manoj-ibank](https://discuss.elastic.co/u/Manoj-ibank)\ **Replies:** 1\ **Last updated:** [January 23, 2020, 3:26pm UTC](https://discuss.elastic.co/t/elasticsearch-upgraded/216244 "2020-01-23T15:26:08Z")
We have upgraded elastic search to 7.4.2 but unable to start the services. --- ## [Sorted index query time is same as unsorted index](https://discuss.elastic.co/t/sorted-index-query-time-is-same-as-unsorted-index/216228)
**Author:** [@royal\_man](https://discuss.elastic.co/u/royal_man)\ **Replies:** 1\ **Last updated:** [January 23, 2020, 3:22pm UTC](https://discuss.elastic.co/t/sorted-index-query-time-is-same-as-unsorted-index/216228 "2020-01-23T15:22:53Z")
I have a sorted index based on profile\_created\_time. When I query to the index when index sorting enabled and disabled . Query time is same. Can someone help what is wrong with my query. { "size": 20, "from": 0, … --- ## [How to sum all numeric values of a particular field](https://discuss.elastic.co/t/how-to-sum-all-numeric-values-of-a-particular-field/215838)
**Author:** [@Kashif](https://discuss.elastic.co/u/Kashif)\ **Replies:** 4\ **Last updated:** [January 23, 2020, 3:22pm UTC](https://discuss.elastic.co/t/how-to-sum-all-numeric-values-of-a-particular-field/215838 "2020-01-23T15:22:09Z")
Hi, I configured the AWS Appstream log in ELK ( 7.5.1 ) I want to make visualization of two filed. user\_id and session\_duration\_in\_seconds fields example user\_id kashif session\_duration\_in\_seconds 300 How can… --- ## [Single data source split to different indexes](https://discuss.elastic.co/t/single-data-source-split-to-different-indexes/215695)
**Author:** [@BeMoore](https://discuss.elastic.co/u/BeMoore)\ **Replies:** 11\ **Last updated:** [January 23, 2020, 2:57pm UTC](https://discuss.elastic.co/t/single-data-source-split-to-different-indexes/215695 "2020-01-23T14:57:20Z")
Morning all ! i have a question, if i have a json data source like : { "log\_url" =\> "http://127.0.0.1/log.txt", "key" =\> "22op3dfe", "raw\_msg" =\> "404.19 – Denied by filtering rule", "MD5" =\> "2c5c… --- ## [Kibana error "Client request error: Parse Error",](https://discuss.elastic.co/t/kibana-error-client-request-error-parse-error/215638)
**Author:** [@Ramu\_Kamath](https://discuss.elastic.co/u/Ramu_Kamath)\ **Replies:** 8\ **Last updated:** [January 23, 2020, 2:15pm UTC](https://discuss.elastic.co/t/kibana-error-client-request-error-parse-error/215638 "2020-01-23T14:15:44Z")
Hi All, I have installed es and Kibana on ec2 cluster. everything works fine including search. I have strange issue where I have one query runs in ES but if I run same query in Kibana I get following error. I looked to… --- ## [Logstash jdbc input plugin pagination not working on version 7.4.2 Replay](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-pagination-not-working-on-version-7-4-2-replay/216261)
**Author:** [@taku333](https://discuss.elastic.co/u/taku333)\ **Replies:** 0\ **Last updated:** [January 23, 2020, 2:11pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-pagination-not-working-on-version-7-4-2-replay/216261 "2020-01-23T14:11:49Z")
@Rafa About the following URL Isn't this the answer? --- ## [Index health red. No Data until refresh/clear cache](https://discuss.elastic.co/t/index-health-red-no-data-until-refresh-clear-cache/216260)
**Author:** [@tilchl](https://discuss.elastic.co/u/tilchl)\ **Replies:** 0\ **Last updated:** [January 23, 2020, 2:11pm UTC](https://discuss.elastic.co/t/index-health-red-no-data-until-refresh-clear-cache/216260 "2020-01-23T14:11:15Z")
As for a week an index has red health and is unresponsive after es startup. Triggering a refresh, clear cache or reindex makes the index responsive again but health is still red. Index status red open index-name … --- ## [Logstash processing twice then 'block\_in\_start\_workers'](https://discuss.elastic.co/t/logstash-processing-twice-then-block-in-start-workers/216080)
**Author:** [@guctum](https://discuss.elastic.co/u/guctum)\ **Replies:** 2\ **Last updated:** [January 23, 2020, 1:58pm UTC](https://discuss.elastic.co/t/logstash-processing-twice-then-block-in-start-workers/216080 "2020-01-23T13:58:33Z")
Using Logstash to get information from Oracle Enterprise Manager, keep getting an error relating to multi\_recieve with 'block in start\_workers' repeating over and over whenever Logstash tries again. I have the below conf… --- ## [Search for string starting with S-1-5-21](https://discuss.elastic.co/t/search-for-string-starting-with-s-1-5-21/215924)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 2\ **Last updated:** [January 23, 2020, 1:54pm UTC](https://discuss.elastic.co/t/search-for-string-starting-with-s-1-5-21/215924 "2020-01-23T13:54:46Z")
I am storing users SID and ACLs in elastic but when I try to search for group Users (SID: S-1-5-31-\*) it returns all users that contain S or 1 or 5. If used SID.keyword you have you put the exact match SID you cant sepe… --- ## [Wrong argument type string expected Timestamp](https://discuss.elastic.co/t/wrong-argument-type-string-expected-timestamp/216229)
**Author:** [@morpheus](https://discuss.elastic.co/u/morpheus)\ **Replies:** 1\ **Last updated:** [January 23, 2020, 1:53pm UTC](https://discuss.elastic.co/t/wrong-argument-type-string-expected-timestamp/216229 "2020-01-23T13:53:51Z")
Greetings, I have seen other similar threads to this but not able to solve my problem, I am getting the error: \[2020-01-22T10:45:38,409\]\[WARN \]\[logstash.inputs.gelf \] Gelf (tcp): client socket failed. {:exception=\>… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1667) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1669)