# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1768 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1769 --- ## [My index is giving shard error](https://discuss.elastic.co/t/my-index-is-giving-shard-error/208681)
**Author:** [@SheetalRIL](https://discuss.elastic.co/u/SheetalRIL)\ **Replies:** 2\ **Last updated:** [November 21, 2019, 4:53am UTC](https://discuss.elastic.co/t/my-index-is-giving-shard-error/208681 "2019-11-21T04:53:31Z")
Whenever I try to make a filter field my index is giving shard failed error. Where 'labels.is\_error' is a Boolean field with true and false as its 2 answers. The filter field is - doc\['labels.is\_error'\].value == true ?… --- ## [How to add default attribute with value in ES](https://discuss.elastic.co/t/how-to-add-default-attribute-with-value-in-es/208472)
**Author:** [@DeepakBhatt](https://discuss.elastic.co/u/DeepakBhatt)\ **Replies:** 1\ **Last updated:** [November 21, 2019, 4:19am UTC](https://discuss.elastic.co/t/how-to-add-default-attribute-with-value-in-es/208472 "2019-11-21T04:19:05Z")
Hi Team, I want to add default attribute with default value while adding any document to the index. For example: Suppose we have index abc and we are adding 10 attribute then there is one default attribute we want to a… --- ## [Full text search for when text/document is split chunks](https://discuss.elastic.co/t/full-text-search-for-when-text-document-is-split-chunks/208487)
**Author:** [@smerchant](https://discuss.elastic.co/u/smerchant)\ **Replies:** 1\ **Last updated:** [November 21, 2019, 4:14am UTC](https://discuss.elastic.co/t/full-text-search-for-when-text-document-is-split-chunks/208487 "2019-11-21T04:14:37Z")
We have large number of books and we would like to store each book (size of the single book itself could be very large) into small chucks/sections (let's say between 300 to 500 words). I am not sure how search would wor… --- ## [Search results behavior with boosts are different from 6.8 to 7.1](https://discuss.elastic.co/t/search-results-behavior-with-boosts-are-different-from-6-8-to-7-1/207981)
**Author:** [@Yann\_Lair](https://discuss.elastic.co/u/Yann_Lair)\ **Replies:** 1\ **Last updated:** [November 21, 2019, 3:39am UTC](https://discuss.elastic.co/t/search-results-behavior-with-boosts-are-different-from-6-8-to-7-1/207981 "2019-11-21T03:39:11Z")
Hi, We are currently doing the ground work to migrate from ES 6.8 to latest (which is 7.1 on AWS server side). We have built a new set of environment to be able to assess the impact of that change and we are seeing sear… --- ## [Event Correlation Using ELK](https://discuss.elastic.co/t/event-correlation-using-elk/208768)
**Author:** [@AnshuPal](https://discuss.elastic.co/u/AnshuPal)\ **Replies:** 1\ **Last updated:** [November 21, 2019, 3:10am UTC](https://discuss.elastic.co/t/event-correlation-using-elk/208768 "2019-11-21T03:10:34Z")
Hello, I have installed and configured all the ELK stack and i am also able to capture all the logs. Now i need to correlate the logs coming from different sources ex. Firewall, switches, Syslog and Operating sytems In… --- ## [Happy to see that there is a Elasticsearch meetup going to be happening at Dubai](https://discuss.elastic.co/t/happy-to-see-that-there-is-a-elasticsearch-meetup-going-to-be-happening-at-dubai/208800)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 1\ **Last updated:** [November 21, 2019, 3:03am UTC](https://discuss.elastic.co/t/happy-to-see-that-there-is-a-elasticsearch-meetup-going-to-be-happening-at-dubai/208800 "2019-11-21T03:03:18Z")
Hi All, Me based in UAE, was active in promoting Linux/open source here in UAE for the last 20 years. Very much happy to see the meetup events coming to Dubai, I have done RSVP , plus I have send the details to 3 of my… --- ## [Filebeatのログのwarning出力について](https://discuss.elastic.co/t/filebeat-warning/208683)
**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\ **Replies:** 4\ **Last updated:** [November 21, 2019, 2:51am UTC](https://discuss.elastic.co/t/filebeat-warning/208683 "2019-11-21T02:51:17Z")
filebeatログから、下記のWARNの出力を止めたいです。 filebeatとlogstashの設定で不足等が、あるのでしょうか？ 公式ドキュメントを確認したのですが、原因が不明でした。 可能でしたら、ご教示をお願いします。 ■filebeatのログ出力 2019-11-20T11:11:16.230Z WARN beater/filebeat.go:368 Filebeat is unable to load the I… --- ## [Nodejs elasticsearch index method insert data Error: Request error, retrying](https://discuss.elastic.co/t/nodejs-elasticsearch-index-method-insert-data-error-request-error-retrying/208799)
**Author:** [@xiaojin888](https://discuss.elastic.co/u/xiaojin888)\ **Replies:** 0\ **Last updated:** [November 21, 2019, 2:09am UTC](https://discuss.elastic.co/t/nodejs-elasticsearch-index-method-insert-data-error-request-error-retrying/208799 "2019-11-21T02:09:14Z")
I use nodejs insert data to elasticsearch！ Error: Request error, retrying POST http://192.168.2.69:9527/hexinprofit/\_doc/40153368 =\> connect ENOBUFS 192.168.2.69:9527 - Local (undefined:undefined) at Log.error (E:\\hex… --- ## [How can I see the full name of protocol in the index?(hyphen problem)](https://discuss.elastic.co/t/how-can-i-see-the-full-name-of-protocol-in-the-index-hyphen-problem/206994)
**Author:** [@lilyyy](https://discuss.elastic.co/u/lilyyy)\ **Replies:** 2\ **Last updated:** [November 21, 2019, 2:03am UTC](https://discuss.elastic.co/t/how-can-i-see-the-full-name-of-protocol-in-the-index-hyphen-problem/206994 "2019-11-21T02:03:32Z")
Hello. I now have an index on elasticsearch after converting the pcap file to json. One of the protocols has a full name of "s7comm-plus", but only "plus" is visible in the index. The other protocols look correctly. … --- ## [How to achieve multiple match\_phrase\_prefix queries using query\_string](https://discuss.elastic.co/t/how-to-achieve-multiple-match-phrase-prefix-queries-using-query-string/208743)
**Author:** [@ankur\_singla](https://discuss.elastic.co/u/ankur_singla)\ **Replies:** 0\ **Last updated:** [November 20, 2019, 4:48pm UTC](https://discuss.elastic.co/t/how-to-achieve-multiple-match-phrase-prefix-queries-using-query-string/208743 "2019-11-20T16:48:59Z")
Hi I have multiple match\_phrase\_prefix queries which I am trying to combine in one query. GET test/\_search { "query": { "bool": { "should": \[ { "match\_phrase\_prefix": { "test\_d… --- ## [Is it possible to use Elasticsearch to post Kibana graphs in Slack channel?](https://discuss.elastic.co/t/is-it-possible-to-use-elasticsearch-to-post-kibana-graphs-in-slack-channel/208792)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 0\ **Last updated:** [November 21, 2019, 12:51am UTC](https://discuss.elastic.co/t/is-it-possible-to-use-elasticsearch-to-post-kibana-graphs-in-slack-channel/208792 "2019-11-21T00:51:32Z")
I am using Python 3.7 and Elasticsearch 7.3.2 for indexing and querying data, then I send the data to Slack as text. I was wondering if it is possible to get the data as a graph and post the picture/pdf in Slack? Also, … --- ## [Mesh Configuration](https://discuss.elastic.co/t/mesh-configuration/208609)
**Author:** [@JohnM](https://discuss.elastic.co/u/JohnM)\ **Replies:** 6\ **Last updated:** [November 20, 2019, 11:23pm UTC](https://discuss.elastic.co/t/mesh-configuration/208609 "2019-11-20T23:23:47Z")
Hi everyone, I thought this works but it seems not.. Network devices send syslog to Logstash-1 and Logstash-2 So Logstash-1 and Logstash-2 have same logs received. \< Confirmed. Logstash-1 sends logs to ES-A cluster (… --- ## [Database pulls are getting confused?](https://discuss.elastic.co/t/database-pulls-are-getting-confused/208762)
**Author:** [@mbrown007](https://discuss.elastic.co/u/mbrown007)\ **Replies:** 2\ **Last updated:** [November 20, 2019, 11:04pm UTC](https://discuss.elastic.co/t/database-pulls-are-getting-confused/208762 "2019-11-20T23:04:10Z")
It appears that the second database call is getting data from the first one. 32-db.conf input { jdbc { #jdbc\_driver\_library =\> "/etc/logstash/mysql-connector-java-8.0.18.jar" jdbc\_driver\_class =\> "com.mysql.jdbc.Dri… --- ## [Dashboard per environment (Continued)](https://discuss.elastic.co/t/dashboard-per-environment-continued/208780)
**Author:** [@Mike.Heyns](https://discuss.elastic.co/u/Mike.Heyns)\ **Replies:** 1\ **Last updated:** [November 20, 2019, 10:04pm UTC](https://discuss.elastic.co/t/dashboard-per-environment-continued/208780 "2019-11-20T22:04:18Z")
I'd like to follow up on the original post here: https://discuss.elastic.co/t/dashboard-per-environment/54330 It has been over three years since then and I'd like to know what the general solution to this problem is as … --- ## [Watcher query current index by week](https://discuss.elastic.co/t/watcher-query-current-index-by-week/208750)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 6\ **Last updated:** [November 20, 2019, 9:10pm UTC](https://discuss.elastic.co/t/watcher-query-current-index-by-week/208750 "2019-11-20T21:10:55Z")
I'm trying to create a watcher that will query the current index and indexes are rolled over each week with a format of flows-2019.46. I'm having troubles trying to get that expression to work in a watcher and could use … --- ## [Reproduce visualisation in dashboard](https://discuss.elastic.co/t/reproduce-visualisation-in-dashboard/206952)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 3\ **Last updated:** [November 20, 2019, 8:47pm UTC](https://discuss.elastic.co/t/reproduce-visualisation-in-dashboard/206952 "2019-11-20T20:47:26Z")
Hello, This is a screenshot of the load of one of our nodes in our monitoring cluster: I really like this way of presenting stuff and I was wondering if it is possible to reproduce this kind of visualisation in Kiban… --- ## [Shard Allocation after new indexes is created](https://discuss.elastic.co/t/shard-allocation-after-new-indexes-is-created/207162)
**Author:** [@Marcell0e](https://discuss.elastic.co/u/Marcell0e)\ **Replies:** 5\ **Last updated:** [November 20, 2019, 8:47pm UTC](https://discuss.elastic.co/t/shard-allocation-after-new-indexes-is-created/207162 "2019-11-20T20:47:03Z")
When my indexes rolled over nothing is being written to the new index. How can I fix this? --- ## [Visualizations - elasticsearch/\_cat/Indices not found](https://discuss.elastic.co/t/visualizations-elasticsearch-cat-indices-not-found/208641)
**Author:** [@Gergely\_Ujvari](https://discuss.elastic.co/u/Gergely_Ujvari)\ **Replies:** 2\ **Last updated:** [November 20, 2019, 8:31pm UTC](https://discuss.elastic.co/t/visualizations-elasticsearch-cat-indices-not-found/208641 "2019-11-20T20:31:24Z")
Using Kibana 7.3.2 I'm trying to create a plugin which would embed saved visualizations. I used the example plugin, and I'm getting the following exception from the embedder: http://localhost:5601/epg/elasticsearch/\_c… --- ## [Remove \_id field from having fielddata](https://discuss.elastic.co/t/remove-id-field-from-having-fielddata/208595)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 3\ **Last updated:** [November 20, 2019, 8:28pm UTC](https://discuss.elastic.co/t/remove-id-field-from-having-fielddata/208595 "2019-11-20T20:28:00Z")
I'm currently getting huge fielddata stored in RAM when a user does an aggregation on the \_id field. I'd like to prevent that from happening because it breaks the system down if someone does that. Is there any recommenda… --- ## [Release announcement email](https://discuss.elastic.co/t/release-announcement-email/208706)
**Author:** [@Pradyumna\_Achar](https://discuss.elastic.co/u/Pradyumna_Achar)\ **Replies:** 2\ **Last updated:** [November 20, 2019, 8:26pm UTC](https://discuss.elastic.co/t/release-announcement-email/208706 "2019-11-20T20:26:34Z")
I would be keen to receive an email when new Elasticsearch features are released. Is there such a mailer list? Or a way to opt in to such emails? --- ## [ESMS Performance issue](https://discuss.elastic.co/t/esms-performance-issue/208747)
**Author:** [@Gopal\_Chauhan](https://discuss.elastic.co/u/Gopal_Chauhan)\ **Replies:** 3\ **Last updated:** [November 20, 2019, 8:07pm UTC](https://discuss.elastic.co/t/esms-performance-issue/208747 "2019-11-20T20:07:34Z")
Hi , We were facing lot of performance issue in our cluster (elastic version 7.1, 3 md and 2d on linux boxes). Then we created two separate ingest node but still performance issue was there. Our nodes were going own ra… --- ## [Logstash not work(](https://discuss.elastic.co/t/logstash-not-work/208664)
**Author:** [@jleLLlka\_Kozlov](https://discuss.elastic.co/u/jleLLlka_Kozlov)\ **Replies:** 6\ **Last updated:** [November 20, 2019, 7:45pm UTC](https://discuss.elastic.co/t/logstash-not-work/208664 "2019-11-20T19:45:51Z")
\[2019-11-20T09:31:30,990\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.version"=\>"6.8.4"} \[2019-11-20T09:31:37,888\]\[INFO \]\[logstash.pipeline \] Starting pipeline {:pipeline\_id=\>"main", "pipeline.… --- ## [Partial data visualization is looking bad for last 15 minutes / 30min](https://discuss.elastic.co/t/partial-data-visualization-is-looking-bad-for-last-15-minutes-30min/205839)
**Author:** [@nareshreddyp](https://discuss.elastic.co/u/nareshreddyp)\ **Replies:** 3\ **Last updated:** [November 20, 2019, 7:38pm UTC](https://discuss.elastic.co/t/partial-data-visualization-is-looking-bad-for-last-15-minutes-30min/205839 "2019-11-20T19:38:42Z")
Hi, I have tried with both Line Visualization or TSVB For longer timestamps (Greater than 4 hours) - The Visualization is ok For Shorter timestamps (Last 15min / 30min) - The Visualization is bad Tried Drop Parti… --- ## [Question about the getting started tutorial](https://discuss.elastic.co/t/question-about-the-getting-started-tutorial/208757)
**Author:** [@Taiv13](https://discuss.elastic.co/u/Taiv13)\ **Replies:** 0\ **Last updated:** [November 20, 2019, 6:47pm UTC](https://discuss.elastic.co/t/question-about-the-getting-started-tutorial/208757 "2019-11-20T18:47:44Z")
I'm currently working my way through the Logstash tutorial, but I've ran into something puzzling. In the "Parsing Logs with Logstash" section, I've gotten to the point where I am reading from Filebeat. I am reading cor… --- ## [Sorting with from and to with search\_after](https://discuss.elastic.co/t/sorting-with-from-and-to-with-search-after/208755)
**Author:** [@dkishore](https://discuss.elastic.co/u/dkishore)\ **Replies:** 0\ **Last updated:** [November 20, 2019, 6:39pm UTC](https://discuss.elastic.co/t/sorting-with-from-and-to-with-search-after/208755 "2019-11-20T18:39:02Z")
Hi How to sort on all the available values on an index with from and to with search\_after like below when we use from:0 it always picks the 100 records and performs a sort on that chunk of items from:0, "size": 100, … --- ## [Change a string in a field for a number](https://discuss.elastic.co/t/change-a-string-in-a-field-for-a-number/208735)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 2\ **Last updated:** [November 20, 2019, 6:16pm UTC](https://discuss.elastic.co/t/change-a-string-in-a-field-for-a-number/208735 "2019-11-20T18:16:42Z")
Hi, from time to time In the milliseconds field( that is for numbers ) appears the string: "disabled", what Im trying to do, is that every time the string "disabled" appears, change for it the number "0" I have tried wi… --- ## [Log with @timestamp value in it - getting errors](https://discuss.elastic.co/t/log-with-timestamp-value-in-it-getting-errors/208748)
**Author:** [@Chrz](https://discuss.elastic.co/u/Chrz)\ **Replies:** 1\ **Last updated:** [November 20, 2019, 5:54pm UTC](https://discuss.elastic.co/t/log-with-timestamp-value-in-it-getting-errors/208748 "2019-11-20T17:54:13Z")
Hi, Im processing logfile with logstash which unfortunately contains @timestamp value { "@timestamp": "2019-11-20 17:27:02.894", "c": "386", "chl": "B", "event": "Content", "time": "290", "calculationStartDate": "2019-… --- ## [400, 'mapper\_parsing\_exception', 'No type specified for field \[file\]'](https://discuss.elastic.co/t/400-mapper-parsing-exception-no-type-specified-for-field-file/208745)
**Author:** [@chari](https://discuss.elastic.co/u/chari)\ **Replies:** 0\ **Last updated:** [November 20, 2019, 5:15pm UTC](https://discuss.elastic.co/t/400-mapper-parsing-exception-no-type-specified-for-field-file/208745 "2019-11-20T17:15:37Z")
I am using the following code to create an index. Don't understand what is required to fix the error. es.indices.create( index= "prestotest", body= { "mappings": { "properties": { "file" : { "properties ": { "url… --- ## [How to Upgrade ELK from 7.1.0 to the latest version](https://discuss.elastic.co/t/how-to-upgrade-elk-from-7-1-0-to-the-latest-version/208736)
**Author:** [@kamalesh](https://discuss.elastic.co/u/kamalesh)\ **Replies:** 1\ **Last updated:** [November 20, 2019, 5:39pm UTC](https://discuss.elastic.co/t/how-to-upgrade-elk-from-7-1-0-to-the-latest-version/208736 "2019-11-20T17:39:29Z")
Hi All , Can anyone please help me on how to upgrade the ELK instance from 7.1.0 to the latest version with step by step procedure. If already had any post on the same, Please do share the thread . Thanks in Advance… --- ## [Elasticsearch cluster status is Red with unassigned shards](https://discuss.elastic.co/t/elasticsearch-cluster-status-is-red-with-unassigned-shards/208726)
**Author:** [@adityacs](https://discuss.elastic.co/u/adityacs)\ **Replies:** 2\ **Last updated:** [November 20, 2019, 4:33pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-status-is-red-with-unassigned-shards/208726 "2019-11-20T16:33:04Z")
Hi Team, We use ES 6.4.3 and we see below cluster status {"cluster\_name":"elasticsearch","status":"red","timed\_out":false,"number\_of\_nodes":5,"number\_of\_data\_nodes":2,"active\_primary\_shards":3150,"active\_shards":3161,"… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1767) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1769)