# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1981

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1982

---

## [Elasticsearch Java RestHighLevelClient not sending authorization with every search request](https://discuss.elastic.co/t/elasticsearch-java-resthighlevelclient-not-sending-authorization-with-every-search-request/193747)

<div class="topic-metadata">

**Author:** [@steghio](https://discuss.elastic.co/u/steghio)\
**Replies:** 0\
**Last updated:** [August 5, 2019, 7:51am UTC](https://discuss.elastic.co/t/elasticsearch-java-resthighlevelclient-not-sending-authorization-with-every-search-request/193747 "2019-08-05T07:51:35Z")

</div>

As described here: https://stackoverflow.com/questions/57222549/elasticsearch-java-resthighlevelclient-not-sending-authorization-with-every-sear Do you guys have an idea of what we might be missing? Thanks and cheers

---

## [Decorate\_events returns the literal strin](https://discuss.elastic.co/t/decorate-events-returns-the-literal-strin/193574)

<div class="topic-metadata">

**Author:** [@mirajp](https://discuss.elastic.co/u/mirajp)\
**Replies:** 2\
**Last updated:** [August 5, 2019, 7:34am UTC](https://discuss.elastic.co/t/decorate-events-returns-the-literal-strin/193574 "2019-08-05T07:34:06Z")

</div>

Hi, I'm trying to use the decorate\_events feature in logstash to pull kafka details and put them into Elastic search. The issue is, in Elastic search, the value is being set to "%{\[metadata\]\[kafka\]\[topic\]}" rather than …

---

## [Elasticsearch .NET 7.1.0 issue](https://discuss.elastic.co/t/elasticsearch-net-7-1-0-issue/193674)

<div class="topic-metadata">

**Author:** [@roman.pavliuk](https://discuss.elastic.co/u/roman.pavliuk)\
**Replies:** 9\
**Last updated:** [August 5, 2019, 7:11am UTC](https://discuss.elastic.co/t/elasticsearch-net-7-1-0-issue/193674 "2019-08-05T07:11:30Z")

</div>

I have updated my project into last elasticsearch version. But after this, when I trying to get data from my elastic, I have next exception. My nugets: Elasticsearch.Net v7.1.0, NEST 7.1.0 Before update, when I using 6.7…

---

## [Duplicate field during reindex](https://discuss.elastic.co/t/duplicate-field-during-reindex/193534)

<div class="topic-metadata">

**Author:** [@GabrielM](https://discuss.elastic.co/u/GabrielM)\
**Replies:** 3\
**Last updated:** [August 5, 2019, 7:09am UTC](https://discuss.elastic.co/t/duplicate-field-during-reindex/193534 "2019-08-05T07:09:30Z")

</div>

Hello ! I am doing a reindex from a 1.3.4 cluster to a 7.1.1 cluster but I have an error during the reindex : curl -X POST "$ES/\_reindex?wait\_for\_completion=true" -H 'Content-Type: application/json' -d' { …

---

## [How to order by child nodes in ElasticSearch](https://discuss.elastic.co/t/how-to-order-by-child-nodes-in-elasticsearch/193729)

<div class="topic-metadata">

**Author:** [@gatisrid](https://discuss.elastic.co/u/gatisrid)\
**Replies:** 0\
**Last updated:** [August 5, 2019, 6:22am UTC](https://discuss.elastic.co/t/how-to-order-by-child-nodes-in-elasticsearch/193729 "2019-08-05T06:22:29Z")

</div>

I'm trying to sort some products by child nodes. I have products, for each product has child node "stock" (contains productId (join field), stockId, stockQuantity, stockOnTheWay...) there can be multiple child nodes and …

---

## [java.lang.IllegalStateException: The index \[\[.kibana/t1LHjtFXSKWK9oD76iBYIQ\]\]](https://discuss.elastic.co/t/java-lang-illegalstateexception-the-index-kibana-t1lhjtfxskwk9od76ibyiq/193439)

<div class="topic-metadata">

**Author:** [@Trevorp](https://discuss.elastic.co/u/Trevorp)\
**Replies:** 3\
**Last updated:** [August 5, 2019, 6:14am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-the-index-kibana-t1lhjtfxskwk9od76ibyiq/193439 "2019-08-05T06:14:43Z")

</div>

I am trying to install Elasticsearch on one of our servers. It was used for an upgrade test of ELK before. I now want to put a clean install ELK 7.3 on this server. I deleted all the old ELK files. Or so i thought but n…

---

## [フレーズ検索時に展開された類義語をfvhでハイライトしたい](https://discuss.elastic.co/t/fvh/193433)

<div class="topic-metadata">

**Author:** [@begin](https://discuss.elastic.co/u/begin)\
**Replies:** 4\
**Last updated:** [August 5, 2019, 6:12am UTC](https://discuss.elastic.co/t/fvh/193433 "2019-08-05T06:12:47Z")

</div>

Elasticsearch:7.3.0です。 phrase検索時、synonym\_graphで展開された類義語がfvhでhighlightされません。 下記の検索クエリにおいて、いずれかの部分を書き換えるとハイライトがつきます。 ・単純なMatchクエリでは、類義語もfvhでhighlightされる。(match\_phrase→match) ・類義語以外はfvhでhighlightされる。("value": "ケータイ"→"va…

---

## [Fully automated upgrading of Elasticsearch cluster](https://discuss.elastic.co/t/fully-automated-upgrading-of-elasticsearch-cluster/193665)

<div class="topic-metadata">

**Author:** [@haotian9850](https://discuss.elastic.co/u/haotian9850)\
**Replies:** 3\
**Last updated:** [August 5, 2019, 6:07am UTC](https://discuss.elastic.co/t/fully-automated-upgrading-of-elasticsearch-cluster/193665 "2019-08-05T06:07:42Z")

</div>

Hey there, currently working on a project that aims to automate upgrading of an Elasticsearch cluster (a typical cluster size is ~20 nodes, the majority of which are master-eligible) to a higher minor version (eg. 7.1.1 …

---

## [Elasticsearch and Kibana version 6 and 7 Windows 2019 support](https://discuss.elastic.co/t/elasticsearch-and-kibana-version-6-and-7-windows-2019-support/192844)

<div class="topic-metadata">

**Author:** [@ropal](https://discuss.elastic.co/u/ropal)\
**Replies:** 1\
**Last updated:** [August 5, 2019, 5:08am UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-version-6-and-7-windows-2019-support/192844 "2019-08-05T05:08:45Z")

</div>

I could see from the support matrix that ES version starting from 5.5.x is supported on Windows Server 2016. Just wanted to know if it is supported in Windows Server 2019 as well? Are there any potential issues that were…

---

## [Solaris 10 Syslog cannot forwarding custom logs to logstatsh](https://discuss.elastic.co/t/solaris-10-syslog-cannot-forwarding-custom-logs-to-logstatsh/193712)

<div class="topic-metadata">

**Author:** [@vinaymukkala](https://discuss.elastic.co/u/vinaymukkala)\
**Replies:** 0\
**Last updated:** [August 5, 2019, 3:54am UTC](https://discuss.elastic.co/t/solaris-10-syslog-cannot-forwarding-custom-logs-to-logstatsh/193712 "2019-08-05T03:54:30Z")

</div>

Hi All, Any one Could you help provide your expertise to send the custom logs ( /app/logs/mqaudit.logs \*) forwarding to logstagsh server for ELK. We tried to use the syslog ( soalris 10 sparc system) but did not find t…

---

## [Snapshot failed](https://discuss.elastic.co/t/snapshot-failed/193218)

<div class="topic-metadata">

**Author:** [@elk3](https://discuss.elastic.co/u/elk3)\
**Replies:** 3\
**Last updated:** [August 1, 2019, 6:51am UTC](https://discuss.elastic.co/t/snapshot-failed/193218 "2019-08-01T06:51:19Z")

</div>

{ "error": { "root\_cause": \[ { "type": "snapshot\_restore\_exception", "reason": "\[student\_backup\_clay:student\_backup\_clay/Wdlq3XOnTWuXGxjTqZt0cQ\] the snapshot was created with Elasticsearch ver…

---

## [All output fail if one of tcp outputs fails](https://discuss.elastic.co/t/all-output-fail-if-one-of-tcp-outputs-fails/193703)

<div class="topic-metadata">

**Author:** [@dickens88](https://discuss.elastic.co/u/dickens88)\
**Replies:** 4\
**Last updated:** [August 5, 2019, 3:05am UTC](https://discuss.elastic.co/t/all-output-fail-if-one-of-tcp-outputs-fails/193703 "2019-08-05T03:05:33Z")

</div>

Guys, my logstash configuration has multiply outputs, like this: input{ syslog { port =\> 514 } } output{ tcp { host =\> "192.168.1.1" port =\> 1517 codec =\> line { format =\> "%{mes…

---

## [Can we use Filebeat with ssl and logstash netflow module?](https://discuss.elastic.co/t/can-we-use-filebeat-with-ssl-and-logstash-netflow-module/193452)

<div class="topic-metadata">

**Author:** [@jsandri](https://discuss.elastic.co/u/jsandri)\
**Replies:** 1\
**Last updated:** [August 5, 2019, 1:58am UTC](https://discuss.elastic.co/t/can-we-use-filebeat-with-ssl-and-logstash-netflow-module/193452 "2019-08-05T01:58:18Z")

</div>

Hey! I use Filebeat with netflow input and send logs to logstash. So far so good but then I try to setup the logstash netflow module and now some issues appear. First Filebeat sends logs over TCP and logstash netflow mo…

---

## [Elastic Search Hierarchical Data Need Helpp](https://discuss.elastic.co/t/elastic-search-hierarchical-data-need-helpp/193466)

<div class="topic-metadata">

**Author:** [@Bidzina\_Goginashvili](https://discuss.elastic.co/u/Bidzina_Goginashvili)\
**Replies:** 2\
**Last updated:** [August 4, 2019, 11:40pm UTC](https://discuss.elastic.co/t/elastic-search-hierarchical-data-need-helpp/193466 "2019-08-04T23:40:15Z")

</div>

I have a little problem with elastic search... I have products table.which looks something like this ID NAME MODELNAME IsParentModel 1 IPhone 7 16 gb IPhone 7 1 2 IPhone 7 32 gb IPhone 7 0 3 IPhone 7 64 gb IPhone 7 …

---

## [When elasticsearch gets full, what do I do?](https://discuss.elastic.co/t/when-elasticsearch-gets-full-what-do-i-do/193555)

<div class="topic-metadata">

**Author:** [@madcvvs](https://discuss.elastic.co/u/madcvvs)\
**Replies:** 1\
**Last updated:** [August 4, 2019, 11:30pm UTC](https://discuss.elastic.co/t/when-elasticsearch-gets-full-what-do-i-do/193555 "2019-08-04T23:30:32Z")

</div>

Hello! I have an elasticsearch + kibana installation and soon I'll start handling lots of data. The server I'm using has 8GB of RAM, so after a while I will have used up using all the servers RAM. When this happens I wa…

---

## [Avro SchemaParseError](https://discuss.elastic.co/t/avro-schemaparseerror/190757)

<div class="topic-metadata">

**Author:** [@DSPN](https://discuss.elastic.co/u/DSPN)\
**Replies:** 2\
**Last updated:** [August 4, 2019, 11:13pm UTC](https://discuss.elastic.co/t/avro-schemaparseerror/190757 "2019-08-04T23:13:57Z")

</div>

Hi, I'm using logstash to load logs from Kafka to Elastic. Running logstash on openshift. I'm receiving the below error when trying to read the logs from the kafka topic. Can anyone help me figure what I'm missing here. …

---

## [Number of shards on a ElasticSearch node](https://discuss.elastic.co/t/number-of-shards-on-a-elasticsearch-node/193648)

<div class="topic-metadata">

**Author:** [@Jitendra\_Kumhar](https://discuss.elastic.co/u/Jitendra_Kumhar)\
**Replies:** 5\
**Last updated:** [August 4, 2019, 7:39pm UTC](https://discuss.elastic.co/t/number-of-shards-on-a-elasticsearch-node/193648 "2019-08-04T19:39:06Z")

</div>

I have 4 data nodes.And for a given index I had set number of shards=4 What does these numbers in blue boxes means.Why it sums to more than 4?

---

## [How elasticsearch create rest api? Please explain?](https://discuss.elastic.co/t/how-elasticsearch-create-rest-api-please-explain/193676)

<div class="topic-metadata">

**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\
**Replies:** 2\
**Last updated:** [August 4, 2019, 1:52pm UTC](https://discuss.elastic.co/t/how-elasticsearch-create-rest-api-please-explain/193676 "2019-08-04T13:52:39Z")

</div>

i am new to use elasticsearch rest api.

---

## [How to Authenticate against v0.1 Rest API in ECE](https://discuss.elastic.co/t/how-to-authenticate-against-v0-1-rest-api-in-ece/192224)

<div class="topic-metadata">

**Author:** [@seizste](https://discuss.elastic.co/u/seizste)\
**Replies:** 2\
**Last updated:** [August 4, 2019, 3:01pm UTC](https://discuss.elastic.co/t/how-to-authenticate-against-v0-1-rest-api-in-ece/192224 "2019-08-04T15:01:52Z")

</div>

Continuing the discussion from Reset Elasticsearch Deployment Passsword using API: Finally got time to implement this, but looks like authentication to a v0.1 endpoint is a bit different then to the v1.0 APIs in ECE. A…

---

## [7.2 to 7.3 problems "does not have a Release file."](https://discuss.elastic.co/t/7-2-to-7-3-problems-does-not-have-a-release-file/193685)

<div class="topic-metadata">

**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\
**Replies:** 0\
**Last updated:** [August 4, 2019, 2:43pm UTC](https://discuss.elastic.co/t/7-2-to-7-3-problems-does-not-have-a-release-file/193685 "2019-08-04T14:43:13Z")

</div>

Ubuntu 16.04.6 LTS Trying to update elasticsearch from 7.2 to 7.3 ... W: The repository 'https://artifacts.elastic.co/packages/7.x/apt stable Release' does not have a Release file. N: Data from such a repository can't …

---

## [Elastic UTC time](https://discuss.elastic.co/t/elastic-utc-time/191877)

<div class="topic-metadata">

**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\
**Replies:** 5\
**Last updated:** [August 4, 2019, 1:46pm UTC](https://discuss.elastic.co/t/elastic-utc-time/191877 "2019-08-04T13:46:23Z")

</div>

I have a small issue with date time stamps. We currently pass date of birth to Elastic as YYYY-MM-DDT00:00:00 for example 2019-08-08T00:00:00 However, when in Kibana this is interpreted as UTC (looks like) because the …

---

## [\-XX:OnOutOfMemoryError not working if Elasticsearch starts with -d paramater](https://discuss.elastic.co/t/xx-onoutofmemoryerror-not-working-if-elasticsearch-starts-with-d-paramater/193675)

<div class="topic-metadata">

**Author:** [@Prashant\_Rana](https://discuss.elastic.co/u/Prashant_Rana)\
**Replies:** 0\
**Last updated:** [August 4, 2019, 1:09pm UTC](https://discuss.elastic.co/t/xx-onoutofmemoryerror-not-working-if-elasticsearch-starts-with-d-paramater/193675 "2019-08-04T13:09:03Z")

</div>

Hi, I am trying to execute a file when OutOfMemoryError occurs with -XX:OnOutOfMemoryError= option in jvm.options file. If I am starting elasticsearch without "-d" parameter from command line(elasticsearch) then it is …

---

## [Data too large, data for \[\_id\] would be \[12177806640/11.3gb\]](https://discuss.elastic.co/t/data-too-large-data-for-id-would-be-12177806640-11-3gb/193667)

<div class="topic-metadata">

**Author:** [@X\_Calibur](https://discuss.elastic.co/u/X_Calibur)\
**Replies:** 0\
**Last updated:** [August 4, 2019, 9:16am UTC](https://discuss.elastic.co/t/data-too-large-data-for-id-would-be-12177806640-11-3gb/193667 "2019-08-04T09:16:26Z")

</div>

Hi, Just had a cluster failure with the above error message. I understand I need to change or duplicate \_id field and disable fielddata on it. Couple of questions: 1 - How can I tell what search query\\dashboard etc h…

---

## [Logstash like forwarder of beats. Why? Benefits?](https://discuss.elastic.co/t/logstash-like-forwarder-of-beats-why-benefits/193202)

<div class="topic-metadata">

**Author:** [@sergiodcm00](https://discuss.elastic.co/u/sergiodcm00)\
**Replies:** 4\
**Last updated:** [August 4, 2019, 8:30am UTC](https://discuss.elastic.co/t/logstash-like-forwarder-of-beats-why-benefits/193202 "2019-08-04T08:30:18Z")

</div>

Hello, I'm newby in ELK world. I'm using beats (filebeat and others) with output to Logstash. LS only forward to ES ingest node (https://www.elastic.co/guide/en/logstash/current/use-ingest-pipelines.html): input { be…

---

## [Hive integration with Elasticsearch 7.2](https://discuss.elastic.co/t/hive-integration-with-elasticsearch-7-2/192241)

<div class="topic-metadata">

**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\
**Replies:** 2\
**Last updated:** [August 2, 2019, 6:56am UTC](https://discuss.elastic.co/t/hive-integration-with-elasticsearch-7-2/192241 "2019-08-02T06:56:28Z")

</div>

Dear All, After several rounds of attempts I was able to get half way through with Integrating Hive & I have been trying to get Hive (Hive 1.2.1000.2.6.0.3-8) integrated with Elasticsearch 7.2 but not yet successful. I…

---

## [Will disabling shard allocation on one node affect cluster health?](https://discuss.elastic.co/t/will-disabling-shard-allocation-on-one-node-affect-cluster-health/192296)

<div class="topic-metadata">

**Author:** [@haotian9850](https://discuss.elastic.co/u/haotian9850)\
**Replies:** 2\
**Last updated:** [August 4, 2019, 7:58am UTC](https://discuss.elastic.co/t/will-disabling-shard-allocation-on-one-node-affect-cluster-health/192296 "2019-08-04T07:58:51Z")

</div>

Hey there! I am working on a project that automates elasticsearch cluster upgrade (7.1.1 =\> 7.2.0). From reading the documentations on cluster upgrading, it seems that a reasonable approach to upgrade the entire cluster …

---

## [How to get count of returned data in match query?](https://discuss.elastic.co/t/how-to-get-count-of-returned-data-in-match-query/193618)

<div class="topic-metadata">

**Author:** [@Bidzina\_Goginashvili](https://discuss.elastic.co/u/Bidzina_Goginashvili)\
**Replies:** 3\
**Last updated:** [August 4, 2019, 7:29am UTC](https://discuss.elastic.co/t/how-to-get-count-of-returned-data-in-match-query/193618 "2019-08-04T07:29:53Z")

</div>

GET index/\_search { "query": {"terms": { "id": \[ "114383" \] }} get the count of this matched data } and also get the count of this GET products/\_search { "query": { "match" : { "inStorage": "true" …

---

## [Install Kibana as a service in centos](https://discuss.elastic.co/t/install-kibana-as-a-service-in-centos/193244)

<div class="topic-metadata">

**Author:** [@cool\_guy99](https://discuss.elastic.co/u/cool_guy99)\
**Replies:** 2\
**Last updated:** [August 4, 2019, 3:06am UTC](https://discuss.elastic.co/t/install-kibana-as-a-service-in-centos/193244 "2019-08-04T03:06:08Z")

</div>

Hi, I am using rpm to install kibana. For starting the service, Im using another user and not "kibana" user. Its throwing an error mentioning that "kibana" user does not exist. Is it possible for editing the option and …

---

## [Dissect field with unknown length?](https://discuss.elastic.co/t/dissect-field-with-unknown-length/193643)

<div class="topic-metadata">

**Author:** [@eclipsed450](https://discuss.elastic.co/u/eclipsed450)\
**Replies:** 2\
**Last updated:** [August 3, 2019, 5:37pm UTC](https://discuss.elastic.co/t/dissect-field-with-unknown-length/193643 "2019-08-03T17:37:00Z")

</div>

Hi, Based on other posts I've made, I've learned that I should be able dissect a field (in this case, it's eventData.ObjectName into sub-fields, however I'm having an issue where some messages don't have the full length…

---

## [Get unique values from a field of all docs matching a top\_hits aggregation](https://discuss.elastic.co/t/get-unique-values-from-a-field-of-all-docs-matching-a-top-hits-aggregation/193638)

<div class="topic-metadata">

**Author:** [@rf91](https://discuss.elastic.co/u/rf91)\
**Replies:** 0\
**Last updated:** [August 3, 2019, 3:23pm UTC](https://discuss.elastic.co/t/get-unique-values-from-a-field-of-all-docs-matching-a-top-hits-aggregation/193638 "2019-08-03T15:23:44Z")

</div>

Hi, I'm new to ElasticSearch and am stuck with a query problem. I have docs of the following form (simplified): { ... "mailProvider": "gmail.com", "mxHost1": { "name": "aspmx.l.google.com", …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1980)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1982)
