# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1985

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1986

---

## [Error: undefined method \`to\_sym' for nil:NilClass for Postgres JDBC](https://discuss.elastic.co/t/error-undefined-method-to-sym-for-nil-nilclass-for-postgres-jdbc/193390)

<div class="topic-metadata">

**Author:** [@Ale\_Ksa](https://discuss.elastic.co/u/Ale_Ksa)\
**Replies:** 5\
**Last updated:** [August 1, 2019, 7:57pm UTC](https://discuss.elastic.co/t/error-undefined-method-to-sym-for-nil-nilclass-for-postgres-jdbc/193390 "2019-08-01T19:57:31Z")

</div>

Hello! I am getting an undefined method error when using Postgres JDBC in Logstash. I've put the debug output on Pastebin. And here is the config itself: input { # pg\_stat\_database jdbc { jdbc\_driver\_library =\> "" …

---

## [Remote reindex with Search Guard basic auth](https://discuss.elastic.co/t/remote-reindex-with-search-guard-basic-auth/192713)

<div class="topic-metadata">

**Author:** [@Onncek](https://discuss.elastic.co/u/Onncek)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 6:54pm UTC](https://discuss.elastic.co/t/remote-reindex-with-search-guard-basic-auth/192713 "2019-08-01T18:54:06Z")

</div>

Hello, I know SearchGuard is not an Elastic product, but I still try to ask if anyone knows how to do remote reindex when I using Search Guard. SG is used with Basic Authentication and with my own certificates. Could so…

---

## [Grok then test nested field](https://discuss.elastic.co/t/grok-then-test-nested-field/193389)

<div class="topic-metadata">

**Author:** [@paniccontrol](https://discuss.elastic.co/u/paniccontrol)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 6:39pm UTC](https://discuss.elastic.co/t/grok-then-test-nested-field/193389 "2019-08-01T18:39:21Z")

</div>

Hello, I'm encounter some issue on testing nested field after a grok. grok { match =\> { "message" =\> \[ ".\*(?\<event.action\>test) xxxx %{DATA:\[name\]}" \] } if ( "" in \[event\]\[action\] ) { mutate { remove\_field =\> "message"…

---

## [ElasticSearch missing documents by list of id's as size of list increases](https://discuss.elastic.co/t/elasticsearch-missing-documents-by-list-of-ids-as-size-of-list-increases/193382)

<div class="topic-metadata">

**Author:** [@Sakib\_Rahman](https://discuss.elastic.co/u/Sakib_Rahman)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 5:54pm UTC](https://discuss.elastic.co/t/elasticsearch-missing-documents-by-list-of-ids-as-size-of-list-increases/193382 "2019-08-01T17:54:34Z")

</div>

Copying over from SO. I am querying ElasticSearch by a long list of id's. I usually break this list down to chunks and then perform the query with a subset of the list and aggregate the results later. ES seems to be mis…

---

## [\[Kibana Plugin\]: Inject data (headers) from Kibana to the browser](https://discuss.elastic.co/t/kibana-plugin-inject-data-headers-from-kibana-to-the-browser/192283)

<div class="topic-metadata">

**Author:** [@Dasko](https://discuss.elastic.co/u/Dasko)\
**Replies:** 5\
**Last updated:** [August 1, 2019, 5:44pm UTC](https://discuss.elastic.co/t/kibana-plugin-inject-data-headers-from-kibana-to-the-browser/192283 "2019-08-01T17:44:25Z")

</div>

Hi guys, I'm looking for a way to make some data (headers received by the Kibana Server) available to the plugin front-end (re-use the headers to fetch some data through an external API). It is also worth noticing that…

---

## [Split "message" Field using Ruby](https://discuss.elastic.co/t/split-message-field-using-ruby/193375)

<div class="topic-metadata">

**Author:** [@jakecramer17](https://discuss.elastic.co/u/jakecramer17)\
**Replies:** 2\
**Last updated:** [August 1, 2019, 5:20pm UTC](https://discuss.elastic.co/t/split-message-field-using-ruby/193375 "2019-08-01T17:20:35Z")

</div>

My input with the type "sym" contains a single string of multiple syslog logs separated by the '\\r' character (which I'm guessing represents carriage return). I'm not focused on parsing each log yet. First, I need to sep…

---

## [Compute term frequency diff](https://discuss.elastic.co/t/compute-term-frequency-diff/193381)

<div class="topic-metadata">

**Author:** [@aczapszys](https://discuss.elastic.co/u/aczapszys)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 5:18pm UTC](https://discuss.elastic.co/t/compute-term-frequency-diff/193381 "2019-08-01T17:18:55Z")

</div>

I have an use case where I am comparing input titles to a corpus of titles to determine whether I have seen this title before. Using the default scoring match on the title field works great for ranking, but I also want …

---

## [Gork fpr the DNS qureu log](https://discuss.elastic.co/t/gork-fpr-the-dns-qureu-log/193331)

<div class="topic-metadata">

**Author:** [@unicxs\_support](https://discuss.elastic.co/u/unicxs_support)\
**Replies:** 2\
**Last updated:** [August 1, 2019, 3:44pm UTC](https://discuss.elastic.co/t/gork-fpr-the-dns-qureu-log/193331 "2019-08-01T15:44:16Z")

</div>

Hello Experts, I've below logstream data which indeed a DNS query data where i have a literal dot after view external: query: which usually referred to be an IP address or a domain address but here its coming as dot for…

---

## [java.io.IOException: Page file size is too small to hold elements](https://discuss.elastic.co/t/java-io-ioexception-page-file-size-is-too-small-to-hold-elements/193002)

<div class="topic-metadata">

**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\
**Replies:** 4\
**Last updated:** [August 1, 2019, 4:53pm UTC](https://discuss.elastic.co/t/java-io-ioexception-page-file-size-is-too-small-to-hold-elements/193002 "2019-08-01T16:53:50Z")

</div>

I am getting the below message on 7.2.0 logstash. I use the same pipeline i had for 6.x but with 7.2.0 i get the below error. Any ideas? root@d-gp2-es46-4:/var/log/logstash# cat logstash-plain.log \[2019-07-30T22:48:1…

---

## [Primary and Replica index keep appearing on the same node](https://discuss.elastic.co/t/primary-and-replica-index-keep-appearing-on-the-same-node/193377)

<div class="topic-metadata">

**Author:** [@RayS](https://discuss.elastic.co/u/RayS)\
**Replies:** 3\
**Last updated:** [August 1, 2019, 4:37pm UTC](https://discuss.elastic.co/t/primary-and-replica-index-keep-appearing-on-the-same-node/193377 "2019-08-01T16:37:32Z")

</div>

I run a 4 node cluster with 3 data nodes. The other node is used to load balance Kibana traffic. I keep getting Primary and Replica index on the same node and not sure how this is happening. Here is an example from a …

---

## [Delete and Re-Create Index with ES output plugin](https://discuss.elastic.co/t/delete-and-re-create-index-with-es-output-plugin/193359)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 5\
**Last updated:** [August 1, 2019, 4:15pm UTC](https://discuss.elastic.co/t/delete-and-re-create-index-with-es-output-plugin/193359 "2019-08-01T16:15:21Z")

</div>

Hi All I have a situation where my source dataset refreshes everyday, so there is need to first drop/delete the index manually using curl command and run the LS to create the index again. Is there any option where we c…

---

## [Metricbeat data from Logstash not showing up in Kibana](https://discuss.elastic.co/t/metricbeat-data-from-logstash-not-showing-up-in-kibana/193369)

<div class="topic-metadata">

**Author:** [@carson](https://discuss.elastic.co/u/carson)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 3:52pm UTC](https://discuss.elastic.co/t/metricbeat-data-from-logstash-not-showing-up-in-kibana/193369 "2019-08-01T15:52:20Z")

</div>

Hi all, I've just added Logstash to my ELK stack setup. I've got filebeat working, but metricbeat is causing trouble. When I navigate to the Infrastructure screen, I get an error in elasticsearch: "Caused by: java.lan…

---

## [XML timestamp extraction?](https://discuss.elastic.co/t/xml-timestamp-extraction/193221)

<div class="topic-metadata">

**Author:** [@eclipsed450](https://discuss.elastic.co/u/eclipsed450)\
**Replies:** 5\
**Last updated:** [August 1, 2019, 3:48pm UTC](https://discuss.elastic.co/t/xml-timestamp-extraction/193221 "2019-08-01T15:48:45Z")

</div>

I have the following in an XML event, and want to put it into it's own field, but none of the XMLPATH I've tried have worked. Help?? \<Event\> \<System\> ... \<TimeCreated SystemTime="2019-07…

---

## [Lostash Error](https://discuss.elastic.co/t/lostash-error/193357)

<div class="topic-metadata">

**Author:** [@Sourabh\_Kashyap](https://discuss.elastic.co/u/Sourabh_Kashyap)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 3:46pm UTC](https://discuss.elastic.co/t/lostash-error/193357 "2019-08-01T15:46:11Z")

</div>

\[2019-08-01T15:07:16,754\]\[ERROR\]\[logstash.pipeline \] A plugin had an unrecoverable error. Will restart this plugin. Plugin: \<LogStash::Inputs::Beats port=\>5044, codec=\>\<LogStash::Codecs::JSON id=\>"json\_76489cd0-0…

---

## [Creating a field of field](https://discuss.elastic.co/t/creating-a-field-of-field/191844)

<div class="topic-metadata">

**Author:** [@luc1](https://discuss.elastic.co/u/luc1)\
**Replies:** 12\
**Last updated:** [August 1, 2019, 3:45pm UTC](https://discuss.elastic.co/t/creating-a-field-of-field/191844 "2019-08-01T15:45:49Z")

</div>

Hello, I have this field in my JSON file which looks like this : "activeAlarms":\[{"id":\*\*\*\*\*, "description":"something", "repairAction": "do this"}, {"id":\*\*\*\*\*, "description":"somethingElse", "repairAction": "do that}…

---

## [\[ElasticSearch Query\] Select all not null fields](https://discuss.elastic.co/t/elasticsearch-query-select-all-not-null-fields/193340)

<div class="topic-metadata">

**Author:** [@amoussoubaruch](https://discuss.elastic.co/u/amoussoubaruch)\
**Replies:** 2\
**Last updated:** [August 1, 2019, 3:44pm UTC](https://discuss.elastic.co/t/elasticsearch-query-select-all-not-null-fields/193340 "2019-08-01T15:44:18Z")

</div>

Hi evryone, I face some issue and i don't really know how i can solve that. I have one index with more than 600 fields. Sometimes i can have arround 500 fields with null values. I want to make a select query and have a…

---

## [Logstash XML](https://discuss.elastic.co/t/logstash-xml/192452)

<div class="topic-metadata">

**Author:** [@Imad\_Bouchakour](https://discuss.elastic.co/u/Imad_Bouchakour)\
**Replies:** 13\
**Last updated:** [August 1, 2019, 3:44pm UTC](https://discuss.elastic.co/t/logstash-xml/192452 "2019-08-01T15:44:13Z")

</div>

Hi i'am trying to parse a xml file with logstash and i having some issues this is my XML exemple : \<books\> \<book\> \<name\>HarryPotter\</name\> \<id\>785\</id\> \<numero\>7\</numero\> \</book\> \<book\> \<name\>game of thrones\<…

---

## [Creating a Line Chart that Graphs 1 Day Versus the Weekly Average with a Non-Time Based Histogram](https://discuss.elastic.co/t/creating-a-line-chart-that-graphs-1-day-versus-the-weekly-average-with-a-non-time-based-histogram/193307)

<div class="topic-metadata">

**Author:** [@nfielder](https://discuss.elastic.co/u/nfielder)\
**Replies:** 3\
**Last updated:** [August 1, 2019, 3:41pm UTC](https://discuss.elastic.co/t/creating-a-line-chart-that-graphs-1-day-versus-the-weekly-average-with-a-non-time-based-histogram/193307 "2019-08-01T15:41:57Z")

</div>

Hi all, I am currently trying to create a graph that shows the frequency of response time within given intervals (i.e. every 50ms) and split the series so that one line is the data for the last day and the second line i…

---

## [Couldn't connect to AWS ES](https://discuss.elastic.co/t/couldnt-connect-to-aws-es/193294)

<div class="topic-metadata">

**Author:** [@sv\_bcvt92](https://discuss.elastic.co/u/sv_bcvt92)\
**Replies:** 6\
**Last updated:** [August 1, 2019, 3:19pm UTC](https://discuss.elastic.co/t/couldnt-connect-to-aws-es/193294 "2019-08-01T15:19:39Z")

</div>

Hi Gurus, I'm setting Filebeat to send nginx logs to AWS Elasticsearch service. I do follow exactly this guide But in step 4, I got this error Exiting: Couldn't connect to any of the configured Elasticsearch hosts…

---

## [Get data from SQL Tables](https://discuss.elastic.co/t/get-data-from-sql-tables/193356)

<div class="topic-metadata">

**Author:** [@Farouk6072](https://discuss.elastic.co/u/Farouk6072)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 3:07pm UTC](https://discuss.elastic.co/t/get-data-from-sql-tables/193356 "2019-08-01T15:07:10Z")

</div>

In my Logstash i have this statement : statement =\> "Select table1, table2, table3" I have this index : index =\> "test" My question how to get data from table1 on index "test"? in Canva

---

## [Kibana shows only 1 servers logs among 2 servers sent via Logstash](https://discuss.elastic.co/t/kibana-shows-only-1-servers-logs-among-2-servers-sent-via-logstash/193354)

<div class="topic-metadata">

**Author:** [@Devendra\_Date1](https://discuss.elastic.co/u/Devendra_Date1)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 2:59pm UTC](https://discuss.elastic.co/t/kibana-shows-only-1-servers-logs-among-2-servers-sent-via-logstash/193354 "2019-08-01T14:59:31Z")

</div>

---

## [Recommended Kibana upgrade from 6 to 7, different versions compared to ES?](https://discuss.elastic.co/t/recommended-kibana-upgrade-from-6-to-7-different-versions-compared-to-es/193154)

<div class="topic-metadata">

**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 2:49pm UTC](https://discuss.elastic.co/t/recommended-kibana-upgrade-from-6-to-7-different-versions-compared-to-es/193154 "2019-08-01T14:49:59Z")

</div>

Hi, When upgrading from Kibana 6 to 7 the official documentation recommends upgrading to version 6.7 first and then to 7. For Elasticsearch, it is recommended to upgrade to 6.8 first and then to 7. Why is there a diff…

---

## [Elastic Heap and GC count increases when searching with thousands of characters](https://discuss.elastic.co/t/elastic-heap-and-gc-count-increases-when-searching-with-thousands-of-characters/193351)

<div class="topic-metadata">

**Author:** [@Ram\_Kumar1](https://discuss.elastic.co/u/Ram_Kumar1)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 2:48pm UTC](https://discuss.elastic.co/t/elastic-heap-and-gc-count-increases-when-searching-with-thousands-of-characters/193351 "2019-08-01T14:48:38Z")

</div>

Hi Everyone, Having an issue when user searches with thousands of characters Steps to reproduce : Enter 5K junk characters like '\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*' or '........................' and do multiple searches, after that ela…

---

## [Upgrade elastic in kubernetes](https://discuss.elastic.co/t/upgrade-elastic-in-kubernetes/193232)

<div class="topic-metadata">

**Author:** [@soandosnc](https://discuss.elastic.co/u/soandosnc)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 2:36pm UTC](https://discuss.elastic.co/t/upgrade-elastic-in-kubernetes/193232 "2019-08-01T14:36:00Z")

</div>

I have elastic 7.2 installed in kubernetes (via the elastic helm chart, secure example). How can I upgrade this to 7.3 (preferably in a rolling way)?

---

## [Sorting based on the field value](https://discuss.elastic.co/t/sorting-based-on-the-field-value/193348)

<div class="topic-metadata">

**Author:** [@shani\_angarkadu](https://discuss.elastic.co/u/shani_angarkadu)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 2:35pm UTC](https://discuss.elastic.co/t/sorting-based-on-the-field-value/193348 "2019-08-01T14:35:05Z")

</div>

Hi , Thanks in advance, I have a field name 'contact' , there are few documents where contact = ", " if contact = ", " those values has to come in the end. tried default sort , and asc but it is not efficient.

---

## [Boost docs similar to top result of query](https://discuss.elastic.co/t/boost-docs-similar-to-top-result-of-query/193346)

<div class="topic-metadata">

**Author:** [@jamartins](https://discuss.elastic.co/u/jamartins)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 2:32pm UTC](https://discuss.elastic.co/t/boost-docs-similar-to-top-result-of-query/193346 "2019-08-01T14:32:55Z")

</div>

Hi guys, I'd like to know how can I boost docs based on their similarity to the top result of the query according to a field, despite not matching with the query itself. Imagine this situation: I have an index of movie…

---

## [Scrolling Transport Error Elastic Search with python](https://discuss.elastic.co/t/scrolling-transport-error-elastic-search-with-python/188938)

<div class="topic-metadata">

**Author:** [@roma\_sodha](https://discuss.elastic.co/u/roma_sodha)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 2:21pm UTC](https://discuss.elastic.co/t/scrolling-transport-error-elastic-search-with-python/188938 "2019-08-01T14:21:52Z")

</div>

Hi, I get below error while doing scrolling with python. Any one encountered such error before.? Scrolling... Traceback (most recent call last): File , line 78, in page = es.scroll(scroll\_id= sid,scroll='2m') Fil…

---

## [In time series data in ElasticSearch, need to find the count of documents till a point at which the value changes](https://discuss.elastic.co/t/in-time-series-data-in-elasticsearch-need-to-find-the-count-of-documents-till-a-point-at-which-the-value-changes/193343)

<div class="topic-metadata">

**Author:** [@matterixn](https://discuss.elastic.co/u/matterixn)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 2:17pm UTC](https://discuss.elastic.co/t/in-time-series-data-in-elasticsearch-need-to-find-the-count-of-documents-till-a-point-at-which-the-value-changes/193343 "2019-08-01T14:17:36Z")

</div>

Lets say there are documents such as below, with these fields "time": X, "value": 1, "key": M "time": X-1, "value": 1, "key": M "time": X-2, "value": 1, "key": M "time": X-3, "value": 1, "key": M "time": X-4, "value": 1…

---

## [Significant terms aggregation on large dataset](https://discuss.elastic.co/t/significant-terms-aggregation-on-large-dataset/193341)

<div class="topic-metadata">

**Author:** [@carasel](https://discuss.elastic.co/u/carasel)\
**Replies:** 0\
**Last updated:** [August 1, 2019, 2:09pm UTC](https://discuss.elastic.co/t/significant-terms-aggregation-on-large-dataset/193341 "2019-08-01T14:09:03Z")

</div>

I would like to do a significant terms aggregation across a lot of data. I currently have about 1TB of data in about 5 million top level documents, which all have a few hundred nested documents. The field that I want to …

---

## [Kibana service does not start with no error message (while /usr/share/bin/kibana/kibana does not have any problem)](https://discuss.elastic.co/t/kibana-service-does-not-start-with-no-error-message-while-usr-share-bin-kibana-kibana-does-not-have-any-problem/189809)

<div class="topic-metadata">

**Author:** [@patimothe](https://discuss.elastic.co/u/patimothe)\
**Replies:** 3\
**Last updated:** [August 1, 2019, 2:08pm UTC](https://discuss.elastic.co/t/kibana-service-does-not-start-with-no-error-message-while-usr-share-bin-kibana-kibana-does-not-have-any-problem/189809 "2019-08-01T14:08:04Z")

</div>

Hello, This morning my kibana service worked well but now without any apparent reason it stopped working, and no error message nor logs (path log is configured already) abd the error code that returns the command is 0 s…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1984)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1986)
