# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=616

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 617

---

## [Do these "could not index" errors actually end up in Elastic anywhere?](https://discuss.elastic.co/t/do-these-could-not-index-errors-actually-end-up-in-elastic-anywhere/306582)

<div class="topic-metadata">

**Author:** [@ckes](https://discuss.elastic.co/u/ckes)\
**Replies:** 2\
**Last updated:** [June 7, 2022, 3:58pm UTC](https://discuss.elastic.co/t/do-these-could-not-index-errors-actually-end-up-in-elastic-anywhere/306582 "2022-06-07T15:58:40Z")

</div>

I've noticed quite a few of these errors with the elastic output plugin in /var/log/logstash/logstash-plain.log: "Could not index event to Elasticsearch. {:status=\>400, :action=\>\["create", ... The solution to fix the…

---

## [Protecting kibana iFrame -](https://discuss.elastic.co/t/protecting-kibana-iframe/306456)

<div class="topic-metadata">

**Author:** [@akshay\_bhardwaj](https://discuss.elastic.co/u/akshay_bhardwaj)\
**Replies:** 2\
**Last updated:** [June 7, 2022, 3:37pm UTC](https://discuss.elastic.co/t/protecting-kibana-iframe/306456 "2022-06-07T15:37:03Z")

</div>

Can we protect kibana iFrame that Only allow it to work on one domain only.

---

## [Using drop to filter messages](https://discuss.elastic.co/t/using-drop-to-filter-messages/306158)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 10\
**Last updated:** [June 7, 2022, 1:24pm UTC](https://discuss.elastic.co/t/using-drop-to-filter-messages/306158 "2022-06-07T13:24:16Z")

</div>

Hi All, I am using grok filter to parse messages coming into Logstash from filebeat. We have ELK 7.6.2 stack. I need to filter out and process "only" the following message(s) in the gc log as follows. Note that pretty…

---

## [How to Improve ES responsiveness when getting warning: retrying failed action with response code: 429](https://discuss.elastic.co/t/how-to-improve-es-responsiveness-when-getting-warning-retrying-failed-action-with-response-code-429/305173)

<div class="topic-metadata">

**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\
**Replies:** 2\
**Last updated:** [June 7, 2022, 1:19pm UTC](https://discuss.elastic.co/t/how-to-improve-es-responsiveness-when-getting-warning-retrying-failed-action-with-response-code-429/305173 "2022-06-07T13:19:21Z")

</div>

My flow is Logs files will be processed from FileBeat \> Logstash \> Elasticsearch. I m getting the below 2 errors many times in Logstash logs. Error 1: \[INFO \]\[logstash.outputs.elasticsearch\]\[inventory\] retrying faile…

---

## [Create New Index Using Mapping from another index](https://discuss.elastic.co/t/create-new-index-using-mapping-from-another-index/306567)

<div class="topic-metadata">

**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\
**Replies:** 0\
**Last updated:** [June 7, 2022, 12:50pm UTC](https://discuss.elastic.co/t/create-new-index-using-mapping-from-another-index/306567 "2022-06-07T12:50:02Z")

</div>

Hi, Is there a way to create index by using mapping from another index? The requirement is here to copy data from one index to another that can be achieved using reindex API but the mapping updates in the source index. …

---

## [Logstash filter date match not replacing @timestamp](https://discuss.elastic.co/t/logstash-filter-date-match-not-replacing-timestamp/306364)

<div class="topic-metadata">

**Author:** [@yhache](https://discuss.elastic.co/u/yhache)\
**Replies:** 20\
**Last updated:** [June 7, 2022, 12:42pm UTC](https://discuss.elastic.co/t/logstash-filter-date-match-not-replacing-timestamp/306364 "2022-06-07T12:42:31Z")

</div>

Hi, I have a bunch of PHP log to add to my ELK cluster and i cannot get the @timestamp to work. I'm pretty sure it has something to do with the config file and the date format used in the PHP logs. Here's my config file…

---

## [Error while connecting Elastic Enterprise search](https://discuss.elastic.co/t/error-while-connecting-elastic-enterprise-search/306565)

<div class="topic-metadata">

**Author:** [@Vishal\_Gurung](https://discuss.elastic.co/u/Vishal_Gurung)\
**Replies:** 3\
**Last updated:** [June 7, 2022, 12:39pm UTC](https://discuss.elastic.co/t/error-while-connecting-elastic-enterprise-search/306565 "2022-06-07T12:39:56Z")

</div>

Hello everyone can anybody help me out setting up Enterprise search in elastic. i have deployed elastic in ubuntu 22 whereas kibana ,logstash and elastic is working fine but when i tried to set up enterprise search an e…

---

## [Custom date format in elasticsearch](https://discuss.elastic.co/t/custom-date-format-in-elasticsearch/306218)

<div class="topic-metadata">

**Author:** [@Pranjal\_Sett](https://discuss.elastic.co/u/Pranjal_Sett)\
**Replies:** 3\
**Last updated:** [June 7, 2022, 12:08pm UTC](https://discuss.elastic.co/t/custom-date-format-in-elasticsearch/306218 "2022-06-07T12:08:03Z")

</div>

Hi, I am trying to index the data with the data as May 26 2022 17:41:24 . I have given the format in my index template as MMM d Y H:m:s . I have been following this link for formatting http://joda-time.sourceforge.net…

---

## [Stop logstash from automatically creating an index on elastic](https://discuss.elastic.co/t/stop-logstash-from-automatically-creating-an-index-on-elastic/306555)

<div class="topic-metadata">

**Author:** [@Elie\_Sbat](https://discuss.elastic.co/u/Elie_Sbat)\
**Replies:** 1\
**Last updated:** [June 7, 2022, 11:19am UTC](https://discuss.elastic.co/t/stop-logstash-from-automatically-creating-an-index-on-elastic/306555 "2022-06-07T11:19:56Z")

</div>

Hello, Is there a way to stop logstash from automatically creating an index in Elasticsearch. even if the conf file does not contain any configuration regarding the index. Logstash logs: logstash | \[WARN \] 2022-06-…

---

## [Revome over gsub()](https://discuss.elastic.co/t/revome-over-gsub/306460)

<div class="topic-metadata">

**Author:** [@Iss](https://discuss.elastic.co/u/Iss)\
**Replies:** 5\
**Last updated:** [June 7, 2022, 10:44am UTC](https://discuss.elastic.co/t/revome-over-gsub/306460 "2022-06-07T10:44:21Z")

</div>

Hi! I have nested field as : "statement" =\> { "cntxt" =\> { "extension" =\> { "https://ssss/xp/w/yy" =\> "xxxxxxx" } }, ... } the field "extension" is dynamic…

---

## [Get Aggregate results grouped by nested field value(s)](https://discuss.elastic.co/t/get-aggregate-results-grouped-by-nested-field-value-s/306554)

<div class="topic-metadata">

**Author:** [@Vignesh\_Theyagarajan](https://discuss.elastic.co/u/Vignesh_Theyagarajan)\
**Replies:** 0\
**Last updated:** [June 7, 2022, 10:47am UTC](https://discuss.elastic.co/t/get-aggregate-results-grouped-by-nested-field-value-s/306554 "2022-06-07T10:47:04Z")

</div>

Sample input json: Email1 - Paragraph1: { “ParagraphId”: “Para1", “EmailId”: “Email1", “Content”: “The city is Chennai”, “Tags”: \[ { “TagId”: “Tag1”, “Name: “City”, …

---

## [Encountered a retryable error (will retry with exponential backoff) {:code=\>400, :url=\>"http://localhost:9200/\_bulk", :content\_length=\>187}](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400-url-http-localhost-9200-bulk-content-length-187/306547)

<div class="topic-metadata">

**Author:** [@akshay\_bhardwaj](https://discuss.elastic.co/u/akshay_bhardwaj)\
**Replies:** 0\
**Last updated:** [June 7, 2022, 9:24am UTC](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400-url-http-localhost-9200-bulk-content-length-187/306547 "2022-06-07T09:24:03Z")

</div>

Hi i want to config logstash with incremental pipeline but i am getting below error t\[2022-06-07T14:47:45,313\]\[ERROR\]\[logstash.outputs.Elasticsearch\]\[main\]\[d24e130edb19f1038da36ee73576edcc3bb8a8df6f0207c132792ec2475e92ec…

---

## [Problem to setup sub flieds](https://discuss.elastic.co/t/problem-to-setup-sub-flieds/306134)

<div class="topic-metadata">

**Author:** [@cRaZyT](https://discuss.elastic.co/u/cRaZyT)\
**Replies:** 5\
**Last updated:** [June 7, 2022, 8:39am UTC](https://discuss.elastic.co/t/problem-to-setup-sub-flieds/306134 "2022-06-07T08:39:17Z")

</div>

Hi, I have a problem to generate sub fileds from a json message . With the following filter I try to check if the field "details" exist and add the json fields to it. If it doesn't exist the field sould be created wit…

---

## [So many segments under 2mb](https://discuss.elastic.co/t/so-many-segments-under-2mb/306536)

<div class="topic-metadata">

**Author:** [@ericsoul](https://discuss.elastic.co/u/ericsoul)\
**Replies:** 6\
**Last updated:** [June 7, 2022, 8:26am UTC](https://discuss.elastic.co/t/so-many-segments-under-2mb/306536 "2022-06-07T08:26:31Z")

</div>

The default parameter index.merge.policy.floor\_segment is 2mb, but why there are still so many segments under 2mb, even through I send command POST indices\_name/\_forcemerge many times.

---

## [Exception occurred during upserting to Elasticsearch](https://discuss.elastic.co/t/exception-occurred-during-upserting-to-elasticsearch/306534)

<div class="topic-metadata">

**Author:** [@Clyton](https://discuss.elastic.co/u/Clyton)\
**Replies:** 0\
**Last updated:** [June 7, 2022, 7:22am UTC](https://discuss.elastic.co/t/exception-occurred-during-upserting-to-elasticsearch/306534 "2022-06-07T07:22:14Z")

</div>

Hi All, We are encountering the issue while we happened to push the bulk data into Elasticsearch. Error Details: "errorCode" : "UOP-OVI-E30102" , "errorMessage" : "Exception occurred during Upserting to Elasticsearch.…

---

## [Multiple cluster](https://discuss.elastic.co/t/multiple-cluster/306529)

<div class="topic-metadata">

**Author:** [@A\_j\_xx](https://discuss.elastic.co/u/A_j_xx)\
**Replies:** 3\
**Last updated:** [June 7, 2022, 7:14am UTC](https://discuss.elastic.co/t/multiple-cluster/306529 "2022-06-07T07:14:06Z")

</div>

Hi all , How do i setup a 2nd cluster on my local machine , assuming 1 cluster is already learning ? Is there any official documentation which i should refer as i was not able to find anything suitable on internet Tha…

---

## [Upgrade Elasticsearch from 7.4.1 to 7.93](https://discuss.elastic.co/t/upgrade-elasticsearch-from-7-4-1-to-7-93/306531)

<div class="topic-metadata">

**Author:** [@cosminh](https://discuss.elastic.co/u/cosminh)\
**Replies:** 1\
**Last updated:** [June 7, 2022, 7:03am UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-from-7-4-1-to-7-93/306531 "2022-06-07T07:03:24Z")

</div>

Hello, Is there a procedure on how to upgrade step-by-step Elasticsearch from 7.4.1 to 7.9.3 and at the same keep all the existing settings? example: stop Elastisearch service do this 3 do that etc. Thank you, Cos…

---

## [Salesforce object NOT\_FOUND](https://discuss.elastic.co/t/salesforce-object-not-found/305937)

<div class="topic-metadata">

**Author:** [@Simone1](https://discuss.elastic.co/u/Simone1)\
**Replies:** 2\
**Last updated:** [June 7, 2022, 6:42am UTC](https://discuss.elastic.co/t/salesforce-object-not-found/305937 "2022-06-07T06:42:47Z")

</div>

I want to send data from Salesforce to Elasticsearch with Logstash. I have a case.conf file that sends data of the Case object and it works fine. But i want to send other object (WorkOrder for example) but when i start…

---

## [Can you help me to push the json data to ELK?](https://discuss.elastic.co/t/can-you-help-me-to-push-the-json-data-to-elk/306525)

<div class="topic-metadata">

**Author:** [@dineshsekar](https://discuss.elastic.co/u/dineshsekar)\
**Replies:** 1\
**Last updated:** [June 7, 2022, 6:31am UTC](https://discuss.elastic.co/t/can-you-help-me-to-push-the-json-data-to-elk/306525 "2022-06-07T06:31:14Z")

</div>

Continuing the discussion from Push json key value with ELK: File name: data.json In below json, these are the content, can you help me to push the data to ELK ? { "\_source": { "model": "commit", "tool": "bitbucke…

---

## [Looking a proper way to send the queried data to an HTTP Endpoint](https://discuss.elastic.co/t/looking-a-proper-way-to-send-the-queried-data-to-an-http-endpoint/306333)

<div class="topic-metadata">

**Author:** [@Mohamed\_Naufal](https://discuss.elastic.co/u/Mohamed_Naufal)\
**Replies:** 3\
**Last updated:** [June 7, 2022, 6:26am UTC](https://discuss.elastic.co/t/looking-a-proper-way-to-send-the-queried-data-to-an-http-endpoint/306333 "2022-06-07T06:26:45Z")

</div>

Hi Community, So far, we've queried our logs, got the curl and shared it with our developers. So, they set the cron job on their jar to hit the curl for a given, specific amount of time. When the job stops, they won't r…

---

## [シャードのサイズ上限について](https://discuss.elastic.co/t/topic/306084)

<div class="topic-metadata">

**Author:** [@takumi.yoshikawa](https://discuss.elastic.co/u/takumi.yoshikawa)\
**Replies:** 2\
**Last updated:** [June 7, 2022, 6:22am UTC](https://discuss.elastic.co/t/topic/306084 "2022-06-07T06:22:00Z")

</div>

シャードのサイズ上限についてご教授お願い致します。 インデックス毎のシャード数についてはヒープサイズが30GBの場合、最大600-750と認識しているのですが、シャード単体のサイズについては上限が存在するのでしょうか。 1シャードのサイズは大体30GBになるよう設計することが推奨されているのは承知ですが、送信されるログ量が急増することで1シャードに入っているデータがどのくらいまでなら耐えられるのか教えていただけますと幸いです。

---

## [Favour prefixes at query time for an analyzed index?](https://discuss.elastic.co/t/favour-prefixes-at-query-time-for-an-analyzed-index/306517)

<div class="topic-metadata">

**Author:** [@corndog](https://discuss.elastic.co/u/corndog)\
**Replies:** 1\
**Last updated:** [June 7, 2022, 5:00am UTC](https://discuss.elastic.co/t/favour-prefixes-at-query-time-for-an-analyzed-index/306517 "2022-06-07T05:00:43Z")

</div>

How can I get the desired output at query time for my edge-ngram autocomplete, given my mappings? Desired Output "Fish Lake, New Zealand" "Fife Rock, New Zealand" "Fish Rock, New Zealand" \>"Finger Rocks, New Zealand"\< \>…

---

## [Circuit breaker exception](https://discuss.elastic.co/t/circuit-breaker-exception/305599)

<div class="topic-metadata">

**Author:** [@charvi23](https://discuss.elastic.co/u/charvi23)\
**Replies:** 14\
**Last updated:** [June 7, 2022, 4:57am UTC](https://discuss.elastic.co/t/circuit-breaker-exception/305599 "2022-06-07T04:57:09Z")

</div>

I get the following exception while I am trying to insert data using ES-Hive Hadoop jar. I am currently inserting around 60 million data. Following is the error I get Caused by: org.elasticsearch.hadoop.rest.EsHadoopIn…

---

## [Updating openjdk](https://discuss.elastic.co/t/updating-openjdk/306342)

<div class="topic-metadata">

**Author:** [@wazzu62](https://discuss.elastic.co/u/wazzu62)\
**Replies:** 2\
**Last updated:** [June 7, 2022, 12:01am UTC](https://discuss.elastic.co/t/updating-openjdk/306342 "2022-06-07T00:01:20Z")

</div>

Running a cluster with Elasticsearch 7.4.2 on Centos 7, ES was installed using RPMs There is a version of java (1.13.0.1.9) included in /usr/share/Elasticsearch that our Nessus scans are hitting on. Can I have ES use t…

---

## [How to remove inner list id from result in elastic search](https://discuss.elastic.co/t/how-to-remove-inner-list-id-from-result-in-elastic-search/305900)

<div class="topic-metadata">

**Author:** [@Sangeet\_Shah](https://discuss.elastic.co/u/Sangeet_Shah)\
**Replies:** 1\
**Last updated:** [June 6, 2022, 10:12pm UTC](https://discuss.elastic.co/t/how-to-remove-inner-list-id-from-result-in-elastic-search/305900 "2022-06-06T22:12:09Z")

</div>

I have product list into elastic. My product entity is as below Id,Name, AssociateProductIds Now I have to remove AssociateProductIds from result. What query I have to write? e.g. Id Name AssociateProductI…

---

## [2 Logstash for load balancing and avoid duplication](https://discuss.elastic.co/t/2-logstash-for-load-balancing-and-avoid-duplication/306501)

<div class="topic-metadata">

**Author:** [@Devraj\_patel](https://discuss.elastic.co/u/Devraj_patel)\
**Replies:** 1\
**Last updated:** [June 6, 2022, 8:56pm UTC](https://discuss.elastic.co/t/2-logstash-for-load-balancing-and-avoid-duplication/306501 "2022-06-06T20:56:20Z")

</div>

Till now I was using only 1 server with logstash for sending syslog data to Elasticsearch. I am switching to 2 servers with logstash for load balancing and using f5 VIP, is there a way logstash from different instances c…

---

## [Veterans Training portal](https://discuss.elastic.co/t/veterans-training-portal/306477)

<div class="topic-metadata">

**Author:** [@mwgonzalez](https://discuss.elastic.co/u/mwgonzalez)\
**Replies:** 2\
**Last updated:** [June 6, 2022, 5:40pm UTC](https://discuss.elastic.co/t/veterans-training-portal/306477 "2022-06-06T17:40:28Z")

</div>

Hello, but Im a Veteran and A contractor. I recently got access to the Elastic training subscription for veterans. I got this because my work requires that we get certified to work on a product before we can get administ…

---

## [How to use data plugin inside custom plugin?](https://discuss.elastic.co/t/how-to-use-data-plugin-inside-custom-plugin/306481)

<div class="topic-metadata">

**Author:** [@Azhar\_Uddin1](https://discuss.elastic.co/u/Azhar_Uddin1)\
**Replies:** 0\
**Last updated:** [June 6, 2022, 4:24pm UTC](https://discuss.elastic.co/t/how-to-use-data-plugin-inside-custom-plugin/306481 "2022-06-06T16:24:40Z")

</div>

I want to render some data of a CSV file or sample data which provided by elastic search inside a custom plugin using data plugin I find this but couldn't able to get most out of it DashBoard plugin also used data plug…

---

## [Phrase Suggester Filter Docs](https://discuss.elastic.co/t/phrase-suggester-filter-docs/306479)

<div class="topic-metadata">

**Author:** [@Akka\_Tips](https://discuss.elastic.co/u/Akka_Tips)\
**Replies:** 0\
**Last updated:** [June 6, 2022, 4:03pm UTC](https://discuss.elastic.co/t/phrase-suggester-filter-docs/306479 "2022-06-06T16:03:48Z")

</div>

Hey, I'm trying to work out a way of filtering documents before the phrase suggester is fired. I have tried to use the collate functionality but this doesn't seem to achieve it as it only checks whether something is in t…

---

## [GeoSpatial Data for Maps](https://discuss.elastic.co/t/geospatial-data-for-maps/306441)

<div class="topic-metadata">

**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\
**Replies:** 1\
**Last updated:** [June 6, 2022, 2:59pm UTC](https://discuss.elastic.co/t/geospatial-data-for-maps/306441 "2022-06-06T14:59:51Z")

</div>

Hi, I have a flat file that has country and region. With this as a start point, how do I convert this data to geospatial fields for maps? When I use the current index pattern created from this file to create a map, it …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=615)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=617)
