# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=642 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 643 --- ## [How to change field-type in ELK from string to numeric/long?](https://discuss.elastic.co/t/how-to-change-field-type-in-elk-from-string-to-numeric-long/303665)
**Author:** [@Next\_generation](https://discuss.elastic.co/u/Next_generation)\ **Replies:** 8\ **Last updated:** [May 3, 2022, 11:37am UTC](https://discuss.elastic.co/t/how-to-change-field-type-in-elk-from-string-to-numeric-long/303665 "2022-05-03T11:37:01Z")
For haproxy tc, tw, tr, tq are written in Type string but long I created a new index (I took it from another index mapping) and in the Dev Tools ELK console I entered ELK verison: 7.16.2 How fix it? Thanks a lot --- ## [How does ES stores the data?](https://discuss.elastic.co/t/how-does-es-stores-the-data/303806)
**Author:** [@McLaine](https://discuss.elastic.co/u/McLaine)\ **Replies:** 3\ **Last updated:** [May 3, 2022, 10:35am UTC](https://discuss.elastic.co/t/how-does-es-stores-the-data/303806 "2022-05-03T10:35:09Z")
Hello! how does ES store in a cluster with 5 nodes? All data on 5 nodes or how is that distributed? --- ## [Inconsistencies in the Lab and Gui](https://discuss.elastic.co/t/inconsistencies-in-the-lab-and-gui/303658)
**Author:** [@Silverquick](https://discuss.elastic.co/u/Silverquick)\ **Replies:** 4\ **Last updated:** [May 3, 2022, 9:29am UTC](https://discuss.elastic.co/t/inconsistencies-in-the-lab-and-gui/303658 "2022-05-03T09:29:48Z")
The Lab is TSVB exercise 4.2 Instruction is However when attempting to do this in the interface it does not allow it. The section is grayed out. I can clearly see in the Video Example that the demonstration show… --- ## [Must\_not nested with should query not working (ES version 7.10.2) -- not countryiso OR not branch\_id](https://discuss.elastic.co/t/must-not-nested-with-should-query-not-working-es-version-7-10-2-not-countryiso-or-not-branch-id/303737)
**Author:** [@Udayaprakash\_S\_10d](https://discuss.elastic.co/u/Udayaprakash_S_10d)\ **Replies:** 13\ **Last updated:** [May 3, 2022, 8:59am UTC](https://discuss.elastic.co/t/must-not-nested-with-should-query-not-working-es-version-7-10-2-not-countryiso-or-not-branch-id/303737 "2022-05-03T08:59:54Z")
{ "size": 0, "query": { "bool": { "filter": \[ { "term": { "is\_reachable": { "value": "YES", "boost": 1 } } }, … --- ## [Optimization on search query when using alias name](https://discuss.elastic.co/t/optimization-on-search-query-when-using-alias-name/303808)
**Author:** [@shiranOren](https://discuss.elastic.co/u/shiranOren)\ **Replies:** 0\ **Last updated:** [May 3, 2022, 8:58am UTC](https://discuss.elastic.co/t/optimization-on-search-query-when-using-alias-name/303808 "2022-05-03T08:58:32Z")
Hello, I am using an alias name when writing data using Bulk Api. I have 2 questions: Can I get the index name after writing data using the alias name maybe as part of the response? Can I improve performance if I se… --- ## [Logstash logs want in proper format](https://discuss.elastic.co/t/logstash-logs-want-in-proper-format/303379)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 4\ **Last updated:** [May 3, 2022, 8:25am UTC](https://discuss.elastic.co/t/logstash-logs-want-in-proper-format/303379 "2022-05-03T08:25:36Z")
Hello Everyone I am recieved message from some alerts and data is look like as belwo I want to set in proper looks can you please help any one ? type=update&date\_time=2022-04-27T04%3A11%3A06-05%3A00&initiated\_from=admi… --- ## [Confused about Kibana Task Manager index](https://discuss.elastic.co/t/confused-about-kibana-task-manager-index/303040)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 3\ **Last updated:** [May 3, 2022, 8:03am UTC](https://discuss.elastic.co/t/confused-about-kibana-task-manager-index/303040 "2022-05-03T08:03:27Z")
I'm looking at getting our test and production clusters upgraded from 6.8 to 7.17 and am very confused about the .kibana\_task\_manager index. Both clusters have multiple Kibana instances each with it's own kibana.index s… --- ## [Howto connect Kibana 8 with ES8?](https://discuss.elastic.co/t/howto-connect-kibana-8-with-es8/303717)
**Author:** [@McLaine](https://discuss.elastic.co/u/McLaine)\ **Replies:** 12\ **Last updated:** [May 3, 2022, 7:30am UTC](https://discuss.elastic.co/t/howto-connect-kibana-8-with-es8/303717 "2022-05-03T07:30:16Z")
Hello! Es is running with: 128 \[::ffff:127.0.0.1\]:9200 : users:(("java",pid=43127,fd=463)) LISTEN 0 128 \[::1\]:9200 \[::\]… --- ## [Monitor logstash](https://discuss.elastic.co/t/monitor-logstash/303799)
**Author:** [@bleedgreen](https://discuss.elastic.co/u/bleedgreen)\ **Replies:** 0\ **Last updated:** [May 3, 2022, 4:32am UTC](https://discuss.elastic.co/t/monitor-logstash/303799 "2022-05-03T04:32:35Z")
Hi All, I have a logstash instance with input plugin with different input plugin (kafka,syslog, file) I want to monitor and detect when and event cannot be published to a target . Say for example a connection with sysl… --- ## [Http input does not result in the expected number of documents](https://discuss.elastic.co/t/http-input-does-not-result-in-the-expected-number-of-documents/303797)
**Author:** [@hughjarse](https://discuss.elastic.co/u/hughjarse)\ **Replies:** 0\ **Last updated:** [May 3, 2022, 3:32am UTC](https://discuss.elastic.co/t/http-input-does-not-result-in-the-expected-number-of-documents/303797 "2022-05-03T03:32:49Z")
Hi. I would like ideas about what Logstash functionality I can use to troubleshoot a problem I'm experiencing with the http input plugin. Problem My http input does not seem to receive?/process? the expected number of e… --- ## [Node not discovering master node properly, "Cluster state has not been recovered yet, cannot write to the \[null\] index" error \[503\]](https://discuss.elastic.co/t/node-not-discovering-master-node-properly-cluster-state-has-not-been-recovered-yet-cannot-write-to-the-null-index-error-503/303692)
**Author:** [@dheist](https://discuss.elastic.co/u/dheist)\ **Replies:** 3\ **Last updated:** [May 3, 2022, 12:32am UTC](https://discuss.elastic.co/t/node-not-discovering-master-node-properly-cluster-state-has-not-been-recovered-yet-cannot-write-to-the-null-index-error-503/303692 "2022-05-03T00:32:29Z")
Hello, I have 2 servers in 2 different locations I am trying to make into a cluster. Both are running Elasticsearch v8.1.3. I have the master server, which is configured like this: cluster.name: yyz-news-prod node.name… --- ## [Using a colon in a field name does not work?](https://discuss.elastic.co/t/using-a-colon-in-a-field-name-does-not-work/303143)
**Author:** [@johann-petrak](https://discuss.elastic.co/u/johann-petrak)\ **Replies:** 2\ **Last updated:** [May 3, 2022, 12:25am UTC](https://discuss.elastic.co/t/using-a-colon-in-a-field-name-does-not-work/303143 "2022-05-03T00:25:25Z")
I have the following as part of my mapping file: "entities.name1:Name2": { "type": "nested" }, But the field does not actually end up nested in the index. Is there a problem with the use of colons as part… --- ## [Elastic Meetup: A New Machine Learning Approach for Troubleshooting with the Elastic Stack](https://discuss.elastic.co/t/elastic-meetup-a-new-machine-learning-approach-for-troubleshooting-with-the-elastic-stack/303782)
**Author:** [@ZeMatt](https://discuss.elastic.co/u/ZeMatt)\ **Replies:** 0\ **Last updated:** [May 2, 2022, 10:12pm UTC](https://discuss.elastic.co/t/elastic-meetup-a-new-machine-learning-approach-for-troubleshooting-with-the-elastic-stack/303782 "2022-05-02T22:12:33Z")
Hello Everyone, we're having an in-person meetup hosted by Elastic in Mountain View. Food & drink will be provided. A New Machine Learning Approach for Troubleshooting with the Elastic Stack, Wed, May 11, 2022, 5:00 PM |… --- ## [GeoIP data not creating "location" field and duplicating data](https://discuss.elastic.co/t/geoip-data-not-creating-location-field-and-duplicating-data/303612)
**Author:** [@joshn](https://discuss.elastic.co/u/joshn)\ **Replies:** 7\ **Last updated:** [May 2, 2022, 8:29pm UTC](https://discuss.elastic.co/t/geoip-data-not-creating-location-field-and-duplicating-data/303612 "2022-05-02T20:29:39Z")
I'm ingesting logs from my firewall, and as part of that I thought it would be nice to look at geoip data. geoip { add\_tag =\> \[ "GeoIP" \] source =\> "src\_ip" } geoip { … --- ## [Logstash fine tuning for ingesting more events (s3 input)](https://discuss.elastic.co/t/logstash-fine-tuning-for-ingesting-more-events-s3-input/303681)
**Author:** [@antonisnyc94](https://discuss.elastic.co/u/antonisnyc94)\ **Replies:** 3\ **Last updated:** [May 2, 2022, 7:48pm UTC](https://discuss.elastic.co/t/logstash-fine-tuning-for-ingesting-more-events-s3-input/303681 "2022-05-02T19:48:46Z")
Hello, We sending events for vpc flowlogs from multiple AWS accounts into a central s3 bucket and due to the large number of events we are always 5-6 days behind in Elasticsearch. I already set the batch.size to 6000 a… --- ## [How to get paid version of kibana (not cloud)](https://discuss.elastic.co/t/how-to-get-paid-version-of-kibana-not-cloud/303382)
**Author:** [@Rayhan\_Shaik](https://discuss.elastic.co/u/Rayhan_Shaik)\ **Replies:** 8\ **Last updated:** [May 2, 2022, 2:50pm UTC](https://discuss.elastic.co/t/how-to-get-paid-version-of-kibana-not-cloud/303382 "2022-05-02T14:50:02Z")
hi team, We are using the free version of kibana(not cloud) in our project, but now as per our project requirements ( automating the reports generation of dashboard and sending them over email ), we came to know that t… --- ## [Clean method for adding field when the values may be missing?](https://discuss.elastic.co/t/clean-method-for-adding-field-when-the-values-may-be-missing/303769)
**Author:** [@jbrowe](https://discuss.elastic.co/u/jbrowe)\ **Replies:** 0\ **Last updated:** [May 2, 2022, 7:42pm UTC](https://discuss.elastic.co/t/clean-method-for-adding-field-when-the-values-may-be-missing/303769 "2022-05-02T19:42:28Z")
I have logs with variable field names. For example: {"field\_one":"first", "field\_two":"second"} ("field\_two":"second", "field\_three": "third"} To get the correct index mapping, I currently I use: mutate { add\_fi… --- ## [Testing Logs in Logstash |Automation with Ansible](https://discuss.elastic.co/t/testing-logs-in-logstash-automation-with-ansible/303768)
**Author:** [@Amanda\_Ruzza](https://discuss.elastic.co/u/Amanda_Ruzza)\ **Replies:** 0\ **Last updated:** [May 2, 2022, 7:24pm UTC](https://discuss.elastic.co/t/testing-logs-in-logstash-automation-with-ansible/303768 "2022-05-02T19:24:32Z")
Dear all, My team is currently working on deploying an ELK stack on AWS using Ansible and GitHub Actions. My question is: Is there a way to test that the the Log files sent from MetricBeats are being properly collecte… --- ## [Data node CPU constantly 90-98% on one node](https://discuss.elastic.co/t/data-node-cpu-constantly-90-98-on-one-node/302720)
**Author:** [@Damelon](https://discuss.elastic.co/u/Damelon)\ **Replies:** 5\ **Last updated:** [May 2, 2022, 5:46pm UTC](https://discuss.elastic.co/t/data-node-cpu-constantly-90-98-on-one-node/302720 "2022-05-02T17:46:22Z")
I currently have an Elasticsearch cluster (7.15.1) Which has 3 masters, 6 data nodes, 2 ingest nodes which is deployed onto Kubernetes in AWS. Each data node is using an m5.2xlarge AWS instance and a 1.5TB storage volu… --- ## [Logstash best practices for multiple sources](https://discuss.elastic.co/t/logstash-best-practices-for-multiple-sources/303722)
**Author:** [@fropa](https://discuss.elastic.co/u/fropa)\ **Replies:** 1\ **Last updated:** [May 2, 2022, 4:27pm UTC](https://discuss.elastic.co/t/logstash-best-practices-for-multiple-sources/303722 "2022-05-02T16:27:21Z")
Hi folks, I'm starting to use ELK, I've multiple source servers, some of them have also multiple logs to send. Now I'm trying to set up logstash sample configuration to just receive and send logs to the elasticsearch I… --- ## [Using elasticsearch with remote storage](https://discuss.elastic.co/t/using-elasticsearch-with-remote-storage/303631)
**Author:** [@James\_Hsia](https://discuss.elastic.co/u/James_Hsia)\ **Replies:** 2\ **Last updated:** [May 2, 2022, 3:21pm UTC](https://discuss.elastic.co/t/using-elasticsearch-with-remote-storage/303631 "2022-05-02T15:21:13Z")
We have an AKS cluster in the US running an Elasticsearch pod (version 7.16.0) tied to an Azure File Share storage account in Europe. We are getting continuous issues in the Elasticsearch logs similar to the below upon … --- ## [Visualize unique count of IDs values by a date field](https://discuss.elastic.co/t/visualize-unique-count-of-ids-values-by-a-date-field/303616)
**Author:** [@H0tmilk](https://discuss.elastic.co/u/H0tmilk)\ **Replies:** 3\ **Last updated:** [May 2, 2022, 2:51pm UTC](https://discuss.elastic.co/t/visualize-unique-count-of-ids-values-by-a-date-field/303616 "2022-05-02T14:51:31Z")
Hello, This is my data (for example) in Elasticsearch : { "id": 1, "status": "Active", "title": "Incident 1", "@timestamp": "28/04/22" }, { "id": 2, "status": "Active", "title": "Incident 2", "@timestamp": "28/… --- ## [Derive index with reversed nesting](https://discuss.elastic.co/t/derive-index-with-reversed-nesting/303393)
**Author:** [@denbo](https://discuss.elastic.co/u/denbo)\ **Replies:** 5\ **Last updated:** [May 2, 2022, 12:24pm UTC](https://discuss.elastic.co/t/derive-index-with-reversed-nesting/303393 "2022-05-02T12:24:01Z")
I have an index of products with a (denormalized) m:n relationship to categories. My goal is to derive a categories index from it which contains the same information, but with the relationship reversed. What I have # … --- ## [Is it possible to calculate the number of results by grouping them by several criteria?](https://discuss.elastic.co/t/is-it-possible-to-calculate-the-number-of-results-by-grouping-them-by-several-criteria/303497)
**Author:** [@Denys\_Lukash](https://discuss.elastic.co/u/Denys_Lukash)\ **Replies:** 2\ **Last updated:** [May 2, 2022, 11:53am UTC](https://discuss.elastic.co/t/is-it-possible-to-calculate-the-number-of-results-by-grouping-them-by-several-criteria/303497 "2022-05-02T11:53:24Z")
Hi dear community. I'm a new user of elastic and I'm having trouble building a query, I don't know if it's possible to do what I want. My task is to get the number of products in each category. The problem is that the g… --- ## [Log ES inserts / operations](https://discuss.elastic.co/t/log-es-inserts-operations/303738)
**Author:** [@webfr](https://discuss.elastic.co/u/webfr)\ **Replies:** 0\ **Last updated:** [May 2, 2022, 10:55am UTC](https://discuss.elastic.co/t/log-es-inserts-operations/303738 "2022-05-02T10:55:21Z")
Hello guys, I would like to know how to log Elasticsearch operations like inserts with parameters for URL called, Ex: http://cloud:9200/myindex/\_doc Using free ES 7.15.1 Thanks. --- ## [Hunspell fails to stem correctly](https://discuss.elastic.co/t/hunspell-fails-to-stem-correctly/303739)
**Author:** [@mekanix](https://discuss.elastic.co/u/mekanix)\ **Replies:** 0\ **Last updated:** [May 2, 2022, 10:56am UTC](https://discuss.elastic.co/t/hunspell-fails-to-stem-correctly/303739 "2022-05-02T10:56:02Z")
We are a bit puzzled about some shortcomings when using hunspell for stemming and can't figure out why it fails. Examples: gulerod (singular), gulerødder (plural) mand (singular), mænd (plural) mønster (singular), møns… --- ## [Elasticsearch login](https://discuss.elastic.co/t/elasticsearch-login/303527)
**Author:** [@Roshan1](https://discuss.elastic.co/u/Roshan1)\ **Replies:** 4\ **Last updated:** [May 2, 2022, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-login/303527 "2022-05-02T10:23:32Z")
Hello Team, kindly advise why I am being prompted to enter username/password when accessing ES. PLease find attached image. I have installed latest version of Kibana and ES 8.1 Thanks, Roshan --- ## [Don't know how to handle \`Java::JavaLang::IllegalStateException\` for \`PipelineAction](https://discuss.elastic.co/t/dont-know-how-to-handle-java-illegalstateexception-for-pipelineaction/303735)
**Author:** [@rinki\_kumari](https://discuss.elastic.co/u/rinki_kumari)\ **Replies:** 1\ **Last updated:** [May 2, 2022, 10:08am UTC](https://discuss.elastic.co/t/dont-know-how-to-handle-java-illegalstateexception-for-pipelineaction/303735 "2022-05-02T10:08:47Z")
input { http\_poller { urls =\> { test =\> { method =\> get url =\> "http://172.24.105.27:8092/" headers =\> { Accept =\> "application/json" Authorization =\> "Basic QXBp" } } } } } o… --- ## [Can I compare Two SearchRequest Object](https://discuss.elastic.co/t/can-i-compare-two-searchrequest-object/303487)
**Author:** [@good\_Royale](https://discuss.elastic.co/u/good_Royale)\ **Replies:** 6\ **Last updated:** [May 2, 2022, 9:37am UTC](https://discuss.elastic.co/t/can-i-compare-two-searchrequest-object/303487 "2022-05-02T09:37:03Z")
I want to compare two SearchRequest, kind a like to see if both SearchRequest object's query are same or not. for Example: Reader queryJson = new StringReader( "{" + " \\"query\\": {" + … --- ## [Tab character in json input message is not validated and complete message gets wrapped in the message field in elastic search](https://discuss.elastic.co/t/tab-character-in-json-input-message-is-not-validated-and-complete-message-gets-wrapped-in-the-message-field-in-elastic-search/303727)
**Author:** [@Nikhitha](https://discuss.elastic.co/u/Nikhitha)\ **Replies:** 0\ **Last updated:** [May 2, 2022, 9:23am UTC](https://discuss.elastic.co/t/tab-character-in-json-input-message-is-not-validated-and-complete-message-gets-wrapped-in-the-message-field-in-elastic-search/303727 "2022-05-02T09:23:40Z")
input json message to logstash via filebeat is "{"version":"1.0.0","timestamp":"2022-01-19T12:24:10+00:00","severity":"debug","service\_id":"logger","message":"(tab space)shaaaaaaaaa222aaaaw1111wwaaaaj3322222jj1"}" oupt… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=641) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=643)