# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=652

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 653

---

## [Elasticsearch \[6.8.23\] does not return results when I query in a specific field](https://discuss.elastic.co/t/elasticsearch-6-8-23-does-not-return-results-when-i-query-in-a-specific-field/302704)

<div class="topic-metadata">

**Author:** [@joanjanku2000](https://discuss.elastic.co/u/joanjanku2000)\
**Replies:** 2\
**Last updated:** [April 19, 2022, 1:06pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-23-does-not-return-results-when-i-query-in-a-specific-field/302704 "2022-04-19T13:06:42Z")

</div>

Hi Everyone, I am running an issue after I upgraded my Elastic Cluster from 5.1.1 to 6.8.23. When I search everything in an index using this API: /index\_0003/\_search it returns all the result as expected. However…

---

## [ECK operator podMonitor grafana dashboard](https://discuss.elastic.co/t/eck-operator-podmonitor-grafana-dashboard/301708)

<div class="topic-metadata">

**Author:** [@huntkalio](https://discuss.elastic.co/u/huntkalio)\
**Replies:** 1\
**Last updated:** [April 19, 2022, 12:18pm UTC](https://discuss.elastic.co/t/eck-operator-podmonitor-grafana-dashboard/301708 "2022-04-19T12:18:36Z")

</div>

Does ECK operator podmonitor have a default grafana dashboard config file to monitor elastic-operator in grafana? And would you add it to GitHub - elastic/cloud-on-k8s: Elastic Cloud on Kubernetes ?

---

## [Create timestamp as index in Elasticsearch Kibana](https://discuss.elastic.co/t/create-timestamp-as-index-in-elasticsearch-kibana/302681)

<div class="topic-metadata">

**Author:** [@Manish.gupta](https://discuss.elastic.co/u/Manish.gupta)\
**Replies:** 0\
**Last updated:** [April 19, 2022, 7:39am UTC](https://discuss.elastic.co/t/create-timestamp-as-index-in-elasticsearch-kibana/302681 "2022-04-19T07:39:29Z")

</div>

Hi, I am trying to change the default index in Elasticsearch with timestamp index. please let me know if there is a way for the same.

---

## [As the server hard disk no enough and I delete the file under /elasticsearch/nodes/0/indices](https://discuss.elastic.co/t/as-the-server-hard-disk-no-enough-and-i-delete-the-file-under-elasticsearch-nodes-0-indices/302605)

<div class="topic-metadata">

**Author:** [@Whybee](https://discuss.elastic.co/u/Whybee)\
**Replies:** 3\
**Last updated:** [April 19, 2022, 7:31am UTC](https://discuss.elastic.co/t/as-the-server-hard-disk-no-enough-and-i-delete-the-file-under-elasticsearch-nodes-0-indices/302605 "2022-04-19T07:31:54Z")

</div>

{"type": "server", "timestamp": "2022-04-18T16:40:26,280+08:00", "level": "WARN", "component": "o.e.c.s.MasterService", "cluster.name": "elasticsearch", "node.name": "jenkirsappu01", "message": "failing \[create-index \[it…

---

## [Cannot order by non-grouped column\[column name\]](https://discuss.elastic.co/t/cannot-order-by-non-grouped-column-column-name/302675)

<div class="topic-metadata">

**Author:** [@dido](https://discuss.elastic.co/u/dido)\
**Replies:** 0\
**Last updated:** [April 19, 2022, 7:20am UTC](https://discuss.elastic.co/t/cannot-order-by-non-grouped-column-column-name/302675 "2022-04-19T07:20:05Z")

</div>

select \* from (select street, count(street) as counts, min(grocery) as grocery, min(school) as school, (min(grocery) + min(school)) as score from geo\_address group by 1) t order by grocery I have geo\_address index and…

---

## [Latency issue when cluster nodes are spread across data center](https://discuss.elastic.co/t/latency-issue-when-cluster-nodes-are-spread-across-data-center/302674)

<div class="topic-metadata">

**Author:** [@mSaify](https://discuss.elastic.co/u/mSaify)\
**Replies:** 0\
**Last updated:** [April 19, 2022, 7:18am UTC](https://discuss.elastic.co/t/latency-issue-when-cluster-nodes-are-spread-across-data-center/302674 "2022-04-19T07:18:09Z")

</div>

All, one of my clients has a cluster configuration where the 3 nodes are spread across 2 data centers. For a while, they have been noticing the latency on search queries. Based on network logs and cluster configuration…

---

## [Elastic 7.1.1 -\> 7.1.17 tar ball 업그레이 관련](https://discuss.elastic.co/t/elastic-7-1-1-7-1-17-tar-ball/297121)

<div class="topic-metadata">

**Author:** [@hk\_cloud](https://discuss.elastic.co/u/hk_cloud)\
**Replies:** 2\
**Last updated:** [April 19, 2022, 3:37am UTC](https://discuss.elastic.co/t/elastic-7-1-1-7-1-17-tar-ball/297121 "2022-04-19T03:37:09Z")

</div>

안녕하세요. Elasticsearch 7.1.1 -\> 7.1.17 tar ball 업그레이 하려고 하는데 궁금한 것이 있어서 문의 드립니다. 가. tar.gz을 이용하여 엘라스틱 설치 하여 사용 중입니다. 나. x-pack basic 버전으로 사용 중입니다. 문의1) ./bin/Elasticsearch-setup-passwords interactive, ./bin/Elasticse…

---

## [Updating field that is an empty string](https://discuss.elastic.co/t/updating-field-that-is-an-empty-string/302649)

<div class="topic-metadata">

**Author:** [@es\_beginner](https://discuss.elastic.co/u/es_beginner)\
**Replies:** 5\
**Last updated:** [April 19, 2022, 1:59am UTC](https://discuss.elastic.co/t/updating-field-that-is-an-empty-string/302649 "2022-04-19T01:59:49Z")

</div>

I currently have an elastic document with a field called grade. This field is an empty string. In Kibana, its registered as grade: (empty). Now when I try to update grade via: POST index/\_update/\_id { "doc": { …

---

## [Can't get Filebeat and Metricbeat DashBoard Setup](https://discuss.elastic.co/t/cant-get-filebeat-and-metricbeat-dashboard-setup/302655)

<div class="topic-metadata">

**Author:** [@asher-lab](https://discuss.elastic.co/u/asher-lab)\
**Replies:** 1\
**Last updated:** [April 19, 2022, 12:54am UTC](https://discuss.elastic.co/t/cant-get-filebeat-and-metricbeat-dashboard-setup/302655 "2022-04-19T00:54:30Z")

</div>

Hi, I have a problem setting up the dashboards for metricbeat and filebeat on my Kibana dashboard. I am using the OSS Version of ELK, MetricBeat and Filebeat 7.10.2 Here are the specs of my ELK Stack, MetricBeat and F…

---

## [Data Size and Shard Limits](https://discuss.elastic.co/t/data-size-and-shard-limits/302643)

<div class="topic-metadata">

**Author:** [@geena.rollins](https://discuss.elastic.co/u/geena.rollins)\
**Replies:** 1\
**Last updated:** [April 18, 2022, 11:30pm UTC](https://discuss.elastic.co/t/data-size-and-shard-limits/302643 "2022-04-18T23:30:11Z")

</div>

What is the maxium recommended data size per shard? What is the maxium recommended number of shards per cluster?

---

## [Scroll context exceeding 500](https://discuss.elastic.co/t/scroll-context-exceeding-500/302641)

<div class="topic-metadata">

**Author:** [@Abi\_Blista](https://discuss.elastic.co/u/Abi_Blista)\
**Replies:** 1\
**Last updated:** [April 18, 2022, 8:01pm UTC](https://discuss.elastic.co/t/scroll-context-exceeding-500/302641 "2022-04-18T20:01:33Z")

</div>

Im using python to pull large data from ES. When I tried to pull the data, Im getting this partucular issue scroll context exceeding 500. is there way to resolve this issue

---

## [Is there a way to get the next item in a search](https://discuss.elastic.co/t/is-there-a-way-to-get-the-next-item-in-a-search/302638)

<div class="topic-metadata">

**Author:** [@Nessim\_Btesh](https://discuss.elastic.co/u/Nessim_Btesh)\
**Replies:** 0\
**Last updated:** [April 18, 2022, 7:15pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-get-the-next-item-in-a-search/302638 "2022-04-18T19:15:30Z")

</div>

I have a search with 400,000 products and I need a way to get the next product in a search. Right now I cant do that because a normal way to this with Elasticsearch is to filter products that have a score greater than th…

---

## [400 The plain HTTP request was sent to HTTPS port](https://discuss.elastic.co/t/400-the-plain-http-request-was-sent-to-https-port/302284)

<div class="topic-metadata">

**Author:** [@safarial.fatemeh](https://discuss.elastic.co/u/safarial.fatemeh)\
**Replies:** 3\
**Last updated:** [April 18, 2022, 6:23pm UTC](https://discuss.elastic.co/t/400-the-plain-http-request-was-sent-to-https-port/302284 "2022-04-18T18:23:46Z")

</div>

Hi, I'm using python client only (have not installed Elasticsearch on my machine) and I'm trying to query kibana and I get following error message: Elasticsearch.exceptions.RequestError: RequestError(400, '\\r\\n400 The p…

---

## [Faield to start elastic search](https://discuss.elastic.co/t/faield-to-start-elastic-search/302608)

<div class="topic-metadata">

**Author:** [@Paritosh\_Pandey](https://discuss.elastic.co/u/Paritosh_Pandey)\
**Replies:** 2\
**Last updated:** [April 18, 2022, 4:37pm UTC](https://discuss.elastic.co/t/faield-to-start-elastic-search/302608 "2022-04-18T16:37:24Z")

</div>

I am unable to start Elasticsearch, it shows code exited \</\> Elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/Elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Resu…

---

## [Logstash is not listening port 5044](https://discuss.elastic.co/t/logstash-is-not-listening-port-5044/302621)

<div class="topic-metadata">

**Author:** [@Meda\_Akshay](https://discuss.elastic.co/u/Meda_Akshay)\
**Replies:** 18\
**Last updated:** [April 18, 2022, 3:34pm UTC](https://discuss.elastic.co/t/logstash-is-not-listening-port-5044/302621 "2022-04-18T15:34:55Z")

</div>

Hi, Am new to Logstash, here my issue is logstash is not listening at port 5044, here is my filebeat configuration output.logstash configured as following # ------------------------------ Logstash Output -------------…

---

## [Get list of all indices using Elasticsearch Java API Client 7.17](https://discuss.elastic.co/t/get-list-of-all-indices-using-elasticsearch-java-api-client-7-17/302395)

<div class="topic-metadata">

**Author:** [@saurabhrs](https://discuss.elastic.co/u/saurabhrs)\
**Replies:** 6\
**Last updated:** [April 18, 2022, 2:28pm UTC](https://discuss.elastic.co/t/get-list-of-all-indices-using-elasticsearch-java-api-client-7-17/302395 "2022-04-18T14:28:33Z")

</div>

I am using Elasticsearch Java API Client 7.17 to perform operations on my cluster. I can not find a way to get list of all indices in my cluster using this API. I have found examples to achieve this using REST APIs but …

---

## [Same template created every minute](https://discuss.elastic.co/t/same-template-created-every-minute/302623)

<div class="topic-metadata">

**Author:** [@stk1](https://discuss.elastic.co/u/stk1)\
**Replies:** 0\
**Last updated:** [April 18, 2022, 1:23pm UTC](https://discuss.elastic.co/t/same-template-created-every-minute/302623 "2022-04-18T13:23:39Z")

</div>

Hi, we are using Elasticsearch with Kibana and APM-Server for monitoring since two years. Since 3 weeks we are experiencing massive problems. First Kibana stopped due to a corrupted translog (TranslogCorruptedException)…

---

## [Adding a new field with phonetic(metaphone) value in elasticsearch index with logstash](https://discuss.elastic.co/t/adding-a-new-field-with-phonetic-metaphone-value-in-elasticsearch-index-with-logstash/302614)

<div class="topic-metadata">

**Author:** [@saiyad\_arshad\_qadir](https://discuss.elastic.co/u/saiyad_arshad_qadir)\
**Replies:** 0\
**Last updated:** [April 18, 2022, 10:44am UTC](https://discuss.elastic.co/t/adding-a-new-field-with-phonetic-metaphone-value-in-elasticsearch-index-with-logstash/302614 "2022-04-18T10:44:00Z")

</div>

I am new to Elasticsearch and trying to index phonetic value(metaphone) into my Elasticsearch index using logstash. index example: { "\_id" : "lRBYHIAB4PMEhuD9IXcF", "name":"KEVIN GENTLE" } and when we index it, i am s…

---

## [My Mapping with python is not working](https://discuss.elastic.co/t/my-mapping-with-python-is-not-working/302545)

<div class="topic-metadata">

**Author:** [@Celal\_Celik](https://discuss.elastic.co/u/Celal_Celik)\
**Replies:** 8\
**Last updated:** [April 18, 2022, 10:34am UTC](https://discuss.elastic.co/t/my-mapping-with-python-is-not-working/302545 "2022-04-18T10:34:02Z")

</div>

Hello community, I was trying to upload a simple csv-File but unfortunatelty my Mapping is not working. All my fields are still "keywords". What am I missing? def csv\_reader(filename,indexname): # connection to Ela…

---

## [Es 的攻击图数据怎么一次查询实现](https://discuss.elastic.co/t/es/302242)

<div class="topic-metadata">

**Author:** [@tianzheng183315](https://discuss.elastic.co/u/tianzheng183315)\
**Replies:** 1\
**Last updated:** [April 18, 2022, 10:12am UTC](https://discuss.elastic.co/t/es/302242 "2022-04-18T10:12:51Z")

</div>

现在有一个需求,需要统计es文档的数据 一个文档对象有一个攻击者a,和一个被攻击对象b,a和b是一个ip,每个ip有一个所属地,所属地不在文档中体现,需要另外在数据库中查询. 然后我想统计所属地之间的攻击数量,我怎么样能通过一次查询查询出数据. 我知道可以用MultiSearch可以实现一次查询,不知道这个性能怎么,各位麻烦给个建议

---

## [Unable to retrieve license information from license server {:message=\>"No Available connections"}](https://discuss.elastic.co/t/unable-to-retrieve-license-information-from-license-server-message-no-available-connections/302175)

<div class="topic-metadata">

**Author:** [@sahir](https://discuss.elastic.co/u/sahir)\
**Replies:** 7\
**Last updated:** [April 18, 2022, 7:07am UTC](https://discuss.elastic.co/t/unable-to-retrieve-license-information-from-license-server-message-no-available-connections/302175 "2022-04-18T07:07:00Z")

</div>

Hello team, I'm new to Logstash when im trying to run a logstash i getting the error like this anyone can you please look on it. \[2022-04-11T19:19:07,223\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unable to retriev…

---

## [Steps to integrate App connect with Elasticserach](https://discuss.elastic.co/t/steps-to-integrate-app-connect-with-elasticserach/302593)

<div class="topic-metadata">

**Author:** [@SnehaB](https://discuss.elastic.co/u/SnehaB)\
**Replies:** 0\
**Last updated:** [April 18, 2022, 5:10am UTC](https://discuss.elastic.co/t/steps-to-integrate-app-connect-with-elasticserach/302593 "2022-04-18T05:10:47Z")

</div>

Hello Team, Please help me to integrate ELK stack with IBM app connect. If any links or documents are there please let me know.

---

## [Filebeat 的配置问题](https://discuss.elastic.co/t/filebeat/301917)

<div class="topic-metadata">

**Author:** [@stardustman](https://discuss.elastic.co/u/stardustman)\
**Replies:** 1\
**Last updated:** [April 18, 2022, 4:53am UTC](https://discuss.elastic.co/t/filebeat/301917 "2022-04-18T04:53:08Z")

</div>

问题背景： 使用 elastic7.8 和 filebeat7.8 的版本，配置 filebeat.yml 的 setup.ilm.enabled: auto 可以生效，可以自动在 es 上创建出 index。 现在的问题： 使用 elastic7.17 和 filebeat7.17 的版本，配置 filebeat 的 setup.ilm.enabled: auto 没有生效，没有在 es 上创建出 index。 这是什么原因？…

---

## [Error setting up Dashboards with auditbeat](https://discuss.elastic.co/t/error-setting-up-dashboards-with-auditbeat/302591)

<div class="topic-metadata">

**Author:** [@b\_tolu](https://discuss.elastic.co/u/b_tolu)\
**Replies:** 0\
**Last updated:** [April 18, 2022, 4:41am UTC](https://discuss.elastic.co/t/error-setting-up-dashboards-with-auditbeat/302591 "2022-04-18T04:41:58Z")

</div>

hi so i would run the background of all i have done i am trying to create a SIEM , so I installed Elasticsearch,kibana, and auditbeat . I have made all the right settings for me to be able to startup. My issue now is tha…

---

## [Multiple logstash indexes to be created from multiple application log files](https://discuss.elastic.co/t/multiple-logstash-indexes-to-be-created-from-multiple-application-log-files/302399)

<div class="topic-metadata">

**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\
**Replies:** 2\
**Last updated:** [April 18, 2022, 4:01am UTC](https://discuss.elastic.co/t/multiple-logstash-indexes-to-be-created-from-multiple-application-log-files/302399 "2022-04-18T04:01:13Z")

</div>

Hello, Still considerably new to ELK, I have successfully set up Logstash index for one of my application log files as below conf file: server1:/etc/logstash/conf.d # cat /etc/logstash/conf.d/accessinfologs.conf input …

---

## [PowerShell Keylogging Script potential False Positive](https://discuss.elastic.co/t/powershell-keylogging-script-potential-false-positive/299364)

<div class="topic-metadata">

**Author:** [@gicetek](https://discuss.elastic.co/u/gicetek)\
**Replies:** 2\
**Last updated:** [April 18, 2022, 3:36am UTC](https://discuss.elastic.co/t/powershell-keylogging-script-potential-false-positive/299364 "2022-04-18T03:36:07Z")

</div>

I recently enabled a number of the provided rules in our test Elasticsearch/Kibana/Winlogbeat configuration and am seeing alerts on the "PowerShell Keylogging Script" rule every time I run nearly any powershell command o…

---

## [Access AppSearch APIs without authentication](https://discuss.elastic.co/t/access-appsearch-apis-without-authentication/302477)

<div class="topic-metadata">

**Author:** [@ntruongsinh](https://discuss.elastic.co/u/ntruongsinh)\
**Replies:** 2\
**Last updated:** [April 18, 2022, 2:20am UTC](https://discuss.elastic.co/t/access-appsearch-apis-without-authentication/302477 "2022-04-18T02:20:59Z")

</div>

Hi everyone, I wonder if we have anyway to disable security for AppSearch APIs when running it locally? Like searching or creating documents, we don't have to provide Authentication header? Thanks in advance.

---

## [How to change field types in xml filter](https://discuss.elastic.co/t/how-to-change-field-types-in-xml-filter/302583)

<div class="topic-metadata">

**Author:** [@hagaluly](https://discuss.elastic.co/u/hagaluly)\
**Replies:** 1\
**Last updated:** [April 17, 2022, 11:13pm UTC](https://discuss.elastic.co/t/how-to-change-field-types-in-xml-filter/302583 "2022-04-17T23:13:57Z")

</div>

i have this xml as an example \<testsuites tests="4409" failures="0" errors="0" time="23302.14700000004"\> \<testsuite errors="0" failures="0" hostname="localhost" name="pytest" skipped="1" tests="1" time="0.002" timestamp…

---

## [ECE cant connect to my instances](https://discuss.elastic.co/t/ece-cant-connect-to-my-instances/302579)

<div class="topic-metadata">

**Author:** [@joman\_alles\_goed](https://discuss.elastic.co/u/joman_alles_goed)\
**Replies:** 0\
**Last updated:** [April 17, 2022, 6:38pm UTC](https://discuss.elastic.co/t/ece-cant-connect-to-my-instances/302579 "2022-04-17T18:38:20Z")

</div>

Hello everyone, Recently i have done a ECE installation on my ubuntu machine. The installation is succesfully done i can reach the cloud UI and log in as a admin. After that i started a deployment which also is a succes…

---

## [Disabling geoip downloader is not working (elastic 7.16.2 and java 11)](https://discuss.elastic.co/t/disabling-geoip-downloader-is-not-working-elastic-7-16-2-and-java-11/302523)

<div class="topic-metadata">

**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\
**Replies:** 5\
**Last updated:** [April 17, 2022, 4:31pm UTC](https://discuss.elastic.co/t/disabling-geoip-downloader-is-not-working-elastic-7-16-2-and-java-11/302523 "2022-04-17T16:31:13Z")

</div>

RHEL release 7.9 jdk-11.0.14 (not bundled) Elasticsearch with x-pack security multi hosts/nodes cluster has been setup from Elasticsearch-7.16.2-linux-x86\_64.tar.gz. It is fully functional. I tried to disable geoip d…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=651)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=653)
