# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=660 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 661 --- ## [Sub query using over order by in elasticsearch](https://discuss.elastic.co/t/sub-query-using-over-order-by-in-elasticsearch/301658)
**Author:** [@willers](https://discuss.elastic.co/u/willers)\ **Replies:** 1\ **Last updated:** [April 7, 2022, 7:32am UTC](https://discuss.elastic.co/t/sub-query-using-over-order-by-in-elasticsearch/301658 "2022-04-07T07:32:05Z")
I need to transform the query to a query in Elasticsearch, but I didn't find a solution in my searches. Has anyone had this problem? SELECT \* FROM ( SELECT coalesce(open.day, close.day) as da… --- ## [Is there a way to read a dumped Elasticsearch index with Java?](https://discuss.elastic.co/t/is-there-a-way-to-read-a-dumped-elasticsearch-index-with-java/301654)
**Author:** [@MikeThomsen](https://discuss.elastic.co/u/MikeThomsen)\ **Replies:** 1\ **Last updated:** [April 7, 2022, 7:30am UTC](https://discuss.elastic.co/t/is-there-a-way-to-read-a-dumped-elasticsearch-index-with-java/301654 "2022-04-07T07:30:34Z")
Is there a Java API for reading the contents of an Elasticsearch index that has been dumped to disk with the 2.X backup tools? We'd prefer to not set up a 2.X cluster and do rolling upgrades and unfortunately, the folks … --- ## [Error message: org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:82](https://discuss.elastic.co/t/error-message-org-elasticsearch-bootstrap-elasticsearch-main-elasticsearch-java-82/301715)
**Author:** [@Supelec](https://discuss.elastic.co/u/Supelec)\ **Replies:** 1\ **Last updated:** [April 7, 2022, 7:29am UTC](https://discuss.elastic.co/t/error-message-org-elasticsearch-bootstrap-elasticsearch-main-elasticsearch-java-82/301715 "2022-04-07T07:29:29Z")
Hi, I installed Elasticsearch in Mac OS Monterey 12.3.1 in using brew command. The version installed is for Elasticsearch: 7.10.2/ java -version java version "1.8.0\_321" Java(TM) SE Runtime Environment (build 1.8.0\_… --- ## [A bug with \_bulk endpoint](https://discuss.elastic.co/t/a-bug-with-bulk-endpoint/301776)
**Author:** [@Rithik\_greendeck](https://discuss.elastic.co/u/Rithik_greendeck)\ **Replies:** 4\ **Last updated:** [April 7, 2022, 7:12am UTC](https://discuss.elastic.co/t/a-bug-with-bulk-endpoint/301776 "2022-04-07T07:12:56Z")
\[2022-04-06T07:32:33,436\]\[ERROR\]\[logstash.outputs.elasticsearch\]\[main\]\[1ba476d6d04397ba2f8ff005a1e5552e5a5314abde283c5a9a485566374f1026\] Encountered an unexpected error submitting a bulk request, will retry {:message=\>"S… --- ## [Elastic Maven Repository Down?](https://discuss.elastic.co/t/elastic-maven-repository-down/301589)
**Author:** [@jshyun](https://discuss.elastic.co/u/jshyun)\ **Replies:** 3\ **Last updated:** [April 7, 2022, 7:09am UTC](https://discuss.elastic.co/t/elastic-maven-repository-down/301589 "2022-04-07T07:09:56Z")
Is the Maven repository at https://artifacts.elastic.co/maven still functioning? Index pages do not get served and maven can't seem to use it as a valid repository. From other community board posts it seems Elasticsearch… --- ## [Bucket Script and Gaps](https://discuss.elastic.co/t/bucket-script-and-gaps/301619)
**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\ **Replies:** 3\ **Last updated:** [April 7, 2022, 7:06am UTC](https://discuss.elastic.co/t/bucket-script-and-gaps/301619 "2022-04-07T07:06:26Z")
Hi, According to the documentation, the bucket script should be able to deal with gaps: https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-pipeline.html#gap-policy But in my case, I go… --- ## [Fields not coming in discover](https://discuss.elastic.co/t/fields-not-coming-in-discover/301181)
**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\ **Replies:** 7\ **Last updated:** [April 7, 2022, 6:11am UTC](https://discuss.elastic.co/t/fields-not-coming-in-discover/301181 "2022-04-07T06:11:16Z")
I have a stack\_trace field in log file but in kibana it turn out to be in hidden field with no value. Rest other fields are coming as expected. I can see the field in vizualization but not in discover . The field type is… --- ## [Index Data Ingestion](https://discuss.elastic.co/t/index-data-ingestion/301830)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 1\ **Last updated:** [April 7, 2022, 5:36am UTC](https://discuss.elastic.co/t/index-data-ingestion/301830 "2022-04-07T05:36:23Z")
Hi, I am trying to understand how the ingestion works. Lets say I created an index with 6 primary shards, 1 replica. and I am ingesting to the cluster (say logstash is continuously pushing data) to a coordinating only… --- ## [Rule Failure - Rule Mapping Error](https://discuss.elastic.co/t/rule-failure-rule-mapping-error/301827)
**Author:** [@inf](https://discuss.elastic.co/u/inf)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 5:03am UTC](https://discuss.elastic.co/t/rule-failure-rule-mapping-error/301827 "2022-04-07T05:03:46Z")
Hi there, I am facing the same issue as Rules failing due to field mapping errors, except that I am using Winlogbeat. (instead of Auditbeat) I am also not using Logstash or any log transformation tools, and I am using … --- ## [Logstash-input-file scans non latin character file name cause InvalidPathException and stopped working](https://discuss.elastic.co/t/logstash-input-file-scans-non-latin-character-file-name-cause-invalidpathexception-and-stopped-working/301818)
**Author:** [@lixplor](https://discuss.elastic.co/u/lixplor)\ **Replies:** 1\ **Last updated:** [April 7, 2022, 3:37am UTC](https://discuss.elastic.co/t/logstash-input-file-scans-non-latin-character-file-name-cause-invalidpathexception-and-stopped-working/301818 "2022-04-07T03:37:14Z")
Hi, I'm using Logstash 6.8.23 with file input plugin 4.1.18 on a JRE 8 env. OS is suse11 and system default locale is zh\_CN.gbk. When Logstash collecting logs, it reached a file with non-latin name. eg. 你好.xml. Then Lo… --- ## [Bulk Import of data for different indices in presence of enrich ingest pipeline](https://discuss.elastic.co/t/bulk-import-of-data-for-different-indices-in-presence-of-enrich-ingest-pipeline/301689)
**Author:** [@Matthew\_Dominic\_Ramp](https://discuss.elastic.co/u/Matthew_Dominic_Ramp)\ **Replies:** 4\ **Last updated:** [April 7, 2022, 3:21am UTC](https://discuss.elastic.co/t/bulk-import-of-data-for-different-indices-in-presence-of-enrich-ingest-pipeline/301689 "2022-04-07T03:21:12Z")
Context: I have two indices: devices and events devices has an enrich policy associated with it and a pipeline was created to enable this data enrichment. This pipeline works fine. i want to bulk import JSON objects fo… --- ## [Best ElasticSearch configuration mode](https://discuss.elastic.co/t/best-elasticsearch-configuration-mode/301566)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 9\ **Last updated:** [April 7, 2022, 2:28am UTC](https://discuss.elastic.co/t/best-elasticsearch-configuration-mode/301566 "2022-04-07T02:28:32Z")
Years ago I configured a server\* with Elasticsearch, however, until today my knowledge to configure, manage, define nodes, is totally 0. I don't have nodes for ingest, digest, etc, as I have no idea what they do. Even m… --- ## [Close/flush/reset syslog input connection on logstash](https://discuss.elastic.co/t/close-flush-reset-syslog-input-connection-on-logstash/301813)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 2\ **Last updated:** [April 7, 2022, 2:07am UTC](https://discuss.elastic.co/t/close-flush-reset-syslog-input-connection-on-logstash/301813 "2022-04-07T02:07:42Z")
Hello, I'm handling logstash syslog input from pcf, the log can be ingested, and there is no problem with that, but when I check the file descriptor and open connection on the specific port, they kept increasing is th… --- ## [Elastic Search Logstash how to query all fields and get all fields into pipeline?](https://discuss.elastic.co/t/elastic-search-logstash-how-to-query-all-fields-and-get-all-fields-into-pipeline/301810)
**Author:** [@MLsuper](https://discuss.elastic.co/u/MLsuper)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 12:19am UTC](https://discuss.elastic.co/t/elastic-search-logstash-how-to-query-all-fields-and-get-all-fields-into-pipeline/301810 "2022-04-07T00:19:22Z")
So I have a logstash pipeline that is currently setup with this: for a query input { hosts =\> ... query =\> '{ "query": { "match\_all": {} }}' target =\> "\[@metasource\]\[\_source\]" index… --- ## [Autoresolve with watcher and PagerDuty - One trigger when an error condition arises and one when it clears](https://discuss.elastic.co/t/autoresolve-with-watcher-and-pagerduty-one-trigger-when-an-error-condition-arises-and-one-when-it-clears/301811)
**Author:** [@rasmustorkel](https://discuss.elastic.co/u/rasmustorkel)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 12:42am UTC](https://discuss.elastic.co/t/autoresolve-with-watcher-and-pagerduty-one-trigger-when-an-error-condition-arises-and-one-when-it-clears/301811 "2022-04-07T00:42:30Z")
I have created a watcher, integrated it with PagerDuty and it works nicely. But is has two problems: Every time the watcher comes alive to watch, if the error condition is still present, it sends another trigger to Pa… --- ## [Does elastic master node really delete or create an index?](https://discuss.elastic.co/t/does-elastic-master-node-really-delete-or-create-an-index/301661)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 3\ **Last updated:** [April 6, 2022, 10:49pm UTC](https://discuss.elastic.co/t/does-elastic-master-node-really-delete-or-create-an-index/301661 "2022-04-06T22:49:35Z")
I am just confuse that what exactly does master node do in cluster According to my understanding it just maintain cluster state and each data node have cluster state information. From this documentation https://www.el… --- ## [Elastic GravityApps Sql Backup Transaction Logs](https://discuss.elastic.co/t/elastic-gravityapps-sql-backup-transaction-logs/301494)
**Author:** [@Techplay27](https://discuss.elastic.co/u/Techplay27)\ **Replies:** 3\ **Last updated:** [April 6, 2022, 10:44pm UTC](https://discuss.elastic.co/t/elastic-gravityapps-sql-backup-transaction-logs/301494 "2022-04-06T22:44:30Z")
I can see quite a few transaction logs dating back to last year June and this is really using a lot of disk space up. I have a scheduled a full backup of the server, so after this successfully completes I will delete all… --- ## [Define custom unique key](https://discuss.elastic.co/t/define-custom-unique-key/301642)
**Author:** [@nn14](https://discuss.elastic.co/u/nn14)\ **Replies:** 3\ **Last updated:** [April 6, 2022, 10:42pm UTC](https://discuss.elastic.co/t/define-custom-unique-key/301642 "2022-04-06T22:42:45Z")
Hi team, Is there a way to define our own custom unique key for the document which is similar to uniqueKey provided in Solr. For e.g I need to define employeeId or a combination of 2 fields as unique id. Any example w… --- ## [Filter Values in Different Streams and Group Them in Data Table](https://discuss.elastic.co/t/filter-values-in-different-streams-and-group-them-in-data-table/301742)
**Author:** [@\_PA](https://discuss.elastic.co/u/_PA)\ **Replies:** 0\ **Last updated:** [April 6, 2022, 10:59am UTC](https://discuss.elastic.co/t/filter-values-in-different-streams-and-group-them-in-data-table/301742 "2022-04-06T10:59:02Z")
I am running ELK 7 and I have the following scenario. I have data in one index that looks like this: |Time|ID|AAA| |Apr 6, 2022 @ 11:48:11.197|300965890|tar1| |Apr 6, 2022 @ 11:48:11.196|300965890|add3| |Apr 6, 2022… --- ## [Logstash input for oracle database](https://discuss.elastic.co/t/logstash-input-for-oracle-database/301683)
**Author:** [@altink](https://discuss.elastic.co/u/altink)\ **Replies:** 2\ **Last updated:** [April 6, 2022, 9:46pm UTC](https://discuss.elastic.co/t/logstash-input-for-oracle-database/301683 "2022-04-06T21:46:29Z")
I have an Bitnami virtual ova distribution, ELK 7.17 on Debian 10. Elastic, Kibana and Logstash run as services (daemons). I have put the logstash config file logstash-ora-01.conf under /opt/bitnami/logstash/config in… --- ## [Consulta no elastic](https://discuss.elastic.co/t/consulta-no-elastic/301792)
**Author:** [@Gabriel\_mec77](https://discuss.elastic.co/u/Gabriel_mec77)\ **Replies:** 4\ **Last updated:** [April 6, 2022, 8:43pm UTC](https://discuss.elastic.co/t/consulta-no-elastic/301792 "2022-04-06T20:43:50Z")
Como procurar apenas indices em vermelho no elastic --- ## [How to delete elasticsearch logs?](https://discuss.elastic.co/t/how-to-delete-elasticsearch-logs/301666)
**Author:** [@danielbsilva2](https://discuss.elastic.co/u/danielbsilva2)\ **Replies:** 16\ **Last updated:** [April 6, 2022, 8:02pm UTC](https://discuss.elastic.co/t/how-to-delete-elasticsearch-logs/301666 "2022-04-06T20:02:29Z")
good afternoon folks how do i delete my indexes in Elasticsearch? I need to delete the logs generated in Elasticsearch from an application I have here and leave the logs from the last 3 days, I've looked here on the fo… --- ## [How do I put another related field below the columns?](https://discuss.elastic.co/t/how-do-i-put-another-related-field-below-the-columns/301564)
**Author:** [@Alejandra\_Mata1](https://discuss.elastic.co/u/Alejandra_Mata1)\ **Replies:** 7\ **Last updated:** [April 6, 2022, 7:30pm UTC](https://discuss.elastic.co/t/how-do-i-put-another-related-field-below-the-columns/301564 "2022-04-06T19:30:07Z")
I have an array of fields that I have already put in the form of columns, but my concern is that the count() appears as a metric at the bottom, but I need the date to appear, instead of count() but what I need, to ou… --- ## [How to get logstash to read/process multiple log files at the same time?](https://discuss.elastic.co/t/how-to-get-logstash-to-read-process-multiple-log-files-at-the-same-time/301710)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 2\ **Last updated:** [April 6, 2022, 7:34pm UTC](https://discuss.elastic.co/t/how-to-get-logstash-to-read-process-multiple-log-files-at-the-same-time/301710 "2022-04-06T19:34:33Z")
It seems that logstash doesnt read multiple files in the directory at the same time , what am i missing ? how do i get logstash to read all three files here ? root@dev-elk-app02:/app/input# lsof \* COMMAND PID USER FD… --- ## [Increase Virtual Memory for Elasticsearch on GKE with cloud build](https://discuss.elastic.co/t/increase-virtual-memory-for-elasticsearch-on-gke-with-cloud-build/301775)
**Author:** [@danskiyq](https://discuss.elastic.co/u/danskiyq)\ **Replies:** 3\ **Last updated:** [April 6, 2022, 4:17pm UTC](https://discuss.elastic.co/t/increase-virtual-memory-for-elasticsearch-on-gke-with-cloud-build/301775 "2022-04-06T16:17:38Z")
I have created multi-node cluster on GKE and I was using this shell script for fixing the virtual memory on nodes Set vm.max\_map\_count=262144 on the nodes of a GKE cluster #k8s · GitHub. I want it to be executed in my cl… --- ## [Elastic Endpoint 8.1.1 - Memory usage crashing services](https://discuss.elastic.co/t/elastic-endpoint-8-1-1-memory-usage-crashing-services/301274)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 1\ **Last updated:** [April 6, 2022, 3:41pm UTC](https://discuss.elastic.co/t/elastic-endpoint-8-1-1-memory-usage-crashing-services/301274 "2022-04-06T15:41:28Z")
Well the locking issue is gone but the memory usage has started to climb from the generally 512Mb usage. At one point it took 100% memory and crashed services on several servers causing downtime and lost revenue. 7.17 … --- ## [ElasticEndpoint service registration in Windows stuck after uninstall](https://discuss.elastic.co/t/elasticendpoint-service-registration-in-windows-stuck-after-uninstall/301773)
**Author:** [@MichelV](https://discuss.elastic.co/u/MichelV)\ **Replies:** 3\ **Last updated:** [April 6, 2022, 3:17pm UTC](https://discuss.elastic.co/t/elasticendpoint-service-registration-in-windows-stuck-after-uninstall/301773 "2022-04-06T15:17:57Z")
Hi, after removing the Elastic Agent with Endpoint Security the service registration of ElasticEndpoint is stuck in Windows. In services I can see Elastic Endpoint, with "Failed to read description. Error code 2". Also … --- ## [Node Role Specific Disk Watermarks](https://discuss.elastic.co/t/node-role-specific-disk-watermarks/301684)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 3\ **Last updated:** [April 6, 2022, 3:05pm UTC](https://discuss.elastic.co/t/node-role-specific-disk-watermarks/301684 "2022-04-06T15:05:19Z")
Hi All, I was wondering if there was a way to set high disk watermark based on the node role? Looking at the docs. I see the normal settings cluster.routing.allocation.disk.watermark.low, cluster.routing.allocation.di… --- ## [Sorting multiple indices with different fields](https://discuss.elastic.co/t/sorting-multiple-indices-with-different-fields/301315)
**Author:** [@marten1](https://discuss.elastic.co/u/marten1)\ **Replies:** 5\ **Last updated:** [April 6, 2022, 2:27pm UTC](https://discuss.elastic.co/t/sorting-multiple-indices-with-different-fields/301315 "2022-04-06T14:27:34Z")
Hi there, I'm having a sorting issue. I have 2 indexes which I search. I want to sort on a date field, but they have different names in each index: index01 has a datefield: publishedDate index02 has a datefield: pos… --- ## [Suggest index design for my data](https://discuss.elastic.co/t/suggest-index-design-for-my-data/301702)
**Author:** [@Martynas\_Juravicius](https://discuss.elastic.co/u/Martynas_Juravicius)\ **Replies:** 1\ **Last updated:** [April 6, 2022, 2:20pm UTC](https://discuss.elastic.co/t/suggest-index-design-for-my-data/301702 "2022-04-06T14:20:52Z")
Hey, everyone, We are currently building some search engine for our internal data and we are using Elasticsearch for that. Our data looks like this: Object A: {attribute\_a\_1, attribute\_a\_2} - 100M of object A; Object … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=659) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=661)