# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=663 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 664 --- ## [Unable to activate GOLD license](https://discuss.elastic.co/t/unable-to-activate-gold-license/301524)
**Author:** [@discuss\_lipak](https://discuss.elastic.co/u/discuss_lipak)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 2:37pm UTC](https://discuss.elastic.co/t/unable-to-activate-gold-license/301524 "2022-04-04T14:37:43Z")
We are having Elasticsearch GOLD license for our org and we are trying to install the license with security disabled. But we are getting error "Cannot install a \[GOLD\] license unless TLS is configured or security is dis… --- ## [I have a problem when I want to send logs of clamav-0.104.2.linux.x86\_64 to EK version 7.14.2 , ubuntu 20.04](https://discuss.elastic.co/t/i-have-a-problem-when-i-want-to-send-logs-of-clamav-0-104-2-linux-x86-64-to-ek-version-7-14-2-ubuntu-20-04/297611)
**Author:** [@khouloud1](https://discuss.elastic.co/u/khouloud1)\ **Replies:** 9\ **Last updated:** [April 4, 2022, 2:31pm UTC](https://discuss.elastic.co/t/i-have-a-problem-when-i-want-to-send-logs-of-clamav-0-104-2-linux-x86-64-to-ek-version-7-14-2-ubuntu-20-04/297611 "2022-04-04T14:31:12Z")
I have a problem when I want to send logs of clamav-0.104.2.linux.x86\_64 to EK version 7.14.2 I did configure PFSense to send logsto EK but I did not find the best procedure to configure Elasticsearch and Kibana (7.14.2… --- ## [How to calculate variance in a data table visualization](https://discuss.elastic.co/t/how-to-calculate-variance-in-a-data-table-visualization/301501)
**Author:** [@AICHP](https://discuss.elastic.co/u/AICHP)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 11:37am UTC](https://discuss.elastic.co/t/how-to-calculate-variance-in-a-data-table-visualization/301501 "2022-04-04T11:37:26Z")
Hi All, This is prosenjit . I am a new to Kibana. I am trying to develope dashboards and visualization in Kibana hosted in Peoplesoft 9.2 FSCM suite. Version :- 7.10 In my current requirement I need to calulate a vari… --- ## [Mapping\_data with 2 index](https://discuss.elastic.co/t/mapping-data-with-2-index/300495)
**Author:** [@wdffw](https://discuss.elastic.co/u/wdffw)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 11:41am UTC](https://discuss.elastic.co/t/mapping-data-with-2-index/300495 "2022-04-04T11:41:10Z")
Hello, I have a question about kibana and any help is welcome, I'm stuck on this for a week. I have two indexes (index1 and index2 let's say) and I want to create a mapping in index1 which has as name change and whose … --- ## [8.1.1 Cannot display Logstash pipeline in monitoring UI](https://discuss.elastic.co/t/8-1-1-cannot-display-logstash-pipeline-in-monitoring-ui/300554)
**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\ **Replies:** 17\ **Last updated:** [April 4, 2022, 10:54am UTC](https://discuss.elastic.co/t/8-1-1-cannot-display-logstash-pipeline-in-monitoring-ui/300554 "2022-04-04T10:54:29Z")
I have migrated the Elastic stack from 7.17.1 to 8.1.1. After the upgrade everything works fine, except the Kibana monitoring logstash pipeline viewer UI. stack monitoring \> logstash \> pipelines pipeline main points… --- ## [Elasticsearch API throws search\_phase\_execution\_exception error](https://discuss.elastic.co/t/elasticsearch-api-throws-search-phase-execution-exception-error/301495)
**Author:** [@itsakiridisfs](https://discuss.elastic.co/u/itsakiridisfs)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 10:42am UTC](https://discuss.elastic.co/t/elasticsearch-api-throws-search-phase-execution-exception-error/301495 "2022-04-04T10:42:52Z")
Hello, we are using the Elasticsearch API, to do an aggregation with two fields and we get the following error: Merging/Reducing the multi\_term aggregations failed when computing the aggregation GroupByLevel & GroupByPro… --- ## [Querying a field name across multiple indices for identical value](https://discuss.elastic.co/t/querying-a-field-name-across-multiple-indices-for-identical-value/301436)
**Author:** [@sectorx](https://discuss.elastic.co/u/sectorx)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 10:24am UTC](https://discuss.elastic.co/t/querying-a-field-name-across-multiple-indices-for-identical-value/301436 "2022-04-04T10:24:48Z")
I was hoping someone can offer a level of guidance. I have an Elasticsearch Enterprise cluster which is made up of three servers. My question is actually a basic one. There are two indices that I have - a) okta-ioc-i… --- ## [How documents is retrieved if we are not using \_routing](https://discuss.elastic.co/t/how-documents-is-retrieved-if-we-are-not-using-routing/301479)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 3\ **Last updated:** [April 4, 2022, 10:03am UTC](https://discuss.elastic.co/t/how-documents-is-retrieved-if-we-are-not-using-routing/301479 "2022-04-04T10:03:23Z")
I have an index with 3 primary and 1 replicas,total 6 shards for an index. I sent 5 messages to Elasticsearch cluster and these messages is distributed among 5 different shards. As a client i am curious how a client ca… --- ## [In which version was cluster.initial\_master\_nodes first introduced?](https://discuss.elastic.co/t/in-which-version-was-cluster-initial-master-nodes-first-introduced/301484)
**Author:** [@rachit\_upadhyay](https://discuss.elastic.co/u/rachit_upadhyay)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 9:58am UTC](https://discuss.elastic.co/t/in-which-version-was-cluster-initial-master-nodes-first-introduced/301484 "2022-04-04T09:58:13Z")
Which version was the cluster.initial\_master\_nodes first introduced? --- ## [Too long search with sort inside query after migrate es6.8 to es7.16](https://discuss.elastic.co/t/too-long-search-with-sort-inside-query-after-migrate-es6-8-to-es7-16/301157)
**Author:** [@111338](https://discuss.elastic.co/u/111338)\ **Replies:** 3\ **Last updated:** [April 4, 2022, 9:52am UTC](https://discuss.elastic.co/t/too-long-search-with-sort-inside-query-after-migrate-es6-8-to-es7-16/301157 "2022-04-04T09:52:54Z")
Several years we live with es68 and it works fine. But now we want to migrate to es716 and we got problem with queries which contains sort option inside. For example, we have simple query which returns only one record G… --- ## [Rollover "action time" seems to increase 10m each day](https://discuss.elastic.co/t/rollover-action-time-seems-to-increase-10m-each-day/301483)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 9:46am UTC](https://discuss.elastic.co/t/rollover-action-time-seems-to-increase-10m-each-day/301483 "2022-04-04T09:46:41Z")
In my setup, the indices are created every day at midnight. I started to notice that "current action time" is increasing about 10m per day, which is starting to be a pattern. Here are the prints: 03-04-2022 04-04-20… --- ## [Mlockall in elastic 7.15.2](https://discuss.elastic.co/t/mlockall-in-elastic-7-15-2/301326)
**Author:** [@samiujan](https://discuss.elastic.co/u/samiujan)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 9:38am UTC](https://discuss.elastic.co/t/mlockall-in-elastic-7-15-2/301326 "2022-04-04T09:38:59Z")
Hi I have changed memory settings for the system and elastic, both, while working on ES v7.6.2 More recently, I've found an ES system running 7.15.2 whose mlockall returned false I checked the documentation and it say… --- ## [Visualize date range pie using custom timestamp with format YYYY-MM-DD-HH:MM:SS](https://discuss.elastic.co/t/visualize-date-range-pie-using-custom-timestamp-with-format-yyyy-mm-dd-hhss/301456)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 9:10am UTC](https://discuss.elastic.co/t/visualize-date-range-pie-using-custom-timestamp-with-format-yyyy-mm-dd-hhss/301456 "2022-04-04T09:10:39Z")
Dear all, I am trying to visualize a pie chart using one of my custom timestamp columns available in my custom log which has the format YYYY-MM-DD-HH:MM:SS (example 2020-02-18-00:13:17). However "create visualizations… --- ## [Create visualization with average of the last 3 weeks](https://discuss.elastic.co/t/create-visualization-with-average-of-the-last-3-weeks/301288)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 9:00am UTC](https://discuss.elastic.co/t/create-visualization-with-average-of-the-last-3-weeks/301288 "2022-04-04T09:00:11Z")
Hello! I would like to know if there is any way to create a visualization in kibana that makes an average of a metric of the last 3 weeks. I attached a simple drawing for better understanding. If someone could help … --- ## [How to configure metric threshold using elastic query](https://discuss.elastic.co/t/how-to-configure-metric-threshold-using-elastic-query/301307)
**Author:** [@waelboss](https://discuss.elastic.co/u/waelboss)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 8:27am UTC](https://discuss.elastic.co/t/how-to-configure-metric-threshold-using-elastic-query/301307 "2022-04-04T08:27:00Z")
i want to create a metric threshold using the elastic query that calculate the percentage rate between Max value filed and Current value field and fire the alert when the rate \>= 90% could you please help to write the q… --- ## [Elasticsearch performance](https://discuss.elastic.co/t/elasticsearch-performance/301430)
**Author:** [@osamaali2405](https://discuss.elastic.co/u/osamaali2405)\ **Replies:** 5\ **Last updated:** [April 4, 2022, 8:23am UTC](https://discuss.elastic.co/t/elasticsearch-performance/301430 "2022-04-04T08:23:23Z")
I have an issue when try to update in Elasticsearch, sometimes it takes more than 10 seconds According to the elastic logs, the overall health check itself takes too long , below example is \> 20 seconds {"type": "serve… --- ## [Help with a visualization](https://discuss.elastic.co/t/help-with-a-visualization/301267)
**Author:** [@edu\_perez\_alvarez](https://discuss.elastic.co/u/edu_perez_alvarez)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 8:15am UTC](https://discuss.elastic.co/t/help-with-a-visualization/301267 "2022-04-04T08:15:00Z")
Hello! I have a simple visualization in a dashboard. X-axis is the @timestamp. Y-axis is a MetricValue of a service. I want to add another visualization (another graphic) with the same X-axis. Here, the MetricValue for … --- ## [How to add hyperlink on pie chart block?](https://discuss.elastic.co/t/how-to-add-hyperlink-on-pie-chart-block/300947)
**Author:** [@varsha\_kamble](https://discuss.elastic.co/u/varsha_kamble)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 8:06am UTC](https://discuss.elastic.co/t/how-to-add-hyperlink-on-pie-chart-block/300947 "2022-04-04T08:06:10Z")
hello there? I need to add hyperlinks on pie chart so that it will redirected to other webpage , any provision to do that ? --- ## [How to Reduce Received Logs Size in ELK Stack?](https://discuss.elastic.co/t/how-to-reduce-received-logs-size-in-elk-stack/301066)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 31\ **Last updated:** [April 4, 2022, 7:56am UTC](https://discuss.elastic.co/t/how-to-reduce-received-logs-size-in-elk-stack/301066 "2022-04-04T07:56:54Z")
Hi, I would like to ask, any way we can compress / dedup the sizes of the logs that we received in ELK stack? Thanks. --- ## [Can I have only one master eligible node in elasticsearch](https://discuss.elastic.co/t/can-i-have-only-one-master-eligible-node-in-elasticsearch/301461)
**Author:** [@rachit\_upadhyay](https://discuss.elastic.co/u/rachit_upadhyay)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 7:39am UTC](https://discuss.elastic.co/t/can-i-have-only-one-master-eligible-node-in-elasticsearch/301461 "2022-04-04T07:39:46Z")
I am getting following log message when my single master eligible node goes down and then starts again in ecs. Is it possible to have a cluster with only one master eligible node? What is the ideal number of master e… --- ## [Logstash queue.drain: true setting not being honored](https://discuss.elastic.co/t/logstash-queue-drain-true-setting-not-being-honored/301460)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 7:19am UTC](https://discuss.elastic.co/t/logstash-queue-drain-true-setting-not-being-honored/301460 "2022-04-04T07:19:33Z")
I've enabled the queue.drain: true setting on one of my logstash instances which has a persistent queue. The behavior I would expect is that when I stop the logstash process ( systemctl logstash stop ) the page files wo… --- ## [Elasticsearch on large HW](https://discuss.elastic.co/t/elasticsearch-on-large-hw/301445)
**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\ **Replies:** 3\ **Last updated:** [April 4, 2022, 7:16am UTC](https://discuss.elastic.co/t/elasticsearch-on-large-hw/301445 "2022-04-04T07:16:57Z")
Hi, There is request for me to set up Elasticsearch cluster (8.1) on large hardwares. The hardware of the data nodes: RAM: 384GB Cores: 48 Storage: 11.52 TB SSD Please help me how to set the jvm.options for this set… --- ## [Resurrect Connection to dead ES Instance](https://discuss.elastic.co/t/resurrect-connection-to-dead-es-instance/300265)
**Author:** [@karewise\_tech](https://discuss.elastic.co/u/karewise_tech)\ **Replies:** 0\ **Last updated:** [March 22, 2022, 5:08am UTC](https://discuss.elastic.co/t/resurrect-connection-to-dead-es-instance/300265 "2022-03-22T05:08:52Z")
\[logstash.outputs.Elasticsearch\]\[main\] Attempted to resurrect connection to dead ES instance, but got an error {:url=\>"http://elastic:xxxxxx@elasticsearch:9200/", :exception=\>LogStash::Outputs::Elasticsearch::HttpClient:… --- ## [Filebeat logstash encoding problem](https://discuss.elastic.co/t/filebeat-logstash-encoding-problem/301454)
**Author:** [@joie](https://discuss.elastic.co/u/joie)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 6:33am UTC](https://discuss.elastic.co/t/filebeat-logstash-encoding-problem/301454 "2022-04-04T06:33:31Z")
Hi Thank you in advance. i am very stuggle to deal with this problem. push the oracle alert.log from the filebeat to logstash and see int ths slack message. my data source in alert log (Mon Apr 4 15:11:52 KST 2022 한글… --- ## [Parent-Child Relationship performance](https://discuss.elastic.co/t/parent-child-relationship-performance/301416)
**Author:** [@sanders\_2345](https://discuss.elastic.co/u/sanders_2345)\ **Replies:** 0\ **Last updated:** [April 3, 2022, 8:17am UTC](https://discuss.elastic.co/t/parent-child-relationship-performance/301416 "2022-04-03T08:17:16Z")
We've one usecase to implement where we want to maintain a relationship between two types of documents. We tried to put in the same document but the document size exceeding 200kb. So we're exploring parent-child relation… --- ## [Changing path to which pv is pointing](https://discuss.elastic.co/t/changing-path-to-which-pv-is-pointing/301311)
**Author:** [@shisir99](https://discuss.elastic.co/u/shisir99)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 12:41am UTC](https://discuss.elastic.co/t/changing-path-to-which-pv-is-pointing/301311 "2022-04-04T00:41:32Z")
Hello, I want to change the path to which the following pv is pointing. I am using Elasticsearch helm chart provided by elastic.co --- ## [Logging on startup](https://discuss.elastic.co/t/logging-on-startup/301354)
**Author:** [@dkaflowitz](https://discuss.elastic.co/u/dkaflowitz)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 12:35am UTC](https://discuss.elastic.co/t/logging-on-startup/301354 "2022-04-04T00:35:28Z")
Does logging, including login that the application is starting, begin on startup or does it start some time after? If so is this documented anywhere? --- ## [JVM heap size arguments](https://discuss.elastic.co/t/jvm-heap-size-arguments/301343)
**Author:** [@Leo\_Collette](https://discuss.elastic.co/u/Leo_Collette)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 12:35am UTC](https://discuss.elastic.co/t/jvm-heap-size-arguments/301343 "2022-04-04T00:35:05Z")
hello guys, in my system we adopted a pattern of adjusting the heap size parameter to 1G, but over time the service ends up consuming more than this value, is this ok or not? another question, does adjusting a limit for … --- ## [After deleting an index and creating new index with same name, new data is visible for sometime after than old data is coming](https://discuss.elastic.co/t/after-deleting-an-index-and-creating-new-index-with-same-name-new-data-is-visible-for-sometime-after-than-old-data-is-coming/301423)
**Author:** [@sona](https://discuss.elastic.co/u/sona)\ **Replies:** 2\ **Last updated:** [April 3, 2022, 6:10pm UTC](https://discuss.elastic.co/t/after-deleting-an-index-and-creating-new-index-with-same-name-new-data-is-visible-for-sometime-after-than-old-data-is-coming/301423 "2022-04-03T18:10:38Z")
I have deleted an index from my Elasticsearch and created the new index with same name. When I am trying to get doc.count using below command then initially it is showing 0 curl -X GET "localhost:9200/\_cat/indices?v&pr… --- ## [Connection refused elasticsearch port 9200 on ubuntu 20.04](https://discuss.elastic.co/t/connection-refused-elasticsearch-port-9200-on-ubuntu-20-04/301335)
**Author:** [@danielbsilva2](https://discuss.elastic.co/u/danielbsilva2)\ **Replies:** 12\ **Last updated:** [April 3, 2022, 5:15pm UTC](https://discuss.elastic.co/t/connection-refused-elasticsearch-port-9200-on-ubuntu-20-04/301335 "2022-04-03T17:15:11Z")
good afternoon guys my English is not very good but I will try to explain myself I have a test server here at digitalocean with ubuntu 20.04 and I installed Elasticsearch for log collection on this same test server but … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=662) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=664)