# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=670

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 671

---

## [Remote reindex ElasticSearch API giving Null Pointer Exception](https://discuss.elastic.co/t/remote-reindex-elasticsearch-api-giving-null-pointer-exception/300843)

<div class="topic-metadata">

**Author:** [@Prashant\_Kamble](https://discuss.elastic.co/u/Prashant_Kamble)\
**Replies:** 1\
**Last updated:** [March 28, 2022, 1:01pm UTC](https://discuss.elastic.co/t/remote-reindex-elasticsearch-api-giving-null-pointer-exception/300843 "2022-03-28T13:01:09Z")

</div>

Remote reindex Elasticsearch API giving Null Pointer Exception GET ..../tasks/{taskid} ------ ----- "error" : { "type" : "null\_pointer\_exception", "reason" : null } Can someone know what could be the cause…

---

## [Enable email Alerts for High Severity Detections](https://discuss.elastic.co/t/enable-email-alerts-for-high-severity-detections/300320)

<div class="topic-metadata">

**Author:** [@jbal24](https://discuss.elastic.co/u/jbal24)\
**Replies:** 2\
**Last updated:** [March 28, 2022, 11:59am UTC](https://discuss.elastic.co/t/enable-email-alerts-for-high-severity-detections/300320 "2022-03-28T11:59:44Z")

</div>

Hi All, How can I enable email Alerts for ALL High Severity Detections? Best regards,

---

## [Error accessing Kibana after Upgrade](https://discuss.elastic.co/t/error-accessing-kibana-after-upgrade/300677)

<div class="topic-metadata">

**Author:** [@kubernetes87](https://discuss.elastic.co/u/kubernetes87)\
**Replies:** 12\
**Last updated:** [March 28, 2022, 11:46am UTC](https://discuss.elastic.co/t/error-accessing-kibana-after-upgrade/300677 "2022-03-28T11:46:45Z")

</div>

Hi community, for testing purposes I copied a VM with Ubuntu 18.04.6. On that machine everything worked fine. I upgraded the Ubuntu to 21.10 (the underlying Kibana and Elasticsearch had been updated too). Now I have …

---

## [Anomaly detection rules don't execute provided actions](https://discuss.elastic.co/t/anomaly-detection-rules-dont-execute-provided-actions/300691)

<div class="topic-metadata">

**Author:** [@Rick\_V](https://discuss.elastic.co/u/Rick_V)\
**Replies:** 1\
**Last updated:** [March 28, 2022, 11:44am UTC](https://discuss.elastic.co/t/anomaly-detection-rules-dont-execute-provided-actions/300691 "2022-03-28T11:44:54Z")

</div>

Hi, I've got a detection rule set up for a anomaly job, it checks whether in the last 5 minutes an anomaly higher than 50, 75 or 90 was reported and then performs two action: index a document with data such as the score…

---

## [How to distribute documents across shards equally, using \_routing in Elasticsearch](https://discuss.elastic.co/t/how-to-distribute-documents-across-shards-equally-using-routing-in-elasticsearch/300802)

<div class="topic-metadata">

**Author:** [@likhith1995](https://discuss.elastic.co/u/likhith1995)\
**Replies:** 9\
**Last updated:** [March 28, 2022, 11:41am UTC](https://discuss.elastic.co/t/how-to-distribute-documents-across-shards-equally-using-routing-in-elasticsearch/300802 "2022-03-28T11:41:50Z")

</div>

Hi Team, We are ingesting the data into Elasticsearch, using 3 routing values (namely 3g, 4g, 5g). We assigned 3 primary shards and 1 replica. Index Rollover is configured to 1gb (max per primary shard) for testing. Wh…

---

## [The index creating by ElasticSearch(6.8.8) not match the configuration in code?](https://discuss.elastic.co/t/the-index-creating-by-elasticsearch-6-8-8-not-match-the-configuration-in-code/300651)

<div class="topic-metadata">

**Author:** [@xuekg](https://discuss.elastic.co/u/xuekg)\
**Replies:** 2\
**Last updated:** [March 28, 2022, 11:24am UTC](https://discuss.elastic.co/t/the-index-creating-by-elasticsearch-6-8-8-not-match-the-configuration-in-code/300651 "2022-03-28T11:24:10Z")

</div>

I hava a cluster of ES with 3 servers. The version of ES and ik are same 6.8.8. Dependency of spring boot: \<groupId\>org.springframework.boot\</groupId\> \<artifactId\>spring-boot-dependencies\</artifactId\> \<version\>2.2.13.…

---

## [Phonetic search with \_msearch query](https://discuss.elastic.co/t/phonetic-search-with-msearch-query/300755)

<div class="topic-metadata">

**Author:** [@Sumit\_Suman](https://discuss.elastic.co/u/Sumit_Suman)\
**Replies:** 1\
**Last updated:** [March 28, 2022, 8:32am UTC](https://discuss.elastic.co/t/phonetic-search-with-msearch-query/300755 "2022-03-28T08:32:01Z")

</div>

Hi, I am new to Elasticsearch, I was doing one POC on the Elasticsearch and I was trying to implement the phonetic search. For that, I have installed the phonetic analyzer in the server and created the index by putting …

---

## [Getting last document per specific field](https://discuss.elastic.co/t/getting-last-document-per-specific-field/300564)

<div class="topic-metadata">

**Author:** [@Malo\_Maisonneuve](https://discuss.elastic.co/u/Malo_Maisonneuve)\
**Replies:** 3\
**Last updated:** [March 28, 2022, 8:15am UTC](https://discuss.elastic.co/t/getting-last-document-per-specific-field/300564 "2022-03-28T08:15:22Z")

</div>

Hi, I'm collecting logs from multiple devices, and I'm trying to retrieve the last log from each device. For instance, I'd like to have : "deviceId": 4568 =\> {content of last log according to timestamp for this devic…

---

## [Configuration options Auditbeat in windows 10](https://discuss.elastic.co/t/configuration-options-auditbeat-in-windows-10/300453)

<div class="topic-metadata">

**Author:** [@nour41\_nour41](https://discuss.elastic.co/u/nour41_nour41)\
**Replies:** 2\
**Last updated:** [March 28, 2022, 7:43am UTC](https://discuss.elastic.co/t/configuration-options-auditbeat-in-windows-10/300453 "2022-03-28T07:43:15Z")

</div>

configuration options Auditbeat in windows 10

---

## [AIX support for Elastic Stack](https://discuss.elastic.co/t/aix-support-for-elastic-stack/300806)

<div class="topic-metadata">

**Author:** [@mathur7vidit](https://discuss.elastic.co/u/mathur7vidit)\
**Replies:** 2\
**Last updated:** [March 28, 2022, 7:40am UTC](https://discuss.elastic.co/t/aix-support-for-elastic-stack/300806 "2022-03-28T07:40:50Z")

</div>

Hi Team, As per Elastic support matrix, AIX is not mentioned anywhere, just wanted to confirm once again here, by any chance, AIX is being supported by any component of Elastic stack? Support matrix URL: Support Matrix…

---

## [High cpu load, just a one node working on 100%](https://discuss.elastic.co/t/high-cpu-load-just-a-one-node-working-on-100/300751)

<div class="topic-metadata">

**Author:** [@phmean21](https://discuss.elastic.co/u/phmean21)\
**Replies:** 2\
**Last updated:** [March 28, 2022, 7:37am UTC](https://discuss.elastic.co/t/high-cpu-load-just-a-one-node-working-on-100/300751 "2022-03-28T07:37:26Z")

</div>

Hi everyone, i\`m newbie an elastic. I have cluster of 3 nodes with ES 7.15.0. Problem is just 1 node working on indexing. curl -s -XGET -u user:pass "mv-elk-data-01:9200/\_cat/thread\_pool" |grep " write " mv-elk-data-0…

---

## [Bootstrap vulnerabilities](https://discuss.elastic.co/t/bootstrap-vulnerabilities/300124)

<div class="topic-metadata">

**Author:** [@frenkel](https://discuss.elastic.co/u/frenkel)\
**Replies:** 4\
**Last updated:** [March 28, 2022, 6:51am UTC](https://discuss.elastic.co/t/bootstrap-vulnerabilities/300124 "2022-03-28T06:51:18Z")

</div>

Hi I have a question about bootstrap vulnerabilities. In bootstrap versions below 4.1.2, these 3 vulnerabilities have been found: We are using Kibana as part of our solution and when digging into the files we saw t…

---

## [Elasticsearch 8 single node replicas 0](https://discuss.elastic.co/t/elasticsearch-8-single-node-replicas-0/299676)

<div class="topic-metadata">

**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\
**Replies:** 9\
**Last updated:** [March 28, 2022, 6:45am UTC](https://discuss.elastic.co/t/elasticsearch-8-single-node-replicas-0/299676 "2022-03-28T06:45:26Z")

</div>

I have a single node cluster which is showing yellow because replicas are set to 1 Is there a way to get this setup so that all future indexes have replicas set to 0 This used to be easy with legacy templates curl -XP…

---

## [Nearby Query with Dynamic Data](https://discuss.elastic.co/t/nearby-query-with-dynamic-data/300800)

<div class="topic-metadata">

**Author:** [@kabilsharma](https://discuss.elastic.co/u/kabilsharma)\
**Replies:** 1\
**Last updated:** [March 28, 2022, 6:35am UTC](https://discuss.elastic.co/t/nearby-query-with-dynamic-data/300800 "2022-03-28T06:35:01Z")

</div>

(Nearby Query) We are building a search engine where user will type like Restaurant (Category) in Delhi (place) Bar (Category) in Mumbai (place) We are supposed to search first tag into category and second …

---

## [Logstash 8.1.1 with file input plugin hangs](https://discuss.elastic.co/t/logstash-8-1-1-with-file-input-plugin-hangs/300789)

<div class="topic-metadata">

**Author:** [@geena.rollins](https://discuss.elastic.co/u/geena.rollins)\
**Replies:** 4\
**Last updated:** [March 28, 2022, 12:38am UTC](https://discuss.elastic.co/t/logstash-8-1-1-with-file-input-plugin-hangs/300789 "2022-03-28T00:38:43Z")

</div>

On Amazon Linux 2 AMI (HVM) - Kernel 5.10, I installed Java-17, Elasticsearch 8.1.1, and Logstash 8.1.1. When I use the file input plugin, logstash hangs. logstash.yml is node.name: tester file.conf is input { fi…

---

## [Connection refused on put mapping](https://discuss.elastic.co/t/connection-refused-on-put-mapping/300790)

<div class="topic-metadata">

**Author:** [@Arnab\_Dey](https://discuss.elastic.co/u/Arnab_Dey)\
**Replies:** 3\
**Last updated:** [March 28, 2022, 12:00am UTC](https://discuss.elastic.co/t/connection-refused-on-put-mapping/300790 "2022-03-28T00:00:07Z")

</div>

Can anyone help me with the /put request for mapping in Elasticsearch the elk is deployed in a server but the put request always gives a connection refused exception the Url is http://#.##.##.##:9200/intscript And pls …

---

## [Can Logstash 7.x work with elastic 8.x](https://discuss.elastic.co/t/can-logstash-7-x-work-with-elastic-8-x/300512)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 1\
**Last updated:** [March 27, 2022, 11:56pm UTC](https://discuss.elastic.co/t/can-logstash-7-x-work-with-elastic-8-x/300512 "2022-03-27T23:56:26Z")

</div>

Hi all I have a question before upgrading elastic to 8.x Do i have to upgrade all logstash and filebeat node to version 8.x or it can be keep at version 7.17 Since there is a lot of logstash and filebeat node in my sy…

---

## [Running multiple servers in one command](https://discuss.elastic.co/t/running-multiple-servers-in-one-command/300578)

<div class="topic-metadata">

**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\
**Replies:** 1\
**Last updated:** [March 27, 2022, 11:50pm UTC](https://discuss.elastic.co/t/running-multiple-servers-in-one-command/300578 "2022-03-27T23:50:56Z")

</div>

Hi, Each folder(Elasticsearch,Logstash,Kibana) runs a completely different type of server. They have to have 3 command instances up at the same time. Is there a way I can run the following commands within each folder …

---

## [Some vulnerabilities are coming from Elasticsearch rest high level client v7.16.3](https://discuss.elastic.co/t/some-vulnerabilities-are-coming-from-elasticsearch-rest-high-level-client-v7-16-3/300614)

<div class="topic-metadata">

**Author:** [@Sagarika\_Mahalik](https://discuss.elastic.co/u/Sagarika_Mahalik)\
**Replies:** 1\
**Last updated:** [March 27, 2022, 11:47pm UTC](https://discuss.elastic.co/t/some-vulnerabilities-are-coming-from-elasticsearch-rest-high-level-client-v7-16-3/300614 "2022-03-27T23:47:48Z")

</div>

There is one vulnerability is coming from Elasticsearch rest high level client v7.16.3. Is there any way to mitigate this? Below is the link for CVE: https://nvd.nist.gov/vuln/detail/CVE-2022-23708

---

## [Unable to get Elastic and Kibana working](https://discuss.elastic.co/t/unable-to-get-elastic-and-kibana-working/299829)

<div class="topic-metadata">

**Author:** [@LtChachee](https://discuss.elastic.co/u/LtChachee)\
**Replies:** 6\
**Last updated:** [March 27, 2022, 10:43pm UTC](https://discuss.elastic.co/t/unable-to-get-elastic-and-kibana-working/299829 "2022-03-27T22:43:38Z")

</div>

Hello, I've been trying for hours to get an ELK stack setup so I can start learning it. I attempted the docker guide, but the Kibana container was always unhealthy, and I couldn't find a fix for it here or on the intern…

---

## [Logstash output to Prometheus](https://discuss.elastic.co/t/logstash-output-to-prometheus/300686)

<div class="topic-metadata">

**Author:** [@Stephy\_Jacob](https://discuss.elastic.co/u/Stephy_Jacob)\
**Replies:** 3\
**Last updated:** [March 27, 2022, 4:15pm UTC](https://discuss.elastic.co/t/logstash-output-to-prometheus/300686 "2022-03-27T16:15:15Z")

</div>

Hi, Could you please confirm whether we can send output of Logstash to Prometheus

---

## [S3 output plugin exception exception=\>#\<Errno::ENOENT: No such file or directory - No such file or directory](https://discuss.elastic.co/t/s3-output-plugin-exception-exception-errno-no-such-file-or-directory-no-such-file-or-directory/300775)

<div class="topic-metadata">

**Author:** [@Juda\_Barnes](https://discuss.elastic.co/u/Juda_Barnes)\
**Replies:** 0\
**Last updated:** [March 27, 2022, 7:19am UTC](https://discuss.elastic.co/t/s3-output-plugin-exception-exception-errno-no-such-file-or-directory-no-such-file-or-directory/300775 "2022-03-27T07:19:09Z")

</div>

Getting the following exception and then pipeline being terminated, :error=\>"(IOError) closed stream", :exception=\>Java::OrgJrubyExceptions::IOError, :backtrace=\>\["org.jruby.RubyIO.write(org/jruby/RubyIO.java:1467)", "o…

---

## [How to convert all field names starting with string to integer](https://discuss.elastic.co/t/how-to-convert-all-field-names-starting-with-string-to-integer/300728)

<div class="topic-metadata">

**Author:** [@hagaluly](https://discuss.elastic.co/u/hagaluly)\
**Replies:** 4\
**Last updated:** [March 26, 2022, 7:40pm UTC](https://discuss.elastic.co/t/how-to-convert-all-field-names-starting-with-string-to-integer/300728 "2022-03-26T19:40:36Z")

</div>

i have tried this block without success i haven't find a proper way how to use wildcards filter { if \[fieldname\] =~ /^STAGED.\*/ { mutate { convert =\> {"\[fieldname\]" =\> "integer"} } }…

---

## [Filter file.path](https://discuss.elastic.co/t/filter-file-path/300695)

<div class="topic-metadata">

**Author:** [@Arraso26](https://discuss.elastic.co/u/Arraso26)\
**Replies:** 2\
**Last updated:** [March 26, 2022, 4:42pm UTC](https://discuss.elastic.co/t/filter-file-path/300695 "2022-03-26T16:42:09Z")

</div>

Hi, I would like to filter the logs by the path /server/www/html/log.es/logs/access.log and I have no idea how to do it if anyone can help.

---

## [Getting right shards and replicas count](https://discuss.elastic.co/t/getting-right-shards-and-replicas-count/300715)

<div class="topic-metadata">

**Author:** [@tflorac](https://discuss.elastic.co/u/tflorac)\
**Replies:** 6\
**Last updated:** [March 26, 2022, 1:57pm UTC](https://discuss.elastic.co/t/getting-right-shards-and-replicas-count/300715 "2022-03-26T13:57:02Z")

</div>

Hi, I'm building a new application using Elasticsearch. This application will have to manage a relatively low number of documents (10.000 at start!), but many of these documents are quite huge and can contain multiple b…

---

## [How to contribute to edits on the website documentation](https://discuss.elastic.co/t/how-to-contribute-to-edits-on-the-website-documentation/300712)

<div class="topic-metadata">

**Author:** [@polarknight](https://discuss.elastic.co/u/polarknight)\
**Replies:** 6\
**Last updated:** [March 26, 2022, 1:55pm UTC](https://discuss.elastic.co/t/how-to-contribute-to-edits-on-the-website-documentation/300712 "2022-03-26T13:55:18Z")

</div>

Hi all, I hope this finds everyone well. I've been looking around but after, what I believe is incorrect as regards process, making a pull request for a documentation error on the elastic.co website for getting set up …

---

## [Elasticsearch does not listen on ipv4](https://discuss.elastic.co/t/elasticsearch-does-not-listen-on-ipv4/300748)

<div class="topic-metadata">

**Author:** [@sharbich](https://discuss.elastic.co/u/sharbich)\
**Replies:** 1\
**Last updated:** [March 26, 2022, 10:15am UTC](https://discuss.elastic.co/t/elasticsearch-does-not-listen-on-ipv4/300748 "2022-03-26T10:15:34Z")

</div>

Hello, my dears, I installed Elasticsearch on my Debian Buster Server. The following ports have been opened. root@dsme01:~# netstat -tulpen | grep 192.168.150.20 tcp6 0 0 192.168.150.20:9200 :::\* …

---

## [Slow response time even though slow logs show fast (query+fetch)](https://discuss.elastic.co/t/slow-response-time-even-though-slow-logs-show-fast-query-fetch/300742)

<div class="topic-metadata">

**Author:** [@Abhishek\_Singh2](https://discuss.elastic.co/u/Abhishek_Singh2)\
**Replies:** 0\
**Last updated:** [March 26, 2022, 6:41am UTC](https://discuss.elastic.co/t/slow-response-time-even-though-slow-logs-show-fast-query-fetch/300742 "2022-03-26T06:41:59Z")

</div>

I am having trouble with my Elasticsearch nodes/queries ……. I have 3 physical nodes in which all 3 are master + data nodes. I am running a simple filter query in slow logs I see query +fetch time as 8 millisec sometimes …

---

## [Why did the throughput display change from rpm to tpm? Are they the same?](https://discuss.elastic.co/t/why-did-the-throughput-display-change-from-rpm-to-tpm-are-they-the-same/300741)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 0\
**Last updated:** [March 26, 2022, 6:37am UTC](https://discuss.elastic.co/t/why-did-the-throughput-display-change-from-rpm-to-tpm-are-they-the-same/300741 "2022-03-26T06:37:50Z")

</div>

I'm using the 7.16.3 stack, I remember earlier the throughput dashboard was showing rpm metrics, why did it become tpm? Is there any difference between request/min (rpm) and transactions/min (tpm)? Would it be friend…

---

## [Elasticsearch backup](https://discuss.elastic.co/t/elasticsearch-backup/300723)

<div class="topic-metadata">

**Author:** [@Amitabh\_Prasad](https://discuss.elastic.co/u/Amitabh_Prasad)\
**Replies:** 1\
**Last updated:** [March 26, 2022, 1:54am UTC](https://discuss.elastic.co/t/elasticsearch-backup/300723 "2022-03-26T01:54:13Z")

</div>

Running into issues where deployment is failing with following error {"@timestamp":"2022-03-24T17:29:14.324Z", "log.level": "INFO", "message":"heap size \[1gb\], compressed ordinary object pointers \[true\]", "ecs.version":…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=669)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=671)
