# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=672 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 673 --- ## [Elasticsearch Cluster - no node visible](https://discuss.elastic.co/t/elasticsearch-cluster-no-node-visible/300338)
**Author:** [@zicherka](https://discuss.elastic.co/u/zicherka)\ **Replies:** 1\ **Last updated:** [March 24, 2022, 8:27pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-no-node-visible/300338 "2022-03-24T20:27:58Z")
Hi System: CentOS 8 Stream Elasticsearch ver: 8.1.0 Nodes: node1.test.com 192.168.100.101 node2.test.com 192.168.100.102 node3.test.com 192.168.100.103 All nodes can be pinged by IP and FQDN, Firewalld has open port… --- ## [Mapped\_geo\_shape test error but I don't use any geo code v7.16.3](https://discuss.elastic.co/t/mapped-geo-shape-test-error-but-i-dont-use-any-geo-code-v7-16-3/300634)
**Author:** [@brian8371](https://discuss.elastic.co/u/brian8371)\ **Replies:** 0\ **Last updated:** [March 24, 2022, 8:05pm UTC](https://discuss.elastic.co/t/mapped-geo-shape-test-error-but-i-dont-use-any-geo-code-v7-16-3/300634 "2022-03-24T20:05:58Z")
I have a class that extends AbstractQueryTestCase and all of its tests are failing, included ones that I didn't override, with the same stacktrace error: Failed to parse mapping \[\_doc\]: No handler for type \[geo\_shape\] d… --- ## [Logstash xml parse error](https://discuss.elastic.co/t/logstash-xml-parse-error/300624)
**Author:** [@elwdipath](https://discuss.elastic.co/u/elwdipath)\ **Replies:** 0\ **Last updated:** [March 24, 2022, 7:14pm UTC](https://discuss.elastic.co/t/logstash-xml-parse-error/300624 "2022-03-24T19:14:35Z")
Hey all, new to logstash. I'm running into an error when trying to parse an empty xml element. failed to parse field \[xml.record.person.agedata.dob\] of type \[text\] in document with id 'DA9jvH8BhCQVGJZR4sKN'. Preview of… --- ## [Cluster Red after system patching forced upgrade 7.16.1 -\> 7.17.1](https://discuss.elastic.co/t/cluster-red-after-system-patching-forced-upgrade-7-16-1-7-17-1/300592)
**Author:** [@thealy](https://discuss.elastic.co/u/thealy)\ **Replies:** 1\ **Last updated:** [March 24, 2022, 7:00pm UTC](https://discuss.elastic.co/t/cluster-red-after-system-patching-forced-upgrade-7-16-1-7-17-1/300592 "2022-03-24T19:00:59Z")
We have and 8 node cluster where the nodes are all running Centos 7. When they were rebooted for patching, the ES version went to 7.17.1. The master node is periodically scrolling these errors: \[2022-03-24T10:59:50,530… --- ## [Elasticsearch Querying Double Nested Object, Match Multiple Rows in Query Within Parent](https://discuss.elastic.co/t/elasticsearch-querying-double-nested-object-match-multiple-rows-in-query-within-parent/300619)
**Author:** [@CoreyFournier](https://discuss.elastic.co/u/CoreyFournier)\ **Replies:** 0\ **Last updated:** [March 24, 2022, 6:30pm UTC](https://discuss.elastic.co/t/elasticsearch-querying-double-nested-object-match-multiple-rows-in-query-within-parent/300619 "2022-03-24T18:30:26Z")
My data model is related to patient records. At the highest level is the Patient, then their information such as Lab Panels and the individual rows of the results of the panel. So it looks like this: {Patient:{Labs:\[{Res… --- ## [Filter load monitoring](https://discuss.elastic.co/t/filter-load-monitoring/300461)
**Author:** [@Dargod](https://discuss.elastic.co/u/Dargod)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 5:55pm UTC](https://discuss.elastic.co/t/filter-load-monitoring/300461 "2022-03-24T17:55:53Z")
I have a lot of filters in logstash that deal with the processing of plain text logs and json. With the linear growth of connected logs, the load increased and there was an increase in the queue. In this connection, th… --- ## [Problem using input snmp](https://discuss.elastic.co/t/problem-using-input-snmp/300611)
**Author:** [@Ygal\_Mizrachi](https://discuss.elastic.co/u/Ygal_Mizrachi)\ **Replies:** 0\ **Last updated:** [March 24, 2022, 5:16pm UTC](https://discuss.elastic.co/t/problem-using-input-snmp/300611 "2022-03-24T17:16:19Z")
Hello im using this ultra simple conf file: input { snmp { hosts =\> \[{host =\> "udp:192.168.24.1/161" community =\> "public" version =\> "2c" retries =\> 2 timeout =\> 1000}\] tables =\> \[ {"name" =\> "interfaces" "columns" =\> … --- ## [COMBINEDAPACHELOG grok definition not creating the expected fields](https://discuss.elastic.co/t/combinedapachelog-grok-definition-not-creating-the-expected-fields/300576)
**Author:** [@Patrick\_Lepage](https://discuss.elastic.co/u/Patrick_Lepage)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 5:04pm UTC](https://discuss.elastic.co/t/combinedapachelog-grok-definition-not-creating-the-expected-fields/300576 "2022-03-24T17:04:46Z")
Complete beginner to logstash here... I'm following the "Parsing Logs with Logstash" tutorial. Input comes from filebeat reading a static log file provided with the tutorial; see example of a sample line below. 83.149.… --- ## [Using scroll API in Kibana](https://discuss.elastic.co/t/using-scroll-api-in-kibana/300558)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [March 24, 2022, 5:01pm UTC](https://discuss.elastic.co/t/using-scroll-api-in-kibana/300558 "2022-03-24T17:01:50Z")
We can get the large hits of document search and retrieval using scroll API in Elasticsearch. Anyway we can use scroll API in kibana dashboards for downloading reports? --- ## [Strange bad certificate](https://discuss.elastic.co/t/strange-bad-certificate/300552)
**Author:** [@labate](https://discuss.elastic.co/u/labate)\ **Replies:** 13\ **Last updated:** [March 24, 2022, 4:55pm UTC](https://discuss.elastic.co/t/strange-bad-certificate/300552 "2022-03-24T16:55:01Z")
Dear all, I'm facing to a serious problem. I get this following message: filebeat\[29206\]: 2022-03-24T10:30:37.927+0100 ERROR \[publisher\_pipeline\_output\] pipeline/output.go:154 Failed to conn… --- ## [Drill Down Dashboard with context.panel.filters](https://discuss.elastic.co/t/drill-down-dashboard-with-context-panel-filters/300589)
**Author:** [@rajeev2](https://discuss.elastic.co/u/rajeev2)\ **Replies:** 1\ **Last updated:** [March 24, 2022, 4:54pm UTC](https://discuss.elastic.co/t/drill-down-dashboard-with-context-panel-filters/300589 "2022-03-24T16:54:25Z")
I wanted to drill down to dashboard using url but i am unable to use context.panel.filter --- ## [Xml Parsing in logstash using xml & split plugins](https://discuss.elastic.co/t/xml-parsing-in-logstash-using-xml-split-plugins/300515)
**Author:** [@manikandanid](https://discuss.elastic.co/u/manikandanid)\ **Replies:** 1\ **Last updated:** [March 24, 2022, 4:47pm UTC](https://discuss.elastic.co/t/xml-parsing-in-logstash-using-xml-split-plugins/300515 "2022-03-24T16:47:59Z")
I have a xml which looks like \\\India\\+91\\Asia\\\123129\\7890890\\\ **Author:** [@Aynur](https://discuss.elastic.co/u/Aynur)\ **Replies:** 1\ **Last updated:** [March 24, 2022, 4:44pm UTC](https://discuss.elastic.co/t/the-login-page-does-not-open/299141 "2022-03-24T16:44:49Z") Version 7.16.3. After updating from version 7.16.2, the login window does not open - it freezes on loading. Errors occur in the browser developer console: login:282 Refused to execute inline script because it violates … --- ## [What are the limitations of array size at document in elastic search?](https://discuss.elastic.co/t/what-are-the-limitations-of-array-size-at-document-in-elastic-search/300602)
**Author:** [@AhmadHamouda](https://discuss.elastic.co/u/AhmadHamouda)\ **Replies:** 0\ **Last updated:** [March 24, 2022, 4:02pm UTC](https://discuss.elastic.co/t/what-are-the-limitations-of-array-size-at-document-in-elastic-search/300602 "2022-03-24T16:02:17Z")
I have document which have array. { "id" :1, "UserIds":\[1,2,4\] } Given that UserIds is indexed field What are the performance implications of having several elements on UserIds Array on search? Also why when se… --- ## [How to understand translog stats](https://discuss.elastic.co/t/how-to-understand-translog-stats/300507)
**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 3:12pm UTC](https://discuss.elastic.co/t/how-to-understand-translog-stats/300507 "2022-03-24T15:12:06Z")
We are seeing the situation where when we restart ES, there is a long recovery time for the shards. The service is down usually for only about 90 seconds, but the recovery can be an hour or so. During my investigation, I… --- ## [Can't open ElasticSearch on browser from outside the server](https://discuss.elastic.co/t/cant-open-elasticsearch-on-browser-from-outside-the-server/229717)
**Author:** [@Hamza\_Dev](https://discuss.elastic.co/u/Hamza_Dev)\ **Replies:** 6\ **Last updated:** [March 24, 2022, 2:43pm UTC](https://discuss.elastic.co/t/cant-open-elasticsearch-on-browser-from-outside-the-server/229717 "2022-03-24T14:43:11Z")
Hi , I'm new with ES I've installed it from the official site on an Azure VM with Centos 7 System, it's successfully installed, when I start the service it started correctly, and when I check the availability of ES, usi… --- ## [Logstash 8.1.0 No appropriate protocol (protocol is disabled or cipher suites are inappropriate)](https://discuss.elastic.co/t/logstash-8-1-0-no-appropriate-protocol-protocol-is-disabled-or-cipher-suites-are-inappropriate/300582)
**Author:** [@nandatibco](https://discuss.elastic.co/u/nandatibco)\ **Replies:** 0\ **Last updated:** [March 24, 2022, 2:18pm UTC](https://discuss.elastic.co/t/logstash-8-1-0-no-appropriate-protocol-protocol-is-disabled-or-cipher-suites-are-inappropriate/300582 "2022-03-24T14:18:14Z")
Hello team, I'm using Logstash 8.1.0 with plugin: logstash-input-websocket, when I start Logstash getting below error: \[WARN \]\[logstash.inputs.websocket\]\[main\]\[a0cd44e8c7bfa2705bff3d19091209cb115076d1199fdf41b74beb730f… --- ## [Faceted Search-Navigation where counts should not be updated for the siblings of a group when it is active](https://discuss.elastic.co/t/faceted-search-navigation-where-counts-should-not-be-updated-for-the-siblings-of-a-group-when-it-is-active/300107)
**Author:** [@droplet](https://discuss.elastic.co/u/droplet)\ **Replies:** 5\ **Last updated:** [March 24, 2022, 1:46pm UTC](https://discuss.elastic.co/t/faceted-search-navigation-where-counts-should-not-be-updated-for-the-siblings-of-a-group-when-it-is-active/300107 "2022-03-24T13:46:59Z")
Hello, (data to play, at the end) I've been reading about faceted navigation and filtering and how it can be applied to ecommerce apps. So far I've managed to get the bellow example working. Facet Group 1 Facet Opti… --- ## [Installation problems - Public key not available](https://discuss.elastic.co/t/installation-problems-public-key-not-available/300571)
**Author:** [@user111](https://discuss.elastic.co/u/user111)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 1:12pm UTC](https://discuss.elastic.co/t/installation-problems-public-key-not-available/300571 "2022-03-24T13:12:43Z")
Dear community, I´m trying to install the ELK Stack as explained in the official documentation here: I´m running a Ubuntu 18.04 machine and I´m getting the following error while executing sudo apt-get update && sudo a… --- ## [How to create advanced visualization in Kibana?](https://discuss.elastic.co/t/how-to-create-advanced-visualization-in-kibana/300534)
**Author:** [@ninamarie0](https://discuss.elastic.co/u/ninamarie0)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 12:38pm UTC](https://discuss.elastic.co/t/how-to-create-advanced-visualization-in-kibana/300534 "2022-03-24T12:38:38Z")
Hi. I am new to Kibana and are struggling to find out how to create more "advanced" visualizations. I have already created a dashboard of more simple metrics and charts, but now i want to take the next step. My data c… --- ## [Sum of all values in table visual kibana](https://discuss.elastic.co/t/sum-of-all-values-in-table-visual-kibana/300522)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 12:33pm UTC](https://discuss.elastic.co/t/sum-of-all-values-in-table-visual-kibana/300522 "2022-03-24T12:33:24Z")
Hi all, I need to add a table view in my kibana dashboard with a sum for all columns like Excel. (see the picture. Is there any idea. --- ## [Get sequential relation of keys in a json file in ruby logstash](https://discuss.elastic.co/t/get-sequential-relation-of-keys-in-a-json-file-in-ruby-logstash/300566)
**Author:** [@zubair\_aftab](https://discuss.elastic.co/u/zubair_aftab)\ **Replies:** 0\ **Last updated:** [March 24, 2022, 11:44am UTC](https://discuss.elastic.co/t/get-sequential-relation-of-keys-in-a-json-file-in-ruby-logstash/300566 "2022-03-24T11:44:38Z")
I have a json file of a packet capture. It has multiple layers in 1 message as shown in below example. block 1: mtp3 = 1 map = 1 block 2: mtp3 =2 bicc =2 When i process the file in logstash it combines the similar… --- ## [Kibana deprecation issues: Source configuration field "host name" is deprecated](https://discuss.elastic.co/t/kibana-deprecation-issues-source-configuration-field-host-name-is-deprecated/299997)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 9\ **Last updated:** [March 24, 2022, 10:44am UTC](https://discuss.elastic.co/t/kibana-deprecation-issues-source-configuration-field-host-name-is-deprecated/299997 "2022-03-24T10:44:03Z")
Hi all, I am trying to prepare to upgrade my elastic cluster to 8.1. On the Upgrade Assistant tab i've fixed most of the issue but then there is an issue that said: Source configuration field "host name" is deprecated.… --- ## [Why does a kibana lens pretend my fields have no data, when they clearly do?](https://discuss.elastic.co/t/why-does-a-kibana-lens-pretend-my-fields-have-no-data-when-they-clearly-do/300506)
**Author:** [@gcanyon](https://discuss.elastic.co/u/gcanyon)\ **Replies:** 9\ **Last updated:** [March 24, 2022, 10:43am UTC](https://discuss.elastic.co/t/why-does-a-kibana-lens-pretend-my-fields-have-no-data-when-they-clearly-do/300506 "2022-03-24T10:43:11Z")
I click on kibana I click on visualize I click on Create visualization I click on Lens The left column, under "Individual fields" says: "Looks like you don't have any data. Try extending the time range" I see that I am … --- ## [Event severity cisco for logstash](https://discuss.elastic.co/t/event-severity-cisco-for-logstash/300312)
**Author:** [@jojodd](https://discuss.elastic.co/u/jojodd)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 10:20am UTC](https://discuss.elastic.co/t/event-severity-cisco-for-logstash/300312 "2022-03-24T10:20:56Z")
hello, if \[event\]\[severity\] == 7 - \> does not work in a pipeline to create a new index with do you have any idea how to make it work? infra with filebeat -\> logstash -\> Elasticsearch --- ## [Kafka with ELK](https://discuss.elastic.co/t/kafka-with-elk/300477)
**Author:** [@jojodd](https://discuss.elastic.co/u/jojodd)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 10:17am UTC](https://discuss.elastic.co/t/kafka-with-elk/300477 "2022-03-24T10:17:08Z")
When installing kafka with the ELK suite, is it mandatory to install zookeeper if you take the latest version? help --- ## [Logstash Metricbeat field calculation](https://discuss.elastic.co/t/logstash-metricbeat-field-calculation/300242)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 9:58am UTC](https://discuss.elastic.co/t/logstash-metricbeat-field-calculation/300242 "2022-03-24T09:58:54Z")
I'm implementing ruby code through logstash pipeline,Unable to get desired fields created in kibana,what would be right approach to code in order to get desired result? Want to get CPU % by adding two fileds and divide … --- ## [Elasticsearch can't hanlde space after add analyzer](https://discuss.elastic.co/t/elasticsearch-cant-hanlde-space-after-add-analyzer/300509)
**Author:** [@Muhammad\_Fhadli](https://discuss.elastic.co/u/Muhammad_Fhadli)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 9:35am UTC](https://discuss.elastic.co/t/elasticsearch-cant-hanlde-space-after-add-analyzer/300509 "2022-03-24T09:35:48Z")
I created an index called my\_index by this command { "settings": { "number\_of\_shards": 1, "analysis": { "filter": { "synonym": { "type": "synonym", … --- ## [Rules don't trigger and preview window is empty](https://discuss.elastic.co/t/rules-dont-trigger-and-preview-window-is-empty/300137)
**Author:** [@Alex\_Bailey](https://discuss.elastic.co/u/Alex_Bailey)\ **Replies:** 6\ **Last updated:** [March 24, 2022, 9:26am UTC](https://discuss.elastic.co/t/rules-dont-trigger-and-preview-window-is-empty/300137 "2022-03-24T09:26:19Z")
Working with Elastic 8.1 stack and I can't seem to get rules to work for me no matter what I try. I have a rule defined as so: When I run the preview, this brings back no results: The request generated in this q… --- ## [Elasticsearch "data": { "type": "float" } returns incorrect results](https://discuss.elastic.co/t/elasticsearch-data-type-float-returns-incorrect-results/300335)
**Author:** [@Musab\_Dogan](https://discuss.elastic.co/u/Musab_Dogan)\ **Replies:** 1\ **Last updated:** [March 24, 2022, 8:54am UTC](https://discuss.elastic.co/t/elasticsearch-data-type-float-returns-incorrect-results/300335 "2022-03-24T08:54:11Z")
I have a query like below and when date\_partition field is "type" =\> "float" it returns 20220109, 20220108, 20220107 query. When field "type" =\> "long", it only returns the 20220109 query. Which is what I want. Each qu… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=671) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=673)