# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=673 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 674 --- ## [How to aggregate based on another aggregation?](https://discuss.elastic.co/t/how-to-aggregate-based-on-another-aggregation/299947)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 5\ **Last updated:** [March 24, 2022, 8:34am UTC](https://discuss.elastic.co/t/how-to-aggregate-based-on-another-aggregation/299947 "2022-03-24T08:34:48Z")
Hi folks, I have a certain amount of user transactions per day. My final goal is to have the average of daily sums of transactions per week. What I have done so far is the first step (the easy one). I created a chart … --- ## [Question regarding ES upgrade to 8.1](https://discuss.elastic.co/t/question-regarding-es-upgrade-to-8-1/300372)
**Author:** [@elastic78](https://discuss.elastic.co/u/elastic78)\ **Replies:** 1\ **Last updated:** [March 24, 2022, 8:31am UTC](https://discuss.elastic.co/t/question-regarding-es-upgrade-to-8-1/300372 "2022-03-24T08:31:10Z")
We are using ES version 6.8.12 and would want to upgrade to ES version 8.1. As per our architecture we can have Elasticsearch deployed on either one node or two nodes. Since 8.1 doesn't allow forming a cluster with two… --- ## [Error : java.lang.NoClassDefFoundError: org/elasticsearch/client/sniff/NodesSniffer](https://discuss.elastic.co/t/error-java-lang-noclassdeffounderror-org-elasticsearch-client-sniff-nodessniffer/300448)
**Author:** [@Prashant\_Kamble](https://discuss.elastic.co/u/Prashant_Kamble)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 7:40am UTC](https://discuss.elastic.co/t/error-java-lang-noclassdeffounderror-org-elasticsearch-client-sniff-nodessniffer/300448 "2022-03-24T07:40:27Z")
We are getting this error java.lang.NoClassDefFoundError: org/elasticsearch/client/sniff/NodesSniffer on server. Application is working fine on local without any exception. We are using java 11 + Hibernate Search 6 + E… --- ## [Kibana 8.0 is not starting up- it says server not ready .. Looking at the logs it says Fatal Error unable to complete Saved Objects migrations](https://discuss.elastic.co/t/kibana-8-0-is-not-starting-up-it-says-server-not-ready-looking-at-the-logs-it-says-fatal-error-unable-to-complete-saved-objects-migrations/300526)
**Author:** [@AKAM14](https://discuss.elastic.co/u/AKAM14)\ **Replies:** 1\ **Last updated:** [March 24, 2022, 7:22am UTC](https://discuss.elastic.co/t/kibana-8-0-is-not-starting-up-it-says-server-not-ready-looking-at-the-logs-it-says-fatal-error-unable-to-complete-saved-objects-migrations/300526 "2022-03-24T07:22:30Z")
\[2022-03-24T07:14:44.988+00:00\]\[INFO \]\[savedobjects-service\] Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations... \[2022-03-24T07:14:44.990+00:00\]\[INFO \]\[savedobjec… --- ## [Logstash set up issue](https://discuss.elastic.co/t/logstash-set-up-issue/300160)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 4\ **Last updated:** [March 24, 2022, 6:06am UTC](https://discuss.elastic.co/t/logstash-set-up-issue/300160 "2022-03-24T06:06:33Z")
Hello, I am struggling with my logstash set up, which doesn't seem to be connected to the ELK stack. I cannot see Logstash under Stack Monitoring: However, I can see my custom log data which is ingested using logst… --- ## [Can max document size for Json plugin be increased? Seems to be 32768 now](https://discuss.elastic.co/t/can-max-document-size-for-json-plugin-be-increased-seems-to-be-32768-now/300227)
**Author:** [@paulov](https://discuss.elastic.co/u/paulov)\ **Replies:** 2\ **Last updated:** [March 23, 2022, 8:44pm UTC](https://discuss.elastic.co/t/can-max-document-size-for-json-plugin-be-increased-seems-to-be-32768-now/300227 "2022-03-23T20:44:26Z")
When using a Json filter in a logstash pipeline, I run into a size problem. I get an error indicating a max size of 32769 (2^15): :exception=\>#\ **Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\ **Replies:** 5\ **Last updated:** [March 23, 2022, 7:52pm UTC](https://discuss.elastic.co/t/only-one-of-dozens-of-log-indexes-wont-rollover-source-alias-does-not-exist/299673 "2022-03-23T19:52:23Z") ES: 6.8.13 NEST 6.8.6 We have a number of indexes for which we have a programmatic process that checks rollover criteria (ie. max age, max size, etc.) every night. They all have essentially identical template rules, e… --- ## [Logstash not sending logs to Elasticsearch](https://discuss.elastic.co/t/logstash-not-sending-logs-to-elasticsearch/300037)
**Author:** [@wallace84](https://discuss.elastic.co/u/wallace84)\ **Replies:** 11\ **Last updated:** [March 23, 2022, 5:46pm UTC](https://discuss.elastic.co/t/logstash-not-sending-logs-to-elasticsearch/300037 "2022-03-23T17:46:32Z")
Hello, I have been trying for some time to send a simple log to Elasticsearch and after trying a very simple example, the logs are not been sent to Elasticsearch from logstash. Services: In same server for this test O… --- ## [Some vulnerabilities in Elasticsearch v7.16.3 x-pack, Elasticsearch sql cli 7.16.3, plugin cli, security cli](https://discuss.elastic.co/t/some-vulnerabilities-in-elasticsearch-v7-16-3-x-pack-elasticsearch-sql-cli-7-16-3-plugin-cli-security-cli/300435)
**Author:** [@Sagarika\_Mahalik](https://discuss.elastic.co/u/Sagarika_Mahalik)\ **Replies:** 3\ **Last updated:** [March 23, 2022, 5:16pm UTC](https://discuss.elastic.co/t/some-vulnerabilities-in-elasticsearch-v7-16-3-x-pack-elasticsearch-sql-cli-7-16-3-plugin-cli-security-cli/300435 "2022-03-23T17:16:57Z")
Hi, There are some Vulnerabilities in Elasticsearch 7.16.3 version. Some vulnerabilities in Elasticsearch v7.16.3 x-pack, Elasticsearch sql cli 7.16.3, plugin cli, security cli. While installing Elasticsearch all of t… --- ## [Chorus, the reference implementation for e-commerce, now supports Elasticsearch!](https://discuss.elastic.co/t/chorus-the-reference-implementation-for-e-commerce-now-supports-elasticsearch/300489)
**Author:** [@flaxsearch](https://discuss.elastic.co/u/flaxsearch)\ **Replies:** 0\ **Last updated:** [March 23, 2022, 5:11pm UTC](https://discuss.elastic.co/t/chorus-the-reference-implementation-for-e-commerce-now-supports-elasticsearch/300489 "2022-03-23T17:11:22Z")
Hi all, We've been working hard to improve support for Elasticsearch as part of the Chorus stack, an open source reference implementation for tunable, measurable e-commerce search. My colleague Daniel Wrigley has writte… --- ## [Need to add doc to an index with default values](https://discuss.elastic.co/t/need-to-add-doc-to-an-index-with-default-values/300326)
**Author:** [@Anika\_Mehrotra](https://discuss.elastic.co/u/Anika_Mehrotra)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 4:42pm UTC](https://discuss.elastic.co/t/need-to-add-doc-to-an-index-with-default-values/300326 "2022-03-23T16:42:06Z")
Suppose i have an index with 2 fields as firstname and lastname both having default values as "test" Now if I insert a new record in that index POST my-index-000001/general { "firstname": "harry", "lastname": "pott… --- ## [Show only duplicate documents data table](https://discuss.elastic.co/t/show-only-duplicate-documents-data-table/300328)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 4:05pm UTC](https://discuss.elastic.co/t/show-only-duplicate-documents-data-table/300328 "2022-03-23T16:05:07Z")
Hi all, I'm trying to show only duplicate data table for a set of documents. So I want to show count of records \> 1. But I can't filter to show metric as count \> 1. How to show only duplicates data table with fields? … --- ## [Kibana cannot authenticate with Elasticsearch, stuck in "Kibana server is not ready yet" phase](https://discuss.elastic.co/t/kibana-cannot-authenticate-with-elasticsearch-stuck-in-kibana-server-is-not-ready-yet-phase/300397)
**Author:** [@pritster5](https://discuss.elastic.co/u/pritster5)\ **Replies:** 2\ **Last updated:** [March 23, 2022, 3:27pm UTC](https://discuss.elastic.co/t/kibana-cannot-authenticate-with-elasticsearch-stuck-in-kibana-server-is-not-ready-yet-phase/300397 "2022-03-23T15:27:43Z")
Quick rundown of what led to my current issue: Index filled EC2 completely, manually deleted nodes, no longer able to start Elasticsearch After wiping the node (i.e Deleting everything inside the /var/lib/elasticsearch … --- ## [Where did ParseField and XContentParser go?](https://discuss.elastic.co/t/where-did-parsefield-and-xcontentparser-go/300348)
**Author:** [@brian8371](https://discuss.elastic.co/u/brian8371)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 3:05pm UTC](https://discuss.elastic.co/t/where-did-parsefield-and-xcontentparser-go/300348 "2022-03-23T15:05:13Z")
I'm trying to change an ES plugin that worked with ES v7.3.0 to work with ES v7.16.3, but it seems like common.ParseField was removed in ES v7.14.0 and common.xcontent.XContentBuilder & common.xcontent.XContentParser wer… --- ## [Metricbeat MSSQL module has a really high batch req/sec number](https://discuss.elastic.co/t/metricbeat-mssql-module-has-a-really-high-batch-req-sec-number/297859)
**Author:** [@ohs](https://discuss.elastic.co/u/ohs)\ **Replies:** 8\ **Last updated:** [March 23, 2022, 3:01pm UTC](https://discuss.elastic.co/t/metricbeat-mssql-module-has-a-really-high-batch-req-sec-number/297859 "2022-03-23T15:01:59Z")
I have a question about metricbeat mssql module. The server I use it on has an on average batch req/sec like 5 and max about 60, but the value I receive in elastic and see in Kibana is over 19 millions. I can't figure ou… --- ## [Parsing array of elements](https://discuss.elastic.co/t/parsing-array-of-elements/300462)
**Author:** [@eliz](https://discuss.elastic.co/u/eliz)\ **Replies:** 3\ **Last updated:** [March 23, 2022, 3:01pm UTC](https://discuss.elastic.co/t/parsing-array-of-elements/300462 "2022-03-23T15:01:01Z")
Hello, I am looking for a way to go from this message { "parent\_field": \[ "Key 1:red", "Key 1:blue", "Key 2:this is green" \] } to: { "key#1": \["red", "blue"\], "key#2": "this is green" } Tried … --- ## [Building a cluster for the first time](https://discuss.elastic.co/t/building-a-cluster-for-the-first-time/300322)
**Author:** [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\ **Replies:** 9\ **Last updated:** [March 23, 2022, 2:54pm UTC](https://discuss.elastic.co/t/building-a-cluster-for-the-first-time/300322 "2022-03-23T14:54:01Z")
Hi All, So i'm trying to build a cluster for the first time, I've always been working in standalone mode, but i now need to step up into a cluster. So I have 3 instances setup and all are going to be master eligible. I… --- ## [Repository-hdfs error while creating repository to backup elasticsearch index to HDFS](https://discuss.elastic.co/t/repository-hdfs-error-while-creating-repository-to-backup-elasticsearch-index-to-hdfs/299917)
**Author:** [@Sahana\_Murthy](https://discuss.elastic.co/u/Sahana_Murthy)\ **Replies:** 6\ **Last updated:** [March 23, 2022, 1:39pm UTC](https://discuss.elastic.co/t/repository-hdfs-error-while-creating-repository-to-backup-elasticsearch-index-to-hdfs/299917 "2022-03-23T13:39:29Z")
Hello everyone, I am stuck in a situation where my Elasticsearch(7.9.0) upgradation is pending due to backup /snapshot not being in place We have 10 ELK node in cluster based in Azure cloud out of which 3 master nodes … --- ## [Aggregation bucket for 1 Million documents in Kibana](https://discuss.elastic.co/t/aggregation-bucket-for-1-million-documents-in-kibana/300420)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 1:34pm UTC](https://discuss.elastic.co/t/aggregation-bucket-for-1-million-documents-in-kibana/300420 "2022-03-23T13:34:43Z")
Hi all, I have to process 1M records and download 1M records. So is it practical to use a bucket size of 1Million so that when i download CSV report , it must have 1 Million documents? Or is there another approach for… --- ## [Communicate between elk and nagios](https://discuss.elastic.co/t/communicate-between-elk-and-nagios/300439)
**Author:** [@nour41\_nour41](https://discuss.elastic.co/u/nour41_nour41)\ **Replies:** 5\ **Last updated:** [March 23, 2022, 12:21pm UTC](https://discuss.elastic.co/t/communicate-between-elk-and-nagios/300439 "2022-03-23T12:21:29Z")
how to communicate between elk and nagios --- ## [Search\_as\_you\_type field as subfield](https://discuss.elastic.co/t/search-as-you-type-field-as-subfield/300425)
**Author:** [@casparxu](https://discuss.elastic.co/u/casparxu)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 11:02am UTC](https://discuss.elastic.co/t/search-as-you-type-field-as-subfield/300425 "2022-03-23T11:02:52Z")
Hello experts, I'm using ES v7. I noticed there's a fantastic type called 'search\_ar\_you\_type' can help me with auto-completion. The samples from doc is map the field to this type like: { "mappings": { "propertie… --- ## [ELK stack upgrade 7.13.4 to 8.1](https://discuss.elastic.co/t/elk-stack-upgrade-7-13-4-to-8-1/300392)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 10:58am UTC](https://discuss.elastic.co/t/elk-stack-upgrade-7-13-4-to-8-1/300392 "2022-03-23T10:58:47Z")
I apologize in advance if this topic has already been addressed, but I am relatively new to this type of configurations. I currently have the stack (ES, Kibana and Filebeat) at version 7.13.4 but I want to update to the… --- ## [Error on Elastic Search status](https://discuss.elastic.co/t/error-on-elastic-search-status/300406)
**Author:** [@Asha\_Anie\_Bose](https://discuss.elastic.co/u/Asha_Anie_Bose)\ **Replies:** 3\ **Last updated:** [March 23, 2022, 10:55am UTC](https://discuss.elastic.co/t/error-on-elastic-search-status/300406 "2022-03-23T10:55:55Z")
at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:212) ~\[elasticsearch-6.8.0.jar:6.8.0\] at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:333) ~\[elasticsearch-6.8.0.jar:6.8.0\] at org.elasticsearc… --- ## [GeoSpatial Query using NEST and ES 7.14](https://discuss.elastic.co/t/geospatial-query-using-nest-and-es-7-14/300206)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 2\ **Last updated:** [March 22, 2022, 2:54pm UTC](https://discuss.elastic.co/t/geospatial-query-using-nest-and-es-7-14/300206 "2022-03-22T14:54:48Z")
We are using ES 17.14 and have looked at the docs but have been unable to create a query and wondered if anyone can shed some light on it. 1- We have an IndexA that has a FieldA of type Geoshape with its latitude and l… --- ## [Kibana server is not ready](https://discuss.elastic.co/t/kibana-server-is-not-ready/300432)
**Author:** [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 10:06am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready/300432 "2022-03-23T10:06:55Z")
Hi i am using kibana 7.12.0. i am facing this issue frequently.can please help me with a solution \[ FATAL Error: Unable to complete saved object migrations for the \[.kibana\] index. Please check the health of your El… --- ## [Will es nodes connect with each other in 9200?](https://discuss.elastic.co/t/will-es-nodes-connect-with-each-other-in-9200/300421)
**Author:** [@JohnPhilip](https://discuss.elastic.co/u/JohnPhilip)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 9:53am UTC](https://discuss.elastic.co/t/will-es-nodes-connect-with-each-other-in-9200/300421 "2022-03-23T09:53:26Z")
Hi, there. The official doc said, Each Elasticsearch node has two different network interfaces. Clients send requests to Elasticsearch’s REST APIs using its HTTP interface, but nodes communicate with other nodes using… --- ## [Logstash Not Loading Config Files Running as Service](https://discuss.elastic.co/t/logstash-not-loading-config-files-running-as-service/300430)
**Author:** [@ivanchak](https://discuss.elastic.co/u/ivanchak)\ **Replies:** 0\ **Last updated:** [March 23, 2022, 9:35am UTC](https://discuss.elastic.co/t/logstash-not-loading-config-files-running-as-service/300430 "2022-03-23T09:35:22Z")
Dear all, My Logstash is not reading config files I have specified in pipelines.yml. pipelines.yml # This file is where you define your pipelines. You can define multiple. # For more information on multiple pipelines,… --- ## [Event.original field](https://discuss.elastic.co/t/event-original-field/300417)
**Author:** [@Yos](https://discuss.elastic.co/u/Yos)\ **Replies:** 0\ **Last updated:** [March 23, 2022, 7:58am UTC](https://discuss.elastic.co/t/event-original-field/300417 "2022-03-23T07:58:46Z")
I am storing log files in Elasticsearch indexes via Filebeat and logstash. And I also use metricbeat to monitor the stack. In this case, the "event.original" field is automatically stored in the index." If you know ho… --- ## [Search if only the all word is repeated more than 1 times in a particular string](https://discuss.elastic.co/t/search-if-only-the-all-word-is-repeated-more-than-1-times-in-a-particular-string/300426)
**Author:** [@div927](https://discuss.elastic.co/u/div927)\ **Replies:** 0\ **Last updated:** [March 23, 2022, 9:02am UTC](https://discuss.elastic.co/t/search-if-only-the-all-word-is-repeated-more-than-1-times-in-a-particular-string/300426 "2022-03-23T09:02:11Z")
I am trying to write a search engine where I want to get the result only, if say -\> chess, player, game words are there I would return result only if all these 3 words present twice or thrice in any of the field \["… --- ## [\[KIBANA\] Customize the result of a metric in a Data Table Aggregation](https://discuss.elastic.co/t/kibana-customize-the-result-of-a-metric-in-a-data-table-aggregation/298311)
**Author:** [@Sisiniya](https://discuss.elastic.co/u/Sisiniya)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 7:39am UTC](https://discuss.elastic.co/t/kibana-customize-the-result-of-a-metric-in-a-data-table-aggregation/298311 "2022-03-23T07:39:59Z")
Hello, In my application, each action generates a series of logs. For example : First suite of logs for the same value of data1/data2/data3 : {data1: "val1", data2: "val2", data3: "val3", level: "INFO", level\_value: 2… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=672) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=674)