# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=704 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 705 --- ## [Inconsistent API Response "error: no handler found for uri"](https://discuss.elastic.co/t/inconsistent-api-response-error-no-handler-found-for-uri/297086)
**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\ **Replies:** 4\ **Last updated:** [February 15, 2022, 7:07pm UTC](https://discuss.elastic.co/t/inconsistent-api-response-error-no-handler-found-for-uri/297086 "2022-02-15T19:07:50Z")
Hey, doing API POST Requests via Python (on MacOS) I did: elastic\_client.update(index='.internal.alerts-security.alerts-default-000001',id='a9136c19ccfd95123cb2cf5697affbbdeb5a35c785ced06071f2777881aa33f7', body={"doc":… --- ## [Match only?](https://discuss.elastic.co/t/match-only/296888)
**Author:** [@ntak](https://discuss.elastic.co/u/ntak)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 6:40pm UTC](https://discuss.elastic.co/t/match-only/296888 "2022-02-15T18:40:58Z")
Hello! I'm new to ES and I'm trying to figure out how to make a query which asserts the following: All given tokens are present in the field - regardless of the order No other token are present. Ideally, I'd also be … --- ## [Logstatsh Time Zone issue](https://discuss.elastic.co/t/logstatsh-time-zone-issue/297280)
**Author:** [@hanumant](https://discuss.elastic.co/u/hanumant)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 5:55pm UTC](https://discuss.elastic.co/t/logstatsh-time-zone-issue/297280 "2022-02-15T17:55:39Z")
Hi Team, environment logstatsh and elastic server are running in IST System DataBase is in UTC time zone I'm using JDBC logstatsh to push the information I'm seeing the date related all columns values are getting alter… --- ## [Self-managed App Search with SSL enabled](https://discuss.elastic.co/t/self-managed-app-search-with-ssl-enabled/297245)
**Author:** [@Amine27](https://discuss.elastic.co/u/Amine27)\ **Replies:** 0\ **Last updated:** [February 15, 2022, 1:06pm UTC](https://discuss.elastic.co/t/self-managed-app-search-with-ssl-enabled/297245 "2022-02-15T13:06:28Z")
Hello, I am trying to connect Logstash to App Search output with SSL enabled. I am getting this error: Pipeline error {:pipeline\_id=\>"main", :exception=\>#\ **Author:** [@Wonder\_Garance](https://discuss.elastic.co/u/Wonder_Garance)\ **Replies:** 4\ **Last updated:** [February 15, 2022, 5:13pm UTC](https://discuss.elastic.co/t/how-to-add-optional-json-field-in-logstash/296650 "2022-02-15T17:13:47Z") Hi, I wrote a Logstash pipeline to modify some fields of json input files. The keys introduction.text, introduction.html and body in json are optional, I don't want to create empty fields in json output files. How to add… --- ## [Display a Value from a JSON Field](https://discuss.elastic.co/t/display-a-value-from-a-json-field/297178)
**Author:** [@jamiejackson](https://discuss.elastic.co/u/jamiejackson)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 5:10pm UTC](https://discuss.elastic.co/t/display-a-value-from-a-json-field/297178 "2022-02-15T17:10:19Z")
I see several related forums posts for this but as far as I can tell, nobody had any success. In Elasticsearch/Kibana 6.7 (AWS-managed, for now). Say I have a field, httpRequest.headers, which has the following contents… --- ## [Logstash remove field](https://discuss.elastic.co/t/logstash-remove-field/297209)
**Author:** [@chandima\_jayamina](https://discuss.elastic.co/u/chandima_jayamina)\ **Replies:** 3\ **Last updated:** [February 15, 2022, 4:54pm UTC](https://discuss.elastic.co/t/logstash-remove-field/297209 "2022-02-15T16:54:10Z")
Hi I am new to ELK. I am thinking what is the best way to remove field. Just use mutate filter and remove field First set field to nil and then use mutate filter and remove What is the best way to remove the field. An… --- ## [Upgrading elasticsearch through Helm](https://discuss.elastic.co/t/upgrading-elasticsearch-through-helm/297274)
**Author:** [@tom4](https://discuss.elastic.co/u/tom4)\ **Replies:** 0\ **Last updated:** [February 15, 2022, 4:53pm UTC](https://discuss.elastic.co/t/upgrading-elasticsearch-through-helm/297274 "2022-02-15T16:53:19Z")
Hi Guys, Is there a way to upgrade Elasticsearch via rolling upgrade if deployed in k8s using helm? --- ## [Kibana Visualizing Array fields in Dashboards](https://discuss.elastic.co/t/kibana-visualizing-array-fields-in-dashboards/297141)
**Author:** [@chandima\_jayamina](https://discuss.elastic.co/u/chandima_jayamina)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 3:56pm UTC](https://discuss.elastic.co/t/kibana-visualizing-array-fields-in-dashboards/297141 "2022-02-15T15:56:21Z")
Hi I have created an array for family details. filter { mutate { add\_field =\> {"employee.family"=\>"%{familyMember}"} } } So in here employee.family =\["mom", "son", "daughter"\] I created Visualisation on how many e… --- ## [Possible bug in logstash 7.16.2 with degug](https://discuss.elastic.co/t/possible-bug-in-logstash-7-16-2-with-degug/297260)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 0\ **Last updated:** [February 15, 2022, 2:51pm UTC](https://discuss.elastic.co/t/possible-bug-in-logstash-7-16-2-with-degug/297260 "2022-02-15T14:51:36Z")
Hi, We recently upgraded our stack to elastic 7.16.2, and after that I introduced some changes in my configuracion. That configuration worked in test, but when i put it in production it does not get any error, however i… --- ## [ElasticSearch 7.16.3 throwing error on shape that is valid geojson](https://discuss.elastic.co/t/elasticsearch-7-16-3-throwing-error-on-shape-that-is-valid-geojson/297161)
**Author:** [@jstone\_b3insight](https://discuss.elastic.co/u/jstone_b3insight)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 2:22pm UTC](https://discuss.elastic.co/t/elasticsearch-7-16-3-throwing-error-on-shape-that-is-valid-geojson/297161 "2022-02-15T14:22:25Z")
Hello, We recently upgraded from ES version 6 to 7.16.3. One of the shapes we have in our index worked fine in version 6 and is currently working fine in version 7 in the index we migrated over from 6, but when trying … --- ## [Schedule not working sometimes | gaps in records](https://discuss.elastic.co/t/schedule-not-working-sometimes-gaps-in-records/296442)
**Author:** [@Nasser](https://discuss.elastic.co/u/Nasser)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 1:53pm UTC](https://discuss.elastic.co/t/schedule-not-working-sometimes-gaps-in-records/296442 "2022-02-15T13:53:44Z")
Hi i have 10 jdbc.conf files when i start the logstash all queries executed successfully but after the first shot some of the queries not execute. i tried to find the reason in logstash.log but nothing show PFB screen… --- ## [How to keep EnterpriseSearch running all the time](https://discuss.elastic.co/t/how-to-keep-enterprisesearch-running-all-the-time/274448)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 24\ **Last updated:** [February 15, 2022, 1:25pm UTC](https://discuss.elastic.co/t/how-to-keep-enterprisesearch-running-all-the-time/274448 "2022-02-15T13:25:24Z")
I have an SSL connection to the server where EnterpriseSearch is set up, and start EnterpriseSearch from the command line with the following command. $ ENT\_SEARCH\_DEFAULT\_PASSWORD=\[REDACTED\] bin/enterprise-search After… --- ## [Trying to create rules on elastic siem to map AD user information on another index](https://discuss.elastic.co/t/trying-to-create-rules-on-elastic-siem-to-map-ad-user-information-on-another-index/297230)
**Author:** [@sriramdas89](https://discuss.elastic.co/u/sriramdas89)\ **Replies:** 0\ **Last updated:** [February 15, 2022, 10:28am UTC](https://discuss.elastic.co/t/trying-to-create-rules-on-elastic-siem-to-map-ad-user-information-on-another-index/297230 "2022-02-15T10:28:37Z")
Hello All, I am importing event code 6273 from our NPS server and we have a rule set to alert us for the below condition. hosted on index: ds-logs-system.security-default.xxxxx 5 Failed logins with in a span for 5 minu… --- ## [Configuring Elasticsearch on K8s](https://discuss.elastic.co/t/configuring-elasticsearch-on-k8s/297229)
**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\ **Replies:** 0\ **Last updated:** [February 15, 2022, 10:25am UTC](https://discuss.elastic.co/t/configuring-elasticsearch-on-k8s/297229 "2022-02-15T10:25:54Z")
I'm trying to create 3-node Elasticsearch cluster in K8s. Tried create with helm but it created 3-replicas with same Elasticsearch roles instead 3 pods in K8s. I want to create 1-master and 2-data nodes with 1-replica ea… --- ## [Not able to write into log file on running logstash](https://discuss.elastic.co/t/not-able-to-write-into-log-file-on-running-logstash/296574)
**Author:** [@RaviK](https://discuss.elastic.co/u/RaviK)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 10:06am UTC](https://discuss.elastic.co/t/not-able-to-write-into-log-file-on-running-logstash/296574 "2022-02-15T10:06:07Z")
Hi Can anyone please help. My logstash service is running fine and able to parse the log lines from input files. But i can see due to running logstash service, my logfile is not getting updated. But when i'm stopping… --- ## [How to pass params into script as HashSet](https://discuss.elastic.co/t/how-to-pass-params-into-script-as-hashset/297224)
**Author:** [@megatron90000](https://discuss.elastic.co/u/megatron90000)\ **Replies:** 0\ **Last updated:** [February 15, 2022, 10:00am UTC](https://discuss.elastic.co/t/how-to-pass-params-into-script-as-hashset/297224 "2022-02-15T10:00:39Z")
I want to pass params in my script function as HashSet for fast contains check with complexity O(1). As I know, standart params list is ArrayList. How can I do this? Can I use ScriptEngine java? --- ## [Auto\_flush\_interval in exec module](https://discuss.elastic.co/t/auto-flush-interval-in-exec-module/295863)
**Author:** [@jeleb](https://discuss.elastic.co/u/jeleb)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 9:03am UTC](https://discuss.elastic.co/t/auto-flush-interval-in-exec-module/295863 "2022-02-15T09:03:39Z")
Hi, I have a problem with auto\_flush\_interval I want to check the command result logstash.conf: input { … --- ## [Closed indices do not release shards](https://discuss.elastic.co/t/closed-indices-do-not-release-shards/297142)
**Author:** [@gjulianm](https://discuss.elastic.co/u/gjulianm)\ **Replies:** 4\ **Last updated:** [February 15, 2022, 8:58am UTC](https://discuss.elastic.co/t/closed-indices-do-not-release-shards/297142 "2022-02-15T08:58:06Z")
I am having a problem where closed indices are not releasing shards. I am not sure if this is a configuration problem or a change with respect to previous versions (I am using 7.17.0 right now), because I have been able … --- ## [Elasticsearch upgrade with indexing](https://discuss.elastic.co/t/elasticsearch-upgrade-with-indexing/297149)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 12:26am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-with-indexing/297149 "2022-02-15T00:26:36Z")
Im using Elasticsearch 7.4.2 with three cluserted nodes. Im upgrading node 1 to 7.10.2 and then I want to update some KIbana Objects inside Elasticsearch. At that time, other nodes will be in 7.4.2 and still running. Can… --- ## [Kibana authentication with Nginx prompting password again and again](https://discuss.elastic.co/t/kibana-authentication-with-nginx-prompting-password-again-and-again/297074)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 3\ **Last updated:** [February 15, 2022, 12:14am UTC](https://discuss.elastic.co/t/kibana-authentication-with-nginx-prompting-password-again-and-again/297074 "2022-02-15T00:14:02Z")
Hi Team, I have a complete elastic-stack with x-pack security and its working fine. However my concern is I wanted to secure this with 2 FA or other basic authentication by putting it behind Nginx reverse proxy. Since t… --- ## [Elastic Enterprise Search Sources](https://discuss.elastic.co/t/elastic-enterprise-search-sources/291373)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 6\ **Last updated:** [February 14, 2022, 9:09pm UTC](https://discuss.elastic.co/t/elastic-enterprise-search-sources/291373 "2022-02-14T21:09:49Z")
This may be out of scope but would be amazing to figure out. I've seen some odd ball integrations on GitHub that get started then abandoned so they are not contenders. Just like many places in a hybrid setup with some o… --- ## [Readiness probe failed waiting for cluster to become ready](https://discuss.elastic.co/t/readiness-probe-failed-waiting-for-cluster-to-become-ready/297192)
**Author:** [@cloudnative](https://discuss.elastic.co/u/cloudnative)\ **Replies:** 0\ **Last updated:** [February 14, 2022, 9:02pm UTC](https://discuss.elastic.co/t/readiness-probe-failed-waiting-for-cluster-to-become-ready/297192 "2022-02-14T21:02:20Z")
Hi, I am currently experiencing the above error after initially experiencing a crashloopbackup error due to a wrong container repo. We were trying to create an a new user account with "bin/Elasticsearch-user ". While thi… --- ## [Delay between Logstash and ES? ELK 7.16.1 \[ECK\]](https://discuss.elastic.co/t/delay-between-logstash-and-es-elk-7-16-1-eck/295882)
**Author:** [@rudyfaile](https://discuss.elastic.co/u/rudyfaile)\ **Replies:** 15\ **Last updated:** [February 14, 2022, 7:59pm UTC](https://discuss.elastic.co/t/delay-between-logstash-and-es-elk-7-16-1-eck/295882 "2022-02-14T19:59:30Z")
Howdy, Similar to and We're experiencing a 1-2 minute delay between logstash and ES and can't figure out why. We're relatively sure the problem is between logstash and ES. If I manually trigger an error it appear… --- ## [Master-Eligible node cluster resiliency for ElasticSearch 7.x](https://discuss.elastic.co/t/master-eligible-node-cluster-resiliency-for-elasticsearch-7-x/297125)
**Author:** [@crossdelena12](https://discuss.elastic.co/u/crossdelena12)\ **Replies:** 7\ **Last updated:** [February 14, 2022, 7:22pm UTC](https://discuss.elastic.co/t/master-eligible-node-cluster-resiliency-for-elasticsearch-7-x/297125 "2022-02-14T19:22:51Z")
Hello, I am using Elasticsearch v7.17.0. Here is my configuration that I am testing the new version with, I have dedicated master node (3) and data node (1). This sets up my cluster and am in business. However, when I … --- ## [Pipeline stopped with "Index 83 out of bounds for length 16"](https://discuss.elastic.co/t/pipeline-stopped-with-index-83-out-of-bounds-for-length-16/296898)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 4\ **Last updated:** [February 14, 2022, 6:07pm UTC](https://discuss.elastic.co/t/pipeline-stopped-with-index-83-out-of-bounds-for-length-16/296898 "2022-02-14T18:07:01Z")
Hi, We have a configuration of logstash with several pipelines, having a main pipeline that receives the information, identifies the type of information and sends to different pipelines for procesing before sending the … --- ## [Logstash - jdbc retry multiple ips](https://discuss.elastic.co/t/logstash-jdbc-retry-multiple-ips/297107)
**Author:** [@Nasser](https://discuss.elastic.co/u/Nasser)\ **Replies:** 1\ **Last updated:** [February 14, 2022, 6:03pm UTC](https://discuss.elastic.co/t/logstash-jdbc-retry-multiple-ips/297107 "2022-02-14T18:03:12Z")
Hi i'm connecting to my database via scan name and my scan name resolve to 3 IPs but the issue is sometimes 1 or 2 IPs get unavailable my question how i can set the connection to retry all IPs as below jdbc\_connectio… --- ## [Prefix query with multiple terms in sequence](https://discuss.elastic.co/t/prefix-query-with-multiple-terms-in-sequence/297175)
**Author:** [@FelipeGXavier](https://discuss.elastic.co/u/FelipeGXavier)\ **Replies:** 0\ **Last updated:** [February 14, 2022, 5:44pm UTC](https://discuss.elastic.co/t/prefix-query-with-multiple-terms-in-sequence/297175 "2022-02-14T17:44:04Z")
I'm looking for a way to make a query with multiple terms with prefix that preserve the order they're showed. Using match\_phrase\_prefix only the last term is the prefix. I can combine prefix with multiple match\_phrase … --- ## [Adding multiple values to an array](https://discuss.elastic.co/t/adding-multiple-values-to-an-array/296494)
**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\ **Replies:** 19\ **Last updated:** [February 14, 2022, 5:31pm UTC](https://discuss.elastic.co/t/adding-multiple-values-to-an-array/296494 "2022-02-14T17:31:27Z")
Hello, I have an array which contains a bunch of time stamps which get added every time the record is modified from the source PGSQL database. I'm looking to modify this array to contain both a string and a time stamp. … --- ## [Range aggregation Scripts](https://discuss.elastic.co/t/range-aggregation-scripts/297147)
**Author:** [@Pallavibhushan](https://discuss.elastic.co/u/Pallavibhushan)\ **Replies:** 1\ **Last updated:** [February 14, 2022, 5:25pm UTC](https://discuss.elastic.co/t/range-aggregation-scripts/297147 "2022-02-14T17:25:31Z")
Hi All, Below is my problem statement. I want to calculate aging stage based on below requirement. If Stage='INT' then today() - 'INT1 Date' else If Stage='MCH' then today() - 'Applied Date (WEB/MCH)' else If Sta… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=703) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=705)