# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=713

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 714

---

## [Attempt to divide two fields at the aggregate level causing infinity response](https://discuss.elastic.co/t/attempt-to-divide-two-fields-at-the-aggregate-level-causing-infinity-response/296198)

<div class="topic-metadata">

**Author:** [@LuigiGalati](https://discuss.elastic.co/u/LuigiGalati)\
**Replies:** 20\
**Last updated:** [February 5, 2022, 11:08pm UTC](https://discuss.elastic.co/t/attempt-to-divide-two-fields-at-the-aggregate-level-causing-infinity-response/296198 "2022-02-05T23:08:45Z")

</div>

I am feeding kibana with an HR dataset from peoplesoft. The data is beginning, end and termination counts by fiscal year. There is no timestamped data used. I need to calculate percent turnover which is Terminations/(Ave…

---

## [Query sample of each field in index](https://discuss.elastic.co/t/query-sample-of-each-field-in-index/296370)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 0\
**Last updated:** [February 5, 2022, 10:11pm UTC](https://discuss.elastic.co/t/query-sample-of-each-field-in-index/296370 "2022-02-05T22:11:41Z")

</div>

I am trying to develop data-catalog app this app shows all fields (in flat dict format) its mapping type and sample data for instance this index POST test/\_doc { "@timestamp": "2099-11-15T13:12:00", "message": "GE…

---

## [Java client, which libraries, packages](https://discuss.elastic.co/t/java-client-which-libraries-packages/296366)

<div class="topic-metadata">

**Author:** [@mamueIV](https://discuss.elastic.co/u/mamueIV)\
**Replies:** 0\
**Last updated:** [February 5, 2022, 8:25pm UTC](https://discuss.elastic.co/t/java-client-which-libraries-packages/296366 "2022-02-05T20:25:17Z")

</div>

Hi, i try to get started with Elasticsearch development in java. Alas still no javadoc as far as i can see and the source examples are quite confusing. No mention of used libraries, not even package names. For example,…

---

## [Logstash Listening on port 8080 got struck](https://discuss.elastic.co/t/logstash-listening-on-port-8080-got-struck/296130)

<div class="topic-metadata">

**Author:** [@naveen\_g](https://discuss.elastic.co/u/naveen_g)\
**Replies:** 5\
**Last updated:** [February 5, 2022, 4:32pm UTC](https://discuss.elastic.co/t/logstash-listening-on-port-8080-got-struck/296130 "2022-02-05T16:32:59Z")

</div>

Hi Everyone, I'm new to ELK and go-through handful of articles & videos , I setup ELK for our projects. When I do POC on setup ELK & Filebeat in same machine, it was working fine but when we planned to separate ELK to se…

---

## [Deletion of eck-operator pod](https://discuss.elastic.co/t/deletion-of-eck-operator-pod/296360)

<div class="topic-metadata">

**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Replies:** 1\
**Last updated:** [February 5, 2022, 1:37pm UTC](https://discuss.elastic.co/t/deletion-of-eck-operator-pod/296360 "2022-02-05T13:37:38Z")

</div>

We are upgrading out istio version. ECK (and the elastic / kibana pods) have istio sidecar injected. For all pods to take the new sidecars, a restart is needed, so that new pods are generated. This is more or less man…

---

## [How to dynamically recognize points via HTTPS ingestion?](https://discuss.elastic.co/t/how-to-dynamically-recognize-points-via-https-ingestion/296346)

<div class="topic-metadata">

**Author:** [@HC\_LW](https://discuss.elastic.co/u/HC_LW)\
**Replies:** 1\
**Last updated:** [February 4, 2022, 10:03pm UTC](https://discuss.elastic.co/t/how-to-dynamically-recognize-points-via-https-ingestion/296346 "2022-02-04T22:03:46Z")

</div>

We are sending https requests to ingest data. How can the request be formatted so that Elastic dynamically maps the 'geo\_point' field as type:point and not text or number? Thank you! curl -X POST "https://in-https.URL" …

---

## [Elasticsearch Ability to write to Memory](https://discuss.elastic.co/t/elasticsearch-ability-to-write-to-memory/295586)

<div class="topic-metadata">

**Author:** [@Mohammad\_Etemad](https://discuss.elastic.co/u/Mohammad_Etemad)\
**Replies:** 2\
**Last updated:** [February 4, 2022, 9:07pm UTC](https://discuss.elastic.co/t/elasticsearch-ability-to-write-to-memory/295586 "2022-02-04T21:07:00Z")

</div>

Hello I was wondering if its possible to have Elasticsearch write docs to memory and have them roll. The use case is that we have a lot of data on a specific index being written and the writes to disk are using lots of …

---

## [Kibana service account not working for v8 upgrade deprecation note](https://discuss.elastic.co/t/kibana-service-account-not-working-for-v8-upgrade-deprecation-note/296125)

<div class="topic-metadata">

**Author:** [@rsaeks](https://discuss.elastic.co/u/rsaeks)\
**Replies:** 4\
**Last updated:** [February 4, 2022, 9:05pm UTC](https://discuss.elastic.co/t/kibana-service-account-not-working-for-v8-upgrade-deprecation-note/296125 "2022-02-04T21:05:19Z")

</div>

We recently moved our stack to 7.17 and are working through some of the warnings in the 8.0 upgrade assistant to be ready for the new version in the future. When changing Kibana to use Elasticsearch.serviceAccountToken i…

---

## [Namespace Option in Slack Connector](https://discuss.elastic.co/t/namespace-option-in-slack-connector/295292)

<div class="topic-metadata">

**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\
**Replies:** 5\
**Last updated:** [February 4, 2022, 7:59pm UTC](https://discuss.elastic.co/t/namespace-option-in-slack-connector/295292 "2022-02-04T19:59:25Z")

</div>

Is it possible to add the namespace information in the slack connector? i.e Rule {{context.rule.name}} with severity {{context.rule.severity}} generated {{state.signals\_count}} alerts in the {{context.data\_stream.names…

---

## [Issue with a conditional statement](https://discuss.elastic.co/t/issue-with-a-conditional-statement/296327)

<div class="topic-metadata">

**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\
**Replies:** 11\
**Last updated:** [February 4, 2022, 6:19pm UTC](https://discuss.elastic.co/t/issue-with-a-conditional-statement/296327 "2022-02-04T18:19:35Z")

</div>

Hello, I'm debugging my configuration and I'm having an issue comparing two fields, both are date fields and one eventually will become a multi-valued field. All my data is static and once a record is updated, a time st…

---

## [Kibana errors](https://discuss.elastic.co/t/kibana-errors/296229)

<div class="topic-metadata">

**Author:** [@sukhsehaj](https://discuss.elastic.co/u/sukhsehaj)\
**Replies:** 5\
**Last updated:** [February 4, 2022, 5:21pm UTC](https://discuss.elastic.co/t/kibana-errors/296229 "2022-02-04T17:21:01Z")

</div>

Hello, can you plz help me troubleshoot these Kibana errors: Feb 03 19:49:32 prozokiba01.pinpointtech.com systemd\[1\]: Started Kibana. Feb 03 19:49:42 prozokiba01.pinpointtech.com kibana\[562\]: {"type":"log","@timestamp"…

---

## [Do I need a nested query or foreach or a create a new index?](https://discuss.elastic.co/t/do-i-need-a-nested-query-or-foreach-or-a-create-a-new-index/295968)

<div class="topic-metadata">

**Author:** [@clearbluelou](https://discuss.elastic.co/u/clearbluelou)\
**Replies:** 5\
**Last updated:** [February 3, 2022, 8:52pm UTC](https://discuss.elastic.co/t/do-i-need-a-nested-query-or-foreach-or-a-create-a-new-index/295968 "2022-02-03T20:52:06Z")

</div>

I'm new to Elasticsearch and Kibana. I haven't really gotten to a point of understanding of the JSON-like syntax. I've just been using the filters and some Lucene queries. Please be gentle. :blush: This is hard to e…

---

## [Get list of installed packages with Elastic Agent](https://discuss.elastic.co/t/get-list-of-installed-packages-with-elastic-agent/296319)

<div class="topic-metadata">

**Author:** [@stenbot1](https://discuss.elastic.co/u/stenbot1)\
**Replies:** 0\
**Last updated:** [February 4, 2022, 2:53pm UTC](https://discuss.elastic.co/t/get-list-of-installed-packages-with-elastic-agent/296319 "2022-02-04T14:53:47Z")

</div>

I currently have an Elastic Stack that uses Auditbeats to ingest logs. I am able to use the Auditbeats to see which packages are installed in my environment looking at the Package fields. I am testing out moving from Aud…

---

## [How to decide on number of Master and data nodes between two data centers](https://discuss.elastic.co/t/how-to-decide-on-number-of-master-and-data-nodes-between-two-data-centers/295097)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 8\
**Last updated:** [February 4, 2022, 2:32pm UTC](https://discuss.elastic.co/t/how-to-decide-on-number-of-master-and-data-nodes-between-two-data-centers/295097 "2022-02-04T14:32:51Z")

</div>

Hi All, We have a total of 8 servers (4 in each data center), running ELK 7.6.2 stack. How can we decide on the number of Master (or Master-eligible) nodes and data nodes? Please help

---

## [More\_like\_this not using nested fields?](https://discuss.elastic.co/t/more-like-this-not-using-nested-fields/296311)

<div class="topic-metadata">

**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\
**Replies:** 0\
**Last updated:** [February 4, 2022, 2:27pm UTC](https://discuss.elastic.co/t/more-like-this-not-using-nested-fields/296311 "2022-02-04T14:27:47Z")

</div>

I want to use the more like this query type to find similar documents without having to construct a bool. I like the minimum\_should\_match as a percent to identify %-similar documents. My document has lots of nested fiel…

---

## [No results with larger time range](https://discuss.elastic.co/t/no-results-with-larger-time-range/296035)

<div class="topic-metadata">

**Author:** [@jukow](https://discuss.elastic.co/u/jukow)\
**Replies:** 1\
**Last updated:** [February 4, 2022, 2:22pm UTC](https://discuss.elastic.co/t/no-results-with-larger-time-range/296035 "2022-02-04T14:22:28Z")

</div>

When i do a terms aggregation with a count metric Kibana shows "No results found" for a time range of e.g. 3 days. When i lower the range to e.g. 1 day results are showing up. What kind of strange behavior is this?

---

## [Elasticsearch - monitoring query response times](https://discuss.elastic.co/t/elasticsearch-monitoring-query-response-times/296306)

<div class="topic-metadata">

**Author:** [@MSaneme](https://discuss.elastic.co/u/MSaneme)\
**Replies:** 0\
**Last updated:** [February 4, 2022, 2:00pm UTC](https://discuss.elastic.co/t/elasticsearch-monitoring-query-response-times/296306 "2022-02-04T14:00:57Z")

</div>

I would like to perform a study of the response time provided by Elasticsearch for different spatio-temporal queries. Is there any way to know the response times for each query executed on a given index? I am working w…

---

## [创建新beat的时候卡住了](https://discuss.elastic.co/t/beat/296302)

<div class="topic-metadata">

**Author:** [@YUAN\_YE](https://discuss.elastic.co/u/YUAN_YE)\
**Replies:** 0\
**Last updated:** [February 4, 2022, 1:47pm UTC](https://discuss.elastic.co/t/beat/296302 "2022-02-04T13:47:13Z")

</div>

我把beat的版本退回到7.15打算自己创建个新的beat，但是在执行mage GenerateCustomBeat时候卡住，创建时选的版本7.15和master都会卡住，不过卡的地方不一样。有大佬知道怎么解决吗

---

## [Elastic migration](https://discuss.elastic.co/t/elastic-migration/296298)

<div class="topic-metadata">

**Author:** [@Petr\_Bucek](https://discuss.elastic.co/u/Petr_Bucek)\
**Replies:** 0\
**Last updated:** [February 4, 2022, 1:21pm UTC](https://discuss.elastic.co/t/elastic-migration/296298 "2022-02-04T13:21:47Z")

</div>

Hello, I have general question. I have elastic on-prem solution in old DC. (that DC will be decommissioned and we cannot move the physical servers) I need to migrate from one DC (on-prem solution) to another DC (virtu…

---

## [Unable to set "defaultRoute" in kibana configuration file in kibana 7.10.2](https://discuss.elastic.co/t/unable-to-set-defaultroute-in-kibana-configuration-file-in-kibana-7-10-2/296231)

<div class="topic-metadata">

**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\
**Replies:** 1\
**Last updated:** [February 4, 2022, 1:15pm UTC](https://discuss.elastic.co/t/unable-to-set-defaultroute-in-kibana-configuration-file-in-kibana-7-10-2/296231 "2022-02-04T13:15:43Z")

</div>

I want to remove all deprecation warnings from the kibana. In the logs, I have seen that kibana.defaultAppId has been deprecated and it has been suggested that defaultRoute should be used. But when i set this option in k…

---

## [Input tcp codec fluent: invalid byte sequence in UTF-8 in regex](https://discuss.elastic.co/t/input-tcp-codec-fluent-invalid-byte-sequence-in-utf-8-in-regex/296290)

<div class="topic-metadata">

**Author:** [@Samuel\_Lima1](https://discuss.elastic.co/u/Samuel_Lima1)\
**Replies:** 0\
**Last updated:** [February 4, 2022, 12:45pm UTC](https://discuss.elastic.co/t/input-tcp-codec-fluent-invalid-byte-sequence-in-utf-8-in-regex/296290 "2022-02-04T12:45:40Z")

</div>

Hi folks, I'm using input tcp codec fluent and getting error " invalid byte sequence in UTF-8" when doing regex. It seems there is an invalid character in the message. Any idea how to solve it? Is there a way to simpl…

---

## [Local Storage Full](https://discuss.elastic.co/t/local-storage-full/296078)

<div class="topic-metadata">

**Author:** [@eprop-marc](https://discuss.elastic.co/u/eprop-marc)\
**Replies:** 6\
**Last updated:** [February 4, 2022, 11:43am UTC](https://discuss.elastic.co/t/local-storage-full/296078 "2022-02-04T11:43:18Z")

</div>

Hi, the local storage on my ELK stack is 95% full and I can no longer see logs in Elastic. I just wanted some advice on how best to reduce the storage on the local disk please and start using Elastic again. I don't reall…

---

## [Date Histogram Visualization](https://discuss.elastic.co/t/date-histogram-visualization/296199)

<div class="topic-metadata">

**Author:** [@kibanauser4](https://discuss.elastic.co/u/kibanauser4)\
**Replies:** 3\
**Last updated:** [February 4, 2022, 11:40am UTC](https://discuss.elastic.co/t/date-histogram-visualization/296199 "2022-02-04T11:40:41Z")

</div>

I have a Datetime field in my index and I want to show a visualization where I will be able to see in which hours my records are the most frequent. But when I use the Date Histogram and choose to show "per 2 hours" for e…

---

## [Haystack US 2022 - The Search Relevance Conference 27/28 April - Call for Papers is Open](https://discuss.elastic.co/t/haystack-us-2022-the-search-relevance-conference-27-28-april-call-for-papers-is-open/296284)

<div class="topic-metadata">

**Author:** [@flaxsearch](https://discuss.elastic.co/u/flaxsearch)\
**Replies:** 0\
**Last updated:** [February 4, 2022, 11:34am UTC](https://discuss.elastic.co/t/haystack-us-2022-the-search-relevance-conference-27-28-april-call-for-papers-is-open/296284 "2022-02-04T11:34:37Z")

</div>

Save the Dates - Haystack US 2022 will return to Charlottesville, Virginia on 27th & 28th April 2022. Haystack is the conference for organizations where search, matching, and relevance really matters to the bottom line.…

---

## [Using multiple similarity metrics on an existing index](https://discuss.elastic.co/t/using-multiple-similarity-metrics-on-an-existing-index/296274)

<div class="topic-metadata">

**Author:** [@mkaze](https://discuss.elastic.co/u/mkaze)\
**Replies:** 0\
**Last updated:** [February 4, 2022, 10:03am UTC](https://discuss.elastic.co/t/using-multiple-similarity-metrics-on-an-existing-index/296274 "2022-02-04T10:03:55Z")

</div>

I was wondering if it's possible to use multiple similarity metrics for an index in Elasticsearch. Let's assume I have already defined an index with a customized BM25 similarity metric (say, with b=1), and now I would li…

---

## [ドキュメントAPIにて、インデックス名に動的に日付を設定する方法](https://discuss.elastic.co/t/api/293513)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 10\
**Last updated:** [February 4, 2022, 9:45am UTC](https://discuss.elastic.co/t/api/293513 "2022-02-04T09:45:41Z")

</div>

以下のドキュメントに示されるAPIにて、インデックス名に現在月を付与したいです PUT my-index-000001/\_doc/1?timeout=5m { "@timestamp": "2099-11-15T13:12:00", "message": "GET /search HTTP/1.1 200 1070000", "user": { "id": "kimchy" } } 上記APIにて、インデ…

---

## [Split document in mongodb with logstash](https://discuss.elastic.co/t/split-document-in-mongodb-with-logstash/296271)

<div class="topic-metadata">

**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\
**Replies:** 0\
**Last updated:** [February 4, 2022, 9:43am UTC](https://discuss.elastic.co/t/split-document-in-mongodb-with-logstash/296271 "2022-02-04T09:43:45Z")

</div>

Hi, I would to know how to split document in mongodb with logstash because i send data from logstash to mongodb automtically so i want to split some document automatically so i think it's possible in bloc filter in logs…

---

## [Logstash elasticsearch input error](https://discuss.elastic.co/t/logstash-elasticsearch-input-error/296172)

<div class="topic-metadata">

**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\
**Replies:** 14\
**Last updated:** [February 4, 2022, 9:06am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-input-error/296172 "2022-02-04T09:06:31Z")

</div>

Hello I am extracting data from an http server through the apace pipeline, indicating the pipeline to use in the logstash output and it indexes correctly. On the other hand, I want to enrich the data already obtained an…

---

## [Kibana Infrastructure UI shows no metrics for hosts](https://discuss.elastic.co/t/kibana-infrastructure-ui-shows-no-metrics-for-hosts/296268)

<div class="topic-metadata">

**Author:** [@\_manukm](https://discuss.elastic.co/u/_manukm)\
**Replies:** 0\
**Last updated:** [February 4, 2022, 9:00am UTC](https://discuss.elastic.co/t/kibana-infrastructure-ui-shows-no-metrics-for-hosts/296268 "2022-02-04T09:00:29Z")

</div>

Continuing the discussion from Kibana Infrastructure UI shows no metrics for hosts or kubernetes pods: I am facing the exact same issue. @zx10r did you resolve this?

---

## [Alternative for Template Query in ES 7.x (Search template call/pass to another template)](https://discuss.elastic.co/t/alternative-for-template-query-in-es-7-x-search-template-call-pass-to-another-template/296265)

<div class="topic-metadata">

**Author:** [@mjwahyudi](https://discuss.elastic.co/u/mjwahyudi)\
**Replies:** 0\
**Last updated:** [February 4, 2022, 8:23am UTC](https://discuss.elastic.co/t/alternative-for-template-query-in-es-7-x-search-template-call-pass-to-another-template/296265 "2022-02-04T08:23:06Z")

</div>

Hi All, I have task to migrate old query from ES 5.x that built/migrated from ES 2.x (it is so old). In the query, it is using template query (Template Query | Elasticsearch Reference \[5.6\] | Elastic). When I try to us…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=712)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=714)
