# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=728

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 729

---

## [Logstash not running any query except select version()](https://discuss.elastic.co/t/logstash-not-running-any-query-except-select-version/294809)

<div class="topic-metadata">

**Author:** [@Mizo10](https://discuss.elastic.co/u/Mizo10)\
**Replies:** 0\
**Last updated:** [January 19, 2022, 12:19pm UTC](https://discuss.elastic.co/t/logstash-not-running-any-query-except-select-version/294809 "2022-01-19T12:19:00Z")

</div>

Hello, I'm new to logstash, I'm running a logstash pipeline configuration in an aws instance with the following configuration : input { jdbc { jdbc\_connection\_string =\> "jdbc:mysql://my.domain:3306/db\_name" …

---

## [How to update query on multiple indexes](https://discuss.elastic.co/t/how-to-update-query-on-multiple-indexes/294724)

<div class="topic-metadata">

**Author:** [@pk5859](https://discuss.elastic.co/u/pk5859)\
**Replies:** 3\
**Last updated:** [January 19, 2022, 12:08pm UTC](https://discuss.elastic.co/t/how-to-update-query-on-multiple-indexes/294724 "2022-01-19T12:08:49Z")

</div>

I have 3 indexes A, B & C i want to update on all three indexes. However python client.update() syntax won't allow it. \_index="A","B","C" query = {"doc": {"cluster":"1" }} client.update(index=\_index, id=id, body=quer…

---

## [Elasticsearch log parser](https://discuss.elastic.co/t/elasticsearch-log-parser/294807)

<div class="topic-metadata">

**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\
**Replies:** 0\
**Last updated:** [January 19, 2022, 11:55am UTC](https://discuss.elastic.co/t/elasticsearch-log-parser/294807 "2022-01-19T11:55:56Z")

</div>

Hello, I'm using latest ubuntu Linux, and I would to ask You which is the best log reader for logs from for example Elasticsearch logs - I'm using Atom as log editor but don't cover my expectations. I would like to ask…

---

## [Unable to retrieve version information from Elasticsearch nodes. Request timed out](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-request-timed-out/294805)

<div class="topic-metadata">

**Author:** [@nandhini\_r](https://discuss.elastic.co/u/nandhini_r)\
**Replies:** 0\
**Last updated:** [January 19, 2022, 11:50am UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-request-timed-out/294805 "2022-01-19T11:50:51Z")

</div>

Hi All, Elasticsearch is running, but accessing Elasticsearch from the browser it shouldn’t working, the chrome tab should return JSON what I have seen using curl command. I’ll be sharing the JSON that should be display…

---

## [Elasticsearch behind NAT](https://discuss.elastic.co/t/elasticsearch-behind-nat/294773)

<div class="topic-metadata">

**Author:** [@rudyawall](https://discuss.elastic.co/u/rudyawall)\
**Replies:** 1\
**Last updated:** [January 19, 2022, 11:37am UTC](https://discuss.elastic.co/t/elasticsearch-behind-nat/294773 "2022-01-19T11:37:44Z")

</div>

Hi Everybody, I already installed the elasticserach but behind the NAT, i'm using google cloud I wanna configuration elasticserach can access from external network, using 0.0.0.0 but always failed to connect when Iam …

---

## [TLS Certificate Expired issue in Uptime](https://discuss.elastic.co/t/tls-certificate-expired-issue-in-uptime/292565)

<div class="topic-metadata">

**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\
**Replies:** 13\
**Last updated:** [January 19, 2022, 11:09am UTC](https://discuss.elastic.co/t/tls-certificate-expired-issue-in-uptime/292565 "2022-01-19T11:09:38Z")

</div>

Hi, After renewing certificate on all levels for one domain we still have TLS Certificate showing Expired message in its monitor in Uptime. Interestingly monitor is not down, but shows expired certificate. Anyone know…

---

## [Elasticsearch modules' releases and repositories](https://discuss.elastic.co/t/elasticsearch-modules-releases-and-repositories/294601)

<div class="topic-metadata">

**Author:** [@bamthomas](https://discuss.elastic.co/u/bamthomas)\
**Replies:** 7\
**Last updated:** [January 19, 2022, 10:57am UTC](https://discuss.elastic.co/t/elasticsearch-modules-releases-and-repositories/294601 "2022-01-19T10:57:54Z")

</div>

Hello, We have an embedded node in our java app and 5 modules that are loaded : Netty4 ParentJoin CommonAnalysis Painless Reindex Lately we wanted to upgrade the ES libraries from 7.10 to 7.16. We found the main Elas…

---

## [Error: Invalid string. Length must be a multiple of 4](https://discuss.elastic.co/t/error-invalid-string-length-must-be-a-multiple-of-4/293201)

<div class="topic-metadata">

**Author:** [@mohantychandra](https://discuss.elastic.co/u/mohantychandra)\
**Replies:** 13\
**Last updated:** [January 19, 2022, 10:56am UTC](https://discuss.elastic.co/t/error-invalid-string-length-must-be-a-multiple-of-4/293201 "2022-01-19T10:56:11Z")

</div>

Hi Can anyone help to resolve the issue, Any comment is much appreciated. The issue and log is given below. Invalid string. Length must be a multiple of 4 Error: Invalid string. Length must be a multiple of 4

---

## [Old Kibana indices](https://discuss.elastic.co/t/old-kibana-indices/294785)

<div class="topic-metadata">

**Author:** [@alexs1](https://discuss.elastic.co/u/alexs1)\
**Replies:** 1\
**Last updated:** [January 19, 2022, 10:56am UTC](https://discuss.elastic.co/t/old-kibana-indices/294785 "2022-01-19T10:56:01Z")

</div>

Is that safe to delete old Kibana indices? there are lots of them. (They should probably cleaned up during an upgrade)

---

## [Nested time ranges and term in one filter](https://discuss.elastic.co/t/nested-time-ranges-and-term-in-one-filter/294392)

<div class="topic-metadata">

**Author:** [@D1sturbance](https://discuss.elastic.co/u/D1sturbance)\
**Replies:** 9\
**Last updated:** [January 19, 2022, 9:42am UTC](https://discuss.elastic.co/t/nested-time-ranges-and-term-in-one-filter/294392 "2022-01-19T09:42:20Z")

</div>

Hello :slight\_smile: My data: shops working hours shops with each of their working hours I have a query which returns shops from first day of the month to last day of the month including working hours. For example: …

---

## [Inserting data in Elasticsearch 8.0.0 preview](https://discuss.elastic.co/t/inserting-data-in-elasticsearch-8-0-0-preview/294477)

<div class="topic-metadata">

**Author:** [@Abhishek\_Gautam](https://discuss.elastic.co/u/Abhishek_Gautam)\
**Replies:** 4\
**Last updated:** [January 19, 2022, 9:12am UTC](https://discuss.elastic.co/t/inserting-data-in-elasticsearch-8-0-0-preview/294477 "2022-01-19T09:12:37Z")

</div>

Hi team, is there any way to insert bulk data into Elasticsearch 8.0.0 alpha 1, as there isnt any Logstash version compatible with this version.

---

## [Request to close index fails due to socket timeout](https://discuss.elastic.co/t/request-to-close-index-fails-due-to-socket-timeout/294687)

<div class="topic-metadata">

**Author:** [@Shubham\_M](https://discuss.elastic.co/u/Shubham_M)\
**Replies:** 13\
**Last updated:** [January 19, 2022, 9:08am UTC](https://discuss.elastic.co/t/request-to-close-index-fails-due-to-socket-timeout/294687 "2022-01-19T09:08:42Z")

</div>

Scenario: We create new index on daily basis so as to keep the data in the index updated.After creation of new index when close request is made,it times out with Socket failure execption. { class: "org.quartz.simpl.Sim…

---

## [How to determine the correct size for terms aggregation, which will produce accurate aggregation results?](https://discuss.elastic.co/t/how-to-determine-the-correct-size-for-terms-aggregation-which-will-produce-accurate-aggregation-results/294771)

<div class="topic-metadata">

**Author:** [@Nishikant\_Tayade](https://discuss.elastic.co/u/Nishikant_Tayade)\
**Replies:** 3\
**Last updated:** [January 19, 2022, 8:27am UTC](https://discuss.elastic.co/t/how-to-determine-the-correct-size-for-terms-aggregation-which-will-produce-accurate-aggregation-results/294771 "2022-01-19T08:27:13Z")

</div>

As I read through document for Terms Aggregation, I came across the fact that the results from Term Aggregation are not always accurate, but we can increase the size to get the accurate results. I know : - How Query-T…

---

## [Circular data overwriting](https://discuss.elastic.co/t/circular-data-overwriting/294768)

<div class="topic-metadata">

**Author:** [@jelns](https://discuss.elastic.co/u/jelns)\
**Replies:** 2\
**Last updated:** [January 19, 2022, 7:51am UTC](https://discuss.elastic.co/t/circular-data-overwriting/294768 "2022-01-19T07:51:38Z")

</div>

Hi. Is it possible to cyclically overwrite data in Elasticsearch storage (as Round-robin databases do)? For instance, when the storage is full, new data will overwrite the oldest. Maybe there are some way to organize th…

---

## [Discover Can't Show data (Panw Module Filebeat)](https://discuss.elastic.co/t/discover-cant-show-data-panw-module-filebeat/294435)

<div class="topic-metadata">

**Author:** [@Xenial](https://discuss.elastic.co/u/Xenial)\
**Replies:** 4\
**Last updated:** [January 19, 2022, 6:49am UTC](https://discuss.elastic.co/t/discover-cant-show-data-panw-module-filebeat/294435 "2022-01-19T06:49:33Z")

</div>

Hi All, I've configured the ELK system for monitoring Palo Alto Log using Filebeats Modules PANW. i check the data index management is real time counting and grow, but when i go to Discover not showing any data. In…

---

## [Elasticsearch plugin turned red](https://discuss.elastic.co/t/elasticsearch-plugin-turned-red/294503)

<div class="topic-metadata">

**Author:** [@Mohammad\_Ramadan\_Abd](https://discuss.elastic.co/u/Mohammad_Ramadan_Abd)\
**Replies:** 3\
**Last updated:** [January 19, 2022, 6:48am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-turned-red/294503 "2022-01-19T06:48:09Z")

</div>

Hello Bros' In my setup here i suddenly found my setup stoped working with Elasticsearch plugin is red "Chaeck attachments", I have restarted the server several times but still not working. Any help to have it back wor…

---

## [Import from mongodb using logstash](https://discuss.elastic.co/t/import-from-mongodb-using-logstash/294770)

<div class="topic-metadata">

**Author:** [@saeed](https://discuss.elastic.co/u/saeed)\
**Replies:** 0\
**Last updated:** [January 19, 2022, 6:29am UTC](https://discuss.elastic.co/t/import-from-mongodb-using-logstash/294770 "2022-01-19T06:29:49Z")

</div>

Hi I need to import my documents from mongodb to Elasticsearch and I used logstash. This is my output in CMD when I run this command: C:\\logstash-7.16.3\\bin\\logstash -f c:\\logstash-7.16.3\\bin\\mongo2.conf "Using bundl…

---

## [Doc\_values: false Not effective?](https://discuss.elastic.co/t/doc-values-false-not-effective/294760)

<div class="topic-metadata">

**Author:** [@S-Dragon0302](https://discuss.elastic.co/u/S-Dragon0302)\
**Replies:** 1\
**Last updated:** [January 19, 2022, 4:00am UTC](https://discuss.elastic.co/t/doc-values-false-not-effective/294760 "2022-01-19T04:00:22Z")

</div>

Elasticsearch version:7.15.1 { - "contentindex\_2m\_20211109\_1412": { - "mappings": { - "dynamic": "false", "\_source": { - "enabled": false }, "properties": { - "ContentHtml": { - "type": "keyword", "doc\_values"…

---

## [New autoresponder bot enabled](https://discuss.elastic.co/t/new-autoresponder-bot-enabled/294761)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 0\
**Last updated:** [January 19, 2022, 3:52am UTC](https://discuss.elastic.co/t/new-autoresponder-bot-enabled/294761 "2022-01-19T03:52:35Z")

</div>

Thanks to the awesome team at Discourse, we've enabled a new autoresponder bot to trial. The idea is to flag any EOL versions of the stack that users may have deployed and post an automated response recommending an upgr…

---

## [既存のインデックスのマッピング定義を変更する際のデータ移行方法について](https://discuss.elastic.co/t/topic/294668)

<div class="topic-metadata">

**Author:** [@Naoki\_Yoshida](https://discuss.elastic.co/u/Naoki_Yoshida)\
**Replies:** 2\
**Last updated:** [January 19, 2022, 1:08am UTC](https://discuss.elastic.co/t/topic/294668 "2022-01-19T01:08:00Z")

</div>

既にデータが登録されているインデックスで、とあるフィールドのマッピング定義を変更する場合には、 既存インデックス削除→新規インデックスを作成して新しいマッピング定義を登録しデータを投入 という方法しかないのでしょうか。 現在運用しているシステムでは上記のような方法を取っておりまして、 マッピング定義の更新に非常に時間がかかっています。 何かいい方法等ありましたら教えていただけますと幸いです。

---

## [Custom Interactive Filters in Kibana](https://discuss.elastic.co/t/custom-interactive-filters-in-kibana/294216)

<div class="topic-metadata">

**Author:** [@Jason2073](https://discuss.elastic.co/u/Jason2073)\
**Replies:** 3\
**Last updated:** [January 18, 2022, 10:30pm UTC](https://discuss.elastic.co/t/custom-interactive-filters-in-kibana/294216 "2022-01-18T22:30:46Z")

</div>

Hello! I have been working to make a kibana dashboard more interactive for a very picky client that wants a way of interacting with filters that I can't seem to find a way of doing with the features I have seen in kibana…

---

## [Kibana 7.6.2 URL drill down dashboard](https://discuss.elastic.co/t/kibana-7-6-2-url-drill-down-dashboard/294705)

<div class="topic-metadata">

**Author:** [@gaetano](https://discuss.elastic.co/u/gaetano)\
**Replies:** 2\
**Last updated:** [January 18, 2022, 9:47pm UTC](https://discuss.elastic.co/t/kibana-7-6-2-url-drill-down-dashboard/294705 "2022-01-18T21:47:05Z")

</div>

In Kibana 7.6.2 Is it possible to create interactive dashboards where you can drill down to a specific url from a visualization that belongs to the dashboard?

---

## [Switching from index names to alias - performance impact?](https://discuss.elastic.co/t/switching-from-index-names-to-alias-performance-impact/294633)

<div class="topic-metadata">

**Author:** [@sale](https://discuss.elastic.co/u/sale)\
**Replies:** 4\
**Last updated:** [January 18, 2022, 8:50pm UTC](https://discuss.elastic.co/t/switching-from-index-names-to-alias-performance-impact/294633 "2022-01-18T20:50:53Z")

</div>

We use Elasticsearch for time series data with indices created every day. We perform all operations (ingest, search etc) using the REST APIs. We keep 60-days worth of data available to query. Currently, when we do searc…

---

## [Logstash hanged, cant be even restarted, Elastic output plugin might be the rascal?](https://discuss.elastic.co/t/logstash-hanged-cant-be-even-restarted-elastic-output-plugin-might-be-the-rascal/294732)

<div class="topic-metadata">

**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\
**Replies:** 1\
**Last updated:** [January 18, 2022, 7:26pm UTC](https://discuss.elastic.co/t/logstash-hanged-cant-be-even-restarted-elastic-output-plugin-might-be-the-rascal/294732 "2022-01-18T19:26:22Z")

</div>

Hi, I've a configuration that reads from a file and gets its content to a data stream in Elastic. My setup is like that: I have a conf file under /etc/logstash/conf.d/ that listens on a port to get the logs and writes…

---

## [Exclude master node from query user operations - how?](https://discuss.elastic.co/t/exclude-master-node-from-query-user-operations-how/294636)

<div class="topic-metadata">

**Author:** [@sale](https://discuss.elastic.co/u/sale)\
**Replies:** 6\
**Last updated:** [January 18, 2022, 6:25pm UTC](https://discuss.elastic.co/t/exclude-master-node-from-query-user-operations-how/294636 "2022-01-18T18:25:25Z")

</div>

We have a 11 node Elasticsearch cluster (3 master-eligible node + 8 data nodes). We perform all operations (ingesting, search etc) using REST calls. The master nodes are lightweight as compared to data nodes. For the sa…

---

## ["operation primary term \[1\] is too old (current \[2\])"](https://discuss.elastic.co/t/operation-primary-term-1-is-too-old-current-2/294459)

<div class="topic-metadata">

**Author:** [@noactivation](https://discuss.elastic.co/u/noactivation)\
**Replies:** 2\
**Last updated:** [January 18, 2022, 6:14pm UTC](https://discuss.elastic.co/t/operation-primary-term-1-is-too-old-current-2/294459 "2022-01-18T18:14:27Z")

</div>

I'm novice with Elasticsearch, looking at some issues today. The company subject matter expert is in a different timezone where it is well-past business hours on a Friday night. This doesn't seem critical, so I'm not goi…

---

## [Show text from index](https://discuss.elastic.co/t/show-text-from-index/294713)

<div class="topic-metadata">

**Author:** [@czxch](https://discuss.elastic.co/u/czxch)\
**Replies:** 1\
**Last updated:** [January 18, 2022, 5:41pm UTC](https://discuss.elastic.co/t/show-text-from-index/294713 "2022-01-18T17:41:34Z")

</div>

Is it possible to show a text field in a visualization like in a Markdown but with the text coming from an index as I want this text to be updated dynamically each time it changes

---

## [Select documents with nested collection without something](https://discuss.elastic.co/t/select-documents-with-nested-collection-without-something/294714)

<div class="topic-metadata">

**Author:** [@Ivan\_Popov](https://discuss.elastic.co/u/Ivan_Popov)\
**Replies:** 0\
**Last updated:** [January 18, 2022, 4:22pm UTC](https://discuss.elastic.co/t/select-documents-with-nested-collection-without-something/294714 "2022-01-18T16:22:38Z")

</div>

Here is my test data \[ { "id": 1, "last\_email\_sent": \[ { "letterId": 1, "timestamp": 555 }, { "letterId": 2, "timestamp": 666 } \] }, { "id": …

---

## [Logstash OSS 7.16.3 and Elasticsearch OSS 7.10.2](https://discuss.elastic.co/t/logstash-oss-7-16-3-and-elasticsearch-oss-7-10-2/294658)

<div class="topic-metadata">

**Author:** [@Thilak1](https://discuss.elastic.co/u/Thilak1)\
**Replies:** 2\
**Last updated:** [January 18, 2022, 4:00pm UTC](https://discuss.elastic.co/t/logstash-oss-7-16-3-and-elasticsearch-oss-7-10-2/294658 "2022-01-18T16:00:34Z")

</div>

Hi Team , I am getting the below error when using Elasticsearch output plugin in logstash OSS 7.16.3 \[2021-04-16T05:31:15,846\]\[ERROR\]\[logstash.javapipeline \] Pipeline error {:pipeline\_id=\>"main", :exception=\>#\<LogSt…

---

## [How to restart collection after high disk watermark](https://discuss.elastic.co/t/how-to-restart-collection-after-high-disk-watermark/294605)

<div class="topic-metadata">

**Author:** [@linuxlion](https://discuss.elastic.co/u/linuxlion)\
**Replies:** 2\
**Last updated:** [January 17, 2022, 4:36pm UTC](https://discuss.elastic.co/t/how-to-restart-collection-after-high-disk-watermark/294605 "2022-01-17T16:36:50Z")

</div>

Elasticsearch stop collection after high disk watermark. After cleanup the disk, I want to restart collection. Some years ago on version 6.8.23-1 I use: curl -X PUT "http://127.0.0.1:9200/settings?pretty" -H 'Content-…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=727)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=729)
