# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=738 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 739 --- ## [Why my logstash aggregate sometimes works, sometimes not?](https://discuss.elastic.co/t/why-my-logstash-aggregate-sometimes-works-sometimes-not/293342)
**Author:** [@maoxuguang](https://discuss.elastic.co/u/maoxuguang)\ **Replies:** 7\ **Last updated:** [January 7, 2022, 4:46pm UTC](https://discuss.elastic.co/t/why-my-logstash-aggregate-sometimes-works-sometimes-not/293342 "2022-01-07T16:46:26Z")
for example, sometimes I can get the tag \[ "fordebug\_%{job\_name}" \], it indicates that the aggregate executed successfully, sometimes I can not get this tag. why? I struggled for days but no finding. I am exhausted. cou… --- ## [Updating podTemplate labels doesn't update pods](https://discuss.elastic.co/t/updating-podtemplate-labels-doesnt-update-pods/293769)
**Author:** [@whyvez](https://discuss.elastic.co/u/whyvez)\ **Replies:** 0\ **Last updated:** [January 7, 2022, 4:39pm UTC](https://discuss.elastic.co/t/updating-podtemplate-labels-doesnt-update-pods/293769 "2022-01-07T16:39:11Z")
I've updated the Elasticsearch podTemplate to add labels but the labels are not getting propagated to the pods. How can I force the pods to update? The added labels are not on the Statefulset either but are on the Elasti… --- ## [Filtering nested objects](https://discuss.elastic.co/t/filtering-nested-objects/291911)
**Author:** [@dev\_test](https://discuss.elastic.co/u/dev_test)\ **Replies:** 11\ **Last updated:** [January 7, 2022, 3:45pm UTC](https://discuss.elastic.co/t/filtering-nested-objects/291911 "2022-01-07T15:45:10Z")
Hi, I'm trying to build a system that will have a user's phone book in nested field and this will have user\_id and user\_gender. I am trying to filter over gender in search result but i'm only getting the whole nested obj… --- ## [How to combine results from 2 elasticsearch indexes with different layouts](https://discuss.elastic.co/t/how-to-combine-results-from-2-elasticsearch-indexes-with-different-layouts/293659)
**Author:** [@jan499](https://discuss.elastic.co/u/jan499)\ **Replies:** 2\ **Last updated:** [January 7, 2022, 3:22pm UTC](https://discuss.elastic.co/t/how-to-combine-results-from-2-elasticsearch-indexes-with-different-layouts/293659 "2022-01-07T15:22:29Z")
We have an Elasticsearch with 2 different indexes. In one index there is a field called physical\_location which contains a lat en lon subfield. in the other index there is a field called program\_run.geolocation with the … --- ## [Filebeat HAProxy module exported fields](https://discuss.elastic.co/t/filebeat-haproxy-module-exported-fields/293749)
**Author:** [@dicko](https://discuss.elastic.co/u/dicko)\ **Replies:** 0\ **Last updated:** [January 7, 2022, 2:26pm UTC](https://discuss.elastic.co/t/filebeat-haproxy-module-exported-fields/293749 "2022-01-07T14:26:00Z")
I've set up the HAProxy module as per the manuals on the Elastic site and on this site. Can I view the HAProxy exported fields under Discover? How would I go about that? There's also mention of sample and predefined d… --- ## [Is there a way to show nested fields when showing highlight results?](https://discuss.elastic.co/t/is-there-a-way-to-show-nested-fields-when-showing-highlight-results/293740)
**Author:** [@munkyu](https://discuss.elastic.co/u/munkyu)\ **Replies:** 0\ **Last updated:** [January 7, 2022, 12:51pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-show-nested-fields-when-showing-highlight-results/293740 "2022-01-07T12:51:46Z")
nested fields like below. "comments" : \[ { "content" : "apple computer", "votes\_count" : 1 }, { "content" : "apple computer is good", … --- ## [7.16.2 API problem](https://discuss.elastic.co/t/7-16-2-api-problem/293722)
**Author:** [@mengben](https://discuss.elastic.co/u/mengben)\ **Replies:** 1\ **Last updated:** [January 7, 2022, 11:12am UTC](https://discuss.elastic.co/t/7-16-2-api-problem/293722 "2022-01-07T11:12:10Z")
first：how to use SQL query second:How does the new API return some fields --- ## [Error: cannot touch an object that is not persisted at](https://discuss.elastic.co/t/error-cannot-touch-an-object-that-is-not-persisted-at/293293)
**Author:** [@cdwmhcc](https://discuss.elastic.co/u/cdwmhcc)\ **Replies:** 9\ **Last updated:** [January 7, 2022, 10:38am UTC](https://discuss.elastic.co/t/error-cannot-touch-an-object-that-is-not-persisted-at/293293 "2022-01-07T10:38:46Z")
\[2022-01-02T14:26:21.029+00:00\]\[95838\]\[2000\]\[app-server\]\[INFO\]: \[db\_lock\] \[installation\] Status: \[Starting\] Creating a default Workplace Search organization \[2022-01-02T14:26:22.023+00:00\]\[95838\]\[2000\]\[app-server\]\[IN… --- ## [Kibana server.publicBaseUrl](https://discuss.elastic.co/t/kibana-server-publicbaseurl/293661)
**Author:** [@maltewhiite](https://discuss.elastic.co/u/maltewhiite)\ **Replies:** 3\ **Last updated:** [January 7, 2022, 8:38am UTC](https://discuss.elastic.co/t/kibana-server-publicbaseurl/293661 "2022-01-07T08:38:27Z")
I am seeing this error on my Kibana I have several questions Where do I configure that setting? in kibana.yml ? in Elasticsearch.yml ? What should I set the setting to? Kibana.yml # File managed by Puppet. ---… --- ## [Elasticsearch Script Query - Returning multiple values on aggregation](https://discuss.elastic.co/t/elasticsearch-script-query-returning-multiple-values-on-aggregation/293716)
**Author:** [@hyun](https://discuss.elastic.co/u/hyun)\ **Replies:** 0\ **Last updated:** [January 7, 2022, 8:26am UTC](https://discuss.elastic.co/t/elasticsearch-script-query-returning-multiple-values-on-aggregation/293716 "2022-01-07T08:26:07Z")
Aggregation Result "aggregations": { "649": { "doc\_count\_error\_upper\_bound": 0, "sum\_other\_doc\_count": 0, "buckets": \[ { "key": "ALLOGENE THERAPEUTICS", … --- ## [Logstash Date Format Failure](https://discuss.elastic.co/t/logstash-date-format-failure/293702)
**Author:** [@insu0929](https://discuss.elastic.co/u/insu0929)\ **Replies:** 2\ **Last updated:** [January 7, 2022, 4:17am UTC](https://discuss.elastic.co/t/logstash-date-format-failure/293702 "2022-01-07T04:17:53Z")
Hi I'm using filebeat to send some session count data to Logstash. The file type is csv and the data looks like this: ... "01/02/2022 00:00:27.837", "0.99961" "01/02/2022 00:00:28.853", "0" "01/02/2022 00:00:29.240", "1… --- ## [Failed to create elasticsearch client, connection refused while running fscrawler pod](https://discuss.elastic.co/t/failed-to-create-elasticsearch-client-connection-refused-while-running-fscrawler-pod/293663)
**Author:** [@Adityadgr8](https://discuss.elastic.co/u/Adityadgr8)\ **Replies:** 0\ **Last updated:** [January 6, 2022, 3:14pm UTC](https://discuss.elastic.co/t/failed-to-create-elasticsearch-client-connection-refused-while-running-fscrawler-pod/293663 "2022-01-06T15:14:08Z")
Hello, our fscrawler is unable to make a connection with Elasticsearch in the linux server. Previously with the same configuration, it was working fine but don't know why suddenly we starts to face this issue -- we ar… --- ## [Calculating percent](https://discuss.elastic.co/t/calculating-percent/293688)
**Author:** [@nabil86](https://discuss.elastic.co/u/nabil86)\ **Replies:** 1\ **Last updated:** [January 7, 2022, 2:20am UTC](https://discuss.elastic.co/t/calculating-percent/293688 "2022-01-07T02:20:57Z")
Hello, I want to calculte the percent of a given type on my index: Ok\_Count/total , I wrote this query But it doesn't work as i excepted , could you help me to correct it { "aggs": { "total":{ "filter":… --- ## [How to split sometimes?](https://discuss.elastic.co/t/how-to-split-sometimes/293484)
**Author:** [@4art4](https://discuss.elastic.co/u/4art4)\ **Replies:** 7\ **Last updated:** [January 6, 2022, 6:00pm UTC](https://discuss.elastic.co/t/how-to-split-sometimes/293484 "2022-01-06T18:00:47Z")
So I have to deal with ingesting logs that a team member is generating. I'm getting json logs, and I think I am very close to getting the data. (So close.) The error I am getting now looks like this: \[2022-01-04T18:0… --- ## [Choosing hot/warm or keep only hot nodes](https://discuss.elastic.co/t/choosing-hot-warm-or-keep-only-hot-nodes/293689)
**Author:** [@nabil86](https://discuss.elastic.co/u/nabil86)\ **Replies:** 0\ **Last updated:** [January 6, 2022, 8:13pm UTC](https://discuss.elastic.co/t/choosing-hot-warm-or-keep-only-hot-nodes/293689 "2022-01-06T20:13:51Z")
Hello, Currently, i want to implement a cluster which can index 650GB of application logs /day with 2 weeks of retention data. I want to decide about cluster typology: Is Hot/wam architecture ⇒ Hot keep data for 2 da… --- ## [One logstash pipeline listening multiple formats (same input)](https://discuss.elastic.co/t/one-logstash-pipeline-listening-multiple-formats-same-input/293381)
**Author:** [@vee](https://discuss.elastic.co/u/vee)\ **Replies:** 16\ **Last updated:** [January 6, 2022, 7:33pm UTC](https://discuss.elastic.co/t/one-logstash-pipeline-listening-multiple-formats-same-input/293381 "2022-01-06T19:33:16Z")
Hi - Working on a new requirement to parse through one file containing two different formatted messages and send to different indices on elastic. Filebeat (same file with two different formatted messages) -\> Logstash (… --- ## [Failed to parse field \[\[observer.hostname\]\]](https://discuss.elastic.co/t/failed-to-parse-field-observer-hostname/293676)
**Author:** [@eO2H\_LG](https://discuss.elastic.co/u/eO2H_LG)\ **Replies:** 3\ **Last updated:** [January 6, 2022, 6:48pm UTC](https://discuss.elastic.co/t/failed-to-parse-field-observer-hostname/293676 "2022-01-06T18:48:07Z")
Hello All, Hoping somebody can assist me with the following error. It seems some of my DHCP data is failing to ingest due to a parsing issue with the observer.hostname field. Below is the error output from logstash-pla… --- ## [ECK Cluster in yellow state but cluster is green](https://discuss.elastic.co/t/eck-cluster-in-yellow-state-but-cluster-is-green/293185)
**Author:** [@julien.couturier](https://discuss.elastic.co/u/julien.couturier)\ **Replies:** 2\ **Last updated:** [January 6, 2022, 5:00pm UTC](https://discuss.elastic.co/t/eck-cluster-in-yellow-state-but-cluster-is-green/293185 "2022-01-06T17:00:13Z")
Hi, My Elastic stack is working well but I discovered that the ECK status was "Yellow" when I tried to upgrade to 7.16.2. kubectl get es NAME HEALTH NODES VERSION PHASE AGE tbb-es yellow 3 7.11.… --- ## [7.16.2 Lens no showing value in dark mode](https://discuss.elastic.co/t/7-16-2-lens-no-showing-value-in-dark-mode/293665)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [January 6, 2022, 4:44pm UTC](https://discuss.elastic.co/t/7-16-2-lens-no-showing-value-in-dark-mode/293665 "2022-01-06T16:44:26Z")
In lens (pie) value is not readable as it print in dark color in dark mode. And I can't find this setting anywhere. is this bug or some kind of setting that I have to do? here is example. --- ## [Subfield not showing on the left side field after 7.16 upgrade](https://discuss.elastic.co/t/subfield-not-showing-on-the-left-side-field-after-7-16-upgrade/292626)
**Author:** [@isaackuang](https://discuss.elastic.co/u/isaackuang)\ **Replies:** 4\ **Last updated:** [January 6, 2022, 4:24pm UTC](https://discuss.elastic.co/t/subfield-not-showing-on-the-left-side-field-after-7-16-upgrade/292626 "2022-01-06T16:24:26Z")
When Upgrading to 7.16.1 from 7.15.2 The subfields from kubernetes object cannot show and analyze. But it can still searchable. Anyone can tell me how can I do to enable subfield parsing on left field for new ve… --- ## [TCP Input "Too many files open" IOException](https://discuss.elastic.co/t/tcp-input-too-many-files-open-ioexception/293499)
**Author:** [@ddth\_2022](https://discuss.elastic.co/u/ddth_2022)\ **Replies:** 5\ **Last updated:** [January 6, 2022, 4:14pm UTC](https://discuss.elastic.co/t/tcp-input-too-many-files-open-ioexception/293499 "2022-01-06T16:14:58Z")
We're running Logstash 7.16.2. We're using a TCP input that opens up too many sockets without closing them and almost every 24 hours Logstash hangs up. \[2022-01-05T05:10:59,474\]\[WARN \]\[io.netty.channel.DefaultChannelPip… --- ## [Curl query from json](https://discuss.elastic.co/t/curl-query-from-json/293650)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 4\ **Last updated:** [January 6, 2022, 2:48pm UTC](https://discuss.elastic.co/t/curl-query-from-json/293650 "2022-01-06T14:48:57Z")
Hi guys, I have some query(witch works fine in kibana debugger), my goal is to make this query work from curl command line(windows). i have other queries with no issues. I think the problem is with the """ in the "r… --- ## [Kibana UI shows "No records found" message and then data showing](https://discuss.elastic.co/t/kibana-ui-shows-no-records-found-message-and-then-data-showing/293366)
**Author:** [@Kaviraj\_C](https://discuss.elastic.co/u/Kaviraj_C)\ **Replies:** 1\ **Last updated:** [January 6, 2022, 2:45pm UTC](https://discuss.elastic.co/t/kibana-ui-shows-no-records-found-message-and-then-data-showing/293366 "2022-01-06T14:45:06Z")
Hi All, While searching some text am getting initially No Results found msg and then the data showing. Can anyone help me to correct my issue. Elasticsearch version - 2.4.4. Kibana version- 4.6.7. --- ## [About the error "The quota has been exceeded error" from kibana](https://discuss.elastic.co/t/about-the-error-the-quota-has-been-exceeded-error-from-kibana/293490)
**Author:** [@lhoncorty](https://discuss.elastic.co/u/lhoncorty)\ **Replies:** 1\ **Last updated:** [January 6, 2022, 2:33pm UTC](https://discuss.elastic.co/t/about-the-error-the-quota-has-been-exceeded-error-from-kibana/293490 "2022-01-06T14:33:21Z")
original discussion is closed. I just want to say it is the browser display issue. The error disappeared after I duplicate the tab on my firefox. --- ## [Copy specific snapshot to another repository](https://discuss.elastic.co/t/copy-specific-snapshot-to-another-repository/293647)
**Author:** [@Bilanda](https://discuss.elastic.co/u/Bilanda)\ **Replies:** 2\ **Last updated:** [January 6, 2022, 2:27pm UTC](https://discuss.elastic.co/t/copy-specific-snapshot-to-another-repository/293647 "2022-01-06T14:27:37Z")
Hello, I have a specific need regarding Snapshots. Indeed I have hundreds of snapshot (we use snapshot for a daily back-up of our indices). We would like to copy a specific snapshot from our repository to another one.… --- ## [How to size Azure Kubernetes for Elastic deployment](https://discuss.elastic.co/t/how-to-size-azure-kubernetes-for-elastic-deployment/292842)
**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\ **Replies:** 1\ **Last updated:** [January 6, 2022, 2:08pm UTC](https://discuss.elastic.co/t/how-to-size-azure-kubernetes-for-elastic-deployment/292842 "2022-01-06T14:08:37Z")
We are currently running a 50 node cluster (with 40 data nodes) on VMs in Azure. I am looking into converting to running in AKS. I am having trouble figuring out how to determine the resources I need in my AKS cluster to… --- ## [How can I do a one-to-one search in the title field?](https://discuss.elastic.co/t/how-can-i-do-a-one-to-one-search-in-the-title-field/293523)
**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\ **Replies:** 9\ **Last updated:** [January 6, 2022, 1:10pm UTC](https://discuss.elastic.co/t/how-can-i-do-a-one-to-one-search-in-the-title-field/293523 "2022-01-06T13:10:58Z")
Hello friends, I have a problem, I would be very happy if you could help. I want it to return exactly the string I want in a query using Wilcard, but it doesn't work. I have a document and document's title: "Title" : "… --- ## [How to delete old indices automatically in elasticsearch](https://discuss.elastic.co/t/how-to-delete-old-indices-automatically-in-elasticsearch/293643)
**Author:** [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\ **Replies:** 2\ **Last updated:** [January 6, 2022, 1:10pm UTC](https://discuss.elastic.co/t/how-to-delete-old-indices-automatically-in-elasticsearch/293643 "2022-01-06T13:10:34Z")
Hi i need clear solution how can i delete the old indices data automatically after a period of time.thank you --- ## [Blocked threads on read index calls](https://discuss.elastic.co/t/blocked-threads-on-read-index-calls/293241)
**Author:** [@Madhu\_Yadav](https://discuss.elastic.co/u/Madhu_Yadav)\ **Replies:** 10\ **Last updated:** [January 6, 2022, 8:56am UTC](https://discuss.elastic.co/t/blocked-threads-on-read-index-calls/293241 "2022-01-06T08:56:25Z")
Hi, A portal built using Liferay is using Elasticsearch as a search engine with below config: Elasticsearch 7.16.2 Single Node, Around 250MB sized indices Windows Server 2019 64Bit 8 vcpu, 32GB RAM, SSD Disk 100GB Op… --- ## [TLS Certificate Check behind HAProxy](https://discuss.elastic.co/t/tls-certificate-check-behind-haproxy/293626)
**Author:** [@thleh](https://discuss.elastic.co/u/thleh)\ **Replies:** 0\ **Last updated:** [January 6, 2022, 8:07am UTC](https://discuss.elastic.co/t/tls-certificate-check-behind-haproxy/293626 "2022-01-06T08:07:05Z")
Hi, i'm running Elasticsearch stack 7.16 to monitor some linux servers and check tls certificates. Now i have an HAProxy with several backend servers hosting websites. I have configures ssl certificates at haproxy and … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=737) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=739)