# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=747 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 748 --- ## [How to make a plugin for elasticsearch 5.6.16?](https://discuss.elastic.co/t/how-to-make-a-plugin-for-elasticsearch-5-6-16/292561)
**Author:** [@dishant](https://discuss.elastic.co/u/dishant)\ **Replies:** 2\ **Last updated:** [December 22, 2021, 4:44am UTC](https://discuss.elastic.co/t/how-to-make-a-plugin-for-elasticsearch-5-6-16/292561 "2021-12-22T04:44:15Z")
I tried a lot finding about it on the internet but not getting anything that works. I have been able to build a plugin for Elasticsearch 7.11.1 and used gradle 6.8.2 for that. But not able to make the same for Elasticsea… --- ## [Displaying the application log data in Kibana - Log file content field is missing in Elasticsearch](https://discuss.elastic.co/t/displaying-the-application-log-data-in-kibana-log-file-content-field-is-missing-in-elasticsearch/292448)
**Author:** [@online](https://discuss.elastic.co/u/online)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 2:58am UTC](https://discuss.elastic.co/t/displaying-the-application-log-data-in-kibana-log-file-content-field-is-missing-in-elasticsearch/292448 "2021-12-22T02:58:50Z")
Hello Friends, I am trying to setup an Elasticsearch index to display log contents from an application using Kibana. I setup the Filebeat on my application server and it created an index with 25 fields in Elasticsearch.… --- ## [Filter a field](https://discuss.elastic.co/t/filter-a-field/292549)
**Author:** [@scar](https://discuss.elastic.co/u/scar)\ **Replies:** 1\ **Last updated:** [December 21, 2021, 11:59pm UTC](https://discuss.elastic.co/t/filter-a-field/292549 "2021-12-21T23:59:17Z")
I want to filter a field, for example filter an array field by only returning the values I want. i try it using the source filter but don't do what i expected --- ## [ElasticSearch: search\_after with refresh](https://discuss.elastic.co/t/elasticsearch-search-after-with-refresh/292608)
**Author:** [@sag-tobias-frey](https://discuss.elastic.co/u/sag-tobias-frey)\ **Replies:** 1\ **Last updated:** [December 21, 2021, 9:18pm UTC](https://discuss.elastic.co/t/elasticsearch-search-after-with-refresh/292608 "2021-12-21T21:18:17Z")
Hello, I have searched for quite some time but did not find an answer yet. I'm currently looking into doing some pagination over my data. I have stumbled across the search\_after functionality. The queries work quite nic… --- ## [Multi-level graphs with Kibana](https://discuss.elastic.co/t/multi-level-graphs-with-kibana/292599)
**Author:** [@muneebishfaq](https://discuss.elastic.co/u/muneebishfaq)\ **Replies:** 1\ **Last updated:** [December 21, 2021, 9:14pm UTC](https://discuss.elastic.co/t/multi-level-graphs-with-kibana/292599 "2021-12-21T21:14:39Z")
Hello, I was just wondering if Kibana has the ability to create graphs with multiple levels? I want to visualize the data using graphs in a way where I would have as nodes (vertices) the different branches of a company. … --- ## [Unable to migrate from 7.6.1](https://discuss.elastic.co/t/unable-to-migrate-from-7-6-1/292605)
**Author:** [@rhawleyswiss](https://discuss.elastic.co/u/rhawleyswiss)\ **Replies:** 1\ **Last updated:** [December 21, 2021, 9:13pm UTC](https://discuss.elastic.co/t/unable-to-migrate-from-7-6-1/292605 "2021-12-21T21:13:31Z")
How can I find a dashboard by uuid? is there a way? I'm trying to upgrade our stack but getting: \< /\> Trying to open the dashboard via URL displays an empty frame with no controls, all just blank --- ## [Elasticsearch get all unique Ids](https://discuss.elastic.co/t/elasticsearch-get-all-unique-ids/292589)
**Author:** [@iamtheschmitzer](https://discuss.elastic.co/u/iamtheschmitzer)\ **Replies:** 5\ **Last updated:** [December 21, 2021, 9:08pm UTC](https://discuss.elastic.co/t/elasticsearch-get-all-unique-ids/292589 "2021-12-21T21:08:12Z")
Thanks to all who read this for your help. Background: I have a job that when executing inserts a document. The job can fail and run again, inserting a second document. Both have the same linkId- so I know there is o… --- ## [Wildcard query returns 0 result](https://discuss.elastic.co/t/wildcard-query-returns-0-result/290549)
**Author:** [@Wonder\_Garance](https://discuss.elastic.co/u/Wonder_Garance)\ **Replies:** 4\ **Last updated:** [December 21, 2021, 8:07pm UTC](https://discuss.elastic.co/t/wildcard-query-returns-0-result/290549 "2021-12-21T20:07:55Z")
I have a problem with the char '?' in the wildcard query, the query below returns 0 result { "query": { "span\_near": { "clauses": \[ { "span\_multi": { "match": { "w… --- ## [Security Fundamentals: SIEM, Lab 3, Failed to Activate Rule](https://discuss.elastic.co/t/security-fundamentals-siem-lab-3-failed-to-activate-rule/292609)
**Author:** [@csontag](https://discuss.elastic.co/u/csontag)\ **Replies:** 0\ **Last updated:** [December 21, 2021, 7:59pm UTC](https://discuss.elastic.co/t/security-fundamentals-siem-lab-3-failed-to-activate-rule/292609 "2021-12-21T19:59:47Z")
I've made it to the final step of Lab 3 of the "Elastic Security Fundamentals: SIEM". I have been able to successfully complete all of the prior steps up to this point (including installing and configuring the 3 differen… --- ## [Logstash Ruby plugin code block not raising Exception](https://discuss.elastic.co/t/logstash-ruby-plugin-code-block-not-raising-exception/291376)
**Author:** [@Colin\_K](https://discuss.elastic.co/u/Colin_K)\ **Replies:** 4\ **Last updated:** [December 21, 2021, 6:57pm UTC](https://discuss.elastic.co/t/logstash-ruby-plugin-code-block-not-raising-exception/291376 "2021-12-21T18:57:35Z")
I have a ruby block. The "happy" path works where I see the expected map output. When I provide an invalid scheme for an Array with a log line and an element that does not contain an object with field, I do not throw the… --- ## [Sorting on ES does not work on # number field](https://discuss.elastic.co/t/sorting-on-es-does-not-work-on-number-field/292591)
**Author:** [@mclovin](https://discuss.elastic.co/u/mclovin)\ **Replies:** 0\ **Last updated:** [December 21, 2021, 6:14pm UTC](https://discuss.elastic.co/t/sorting-on-es-does-not-work-on-number-field/292591 "2021-12-21T18:14:54Z")
Hi all, I read the multi sort feature document, I have no sorting on either of my two columns. ie. Time and VST. When I try sorting on the vst column it does not do anything. --- ## [Logstash stopped processing because of an error: (SystemExit) exit org.jruby.exceptions.SystemExit: (SystemExit) exit](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit-org-jruby-exceptions-systemexit-systemexit-exit/292432)
**Author:** [@tobias.greis](https://discuss.elastic.co/u/tobias.greis)\ **Replies:** 4\ **Last updated:** [December 21, 2021, 5:20pm UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit-org-jruby-exceptions-systemexit-systemexit-exit/292432 "2021-12-21T17:20:08Z")
Hi, I have a problem with my Logstash Component. When starting I get the following failure and can't find helpful information online. I use a SLES 15 with Logstash 7.16.1 and OpenJDK11. \[2021-12-20T07:56:23,219\]\[INFO \]… --- ## [Does cluster.routing.allocation.cluster\_concurrent\_rebalance limit the number of reallocation due to a high watermark?](https://discuss.elastic.co/t/does-cluster-routing-allocation-cluster-concurrent-rebalance-limit-the-number-of-reallocation-due-to-a-high-watermark/292555)
**Author:** [@alsyia](https://discuss.elastic.co/u/alsyia)\ **Replies:** 1\ **Last updated:** [December 21, 2021, 5:15pm UTC](https://discuss.elastic.co/t/does-cluster-routing-allocation-cluster-concurrent-rebalance-limit-the-number-of-reallocation-due-to-a-high-watermark/292555 "2021-12-21T17:15:22Z")
Hello, We had an event this morning were a node reached its high watermark. Elasticsearch decided to move 21 of its shards. We didn't modify cluster.routing.allocation.cluster\_concurrent\_rebalance, so it should limit t… --- ## [Logstash update doc fields if exits](https://discuss.elastic.co/t/logstash-update-doc-fields-if-exits/292206)
**Author:** [@patilanna](https://discuss.elastic.co/u/patilanna)\ **Replies:** 3\ **Last updated:** [December 21, 2021, 5:13pm UTC](https://discuss.elastic.co/t/logstash-update-doc-fields-if-exits/292206 "2021-12-21T17:13:26Z")
Blockquote logstash to update doc fields if exits or insert new to ELK stack, sorry if any thing not as per forum I am sending kafka stream of events logs, there was two types of logs, open-event log and close-event l… --- ## [Logstash to logstash not indexing logs when is enabled](https://discuss.elastic.co/t/logstash-to-logstash-not-indexing-logs-when-is-enabled/292546)
**Author:** [@jhaos](https://discuss.elastic.co/u/jhaos)\ **Replies:** 1\ **Last updated:** [December 21, 2021, 5:12pm UTC](https://discuss.elastic.co/t/logstash-to-logstash-not-indexing-logs-when-is-enabled/292546 "2021-12-21T17:12:27Z")
Hi, we are facing an issue using Logstash to Logstash configuration Logstash-to-Logstash Communication | Logstash Reference \[7.16\] | Elastic. Our architecture is the following using two different inputs in filebeat: Fil… --- ## [Significant text aggregation on multiple fields](https://discuss.elastic.co/t/significant-text-aggregation-on-multiple-fields/292585)
**Author:** [@Manisekhar\_techo](https://discuss.elastic.co/u/Manisekhar_techo)\ **Replies:** 0\ **Last updated:** [December 21, 2021, 5:02pm UTC](https://discuss.elastic.co/t/significant-text-aggregation-on-multiple-fields/292585 "2021-12-21T17:02:19Z")
Hi I'm using the multi\_match query for search with phrase keyword, in the aggregations, I'm using significant\_text aggregation, But I can only specify one field is there any way to perform that aggregation on multiple… --- ## [Roadmap / release schedule (8.1.0 when?)](https://discuss.elastic.co/t/roadmap-release-schedule-8-1-0-when/292557)
**Author:** [@Joel\_Hansell](https://discuss.elastic.co/u/Joel_Hansell)\ **Replies:** 2\ **Last updated:** [December 21, 2021, 3:32pm UTC](https://discuss.elastic.co/t/roadmap-release-schedule-8-1-0-when/292557 "2021-12-21T15:32:11Z")
Hi, I tried searching for this on the elastic.co website, here on the Discuss server, and also using Google search, but found nothing current. Is there a planned release date for ELK 8, and specifically 8.1? I am inte… --- ## [Timestamp entries in cet without time zone are displayed in Kibana as cet +1](https://discuss.elastic.co/t/timestamp-entries-in-cet-without-time-zone-are-displayed-in-kibana-as-cet-1/292571)
**Author:** [@jstricker](https://discuss.elastic.co/u/jstricker)\ **Replies:** 1\ **Last updated:** [December 21, 2021, 2:54pm UTC](https://discuss.elastic.co/t/timestamp-entries-in-cet-without-time-zone-are-displayed-in-kibana-as-cet-1/292571 "2021-12-21T14:54:24Z")
I have several log files with different timestamp formats. A log file like this: In the other file like this: The timestampe entrys with and with out timezone specification. With the following component template … --- ## [Field exist query to check nested type field exists for a doc](https://discuss.elastic.co/t/field-exist-query-to-check-nested-type-field-exists-for-a-doc/292152)
**Author:** [@sudheesh](https://discuss.elastic.co/u/sudheesh)\ **Replies:** 0\ **Last updated:** [December 16, 2021, 12:40pm UTC](https://discuss.elastic.co/t/field-exist-query-to-check-nested-type-field-exists-for-a-doc/292152 "2021-12-16T12:40:23Z")
This is the template for my index PUT employee\_index { "mappings":{ "properties": { "role": { "type": "text" }, "Employee": { "type": "nested", "properties": { … --- ## [How to resolve "Failed to poll for work. Work has timed out" error](https://discuss.elastic.co/t/how-to-resolve-failed-to-poll-for-work-work-has-timed-out-error/291538)
**Author:** [@mertkaant](https://discuss.elastic.co/u/mertkaant)\ **Replies:** 3\ **Last updated:** [December 21, 2021, 12:02pm UTC](https://discuss.elastic.co/t/how-to-resolve-failed-to-poll-for-work-work-has-timed-out-error/291538 "2021-12-21T12:02:27Z")
Hello, dear elastic community, We recently upgraded our ELK stack to 7.15.2 from 7.7.0. All my nodes are on the same version (7.15.2) After the upgrade, our Kibana's status goes yellow repeatedly. When it goes yellow … --- ## [No signature of method: java.util.ArrayList.get() is applicable for argument types: (org.codehaus.groovy.runtime.GStringImpl)](https://discuss.elastic.co/t/no-signature-of-method-java-util-arraylist-get-is-applicable-for-argument-types-org-codehaus-groovy-runtime-gstringimpl/292554)
**Author:** [@dishant](https://discuss.elastic.co/u/dishant)\ **Replies:** 0\ **Last updated:** [December 21, 2021, 11:51am UTC](https://discuss.elastic.co/t/no-signature-of-method-java-util-arraylist-get-is-applicable-for-argument-types-org-codehaus-groovy-runtime-gstringimpl/292554 "2021-12-21T11:51:53Z")
I am trying to make an Elasticsearch plugin for Elasticsearch version 5.6.16 and using the gradle version 4.7. I am using oracle jdk9. Whenever, I'm trying to create the project build, it is giving me an error. I have su… --- ## [Problem with Refresh button for visualizations in Kibana 7.16.1](https://discuss.elastic.co/t/problem-with-refresh-button-for-visualizations-in-kibana-7-16-1/292469)
**Author:** [@Fer\_dominguez](https://discuss.elastic.co/u/Fer_dominguez)\ **Replies:** 3\ **Last updated:** [December 21, 2021, 10:47am UTC](https://discuss.elastic.co/t/problem-with-refresh-button-for-visualizations-in-kibana-7-16-1/292469 "2021-12-21T10:47:16Z")
Hi, In Kibana v7.16.1 inside a vertical bar visualization (didn't test on other types), when I click the Refresh button, the graph is not updated, and I know the data is being updated. I can see that the data is actuall… --- ## [Save a field into another index](https://discuss.elastic.co/t/save-a-field-into-another-index/292455)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 2\ **Last updated:** [December 21, 2021, 10:18am UTC](https://discuss.elastic.co/t/save-a-field-into-another-index/292455 "2021-12-21T10:18:55Z")
Hi folks, I am using the mapper size plugin to save the size of the document to be able to create dashboards, so a developer can see how much log data he produces within his containers in kubernetes/openshift. I am usin… --- ## [Logstash Rspec Test Library, how does it fundamentally work when creating pipelines?](https://discuss.elastic.co/t/logstash-rspec-test-library-how-does-it-fundamentally-work-when-creating-pipelines/292537)
**Author:** [@UXabre](https://discuss.elastic.co/u/UXabre)\ **Replies:** 0\ **Last updated:** [December 21, 2021, 8:54am UTC](https://discuss.elastic.co/t/logstash-rspec-test-library-how-does-it-fundamentally-work-when-creating-pipelines/292537 "2021-12-21T08:54:33Z")
So, I've been using rspec for a while now while testing my "simple" pipeline configs. However, as of recent, I'd like to use "complex" filters like "aggregate" and "memcached" but it is hard, if not impossible to find t… --- ## [Addressing log4j vulnerability for 1.x and 2.x elasticsearch](https://discuss.elastic.co/t/addressing-log4j-vulnerability-for-1-x-and-2-x-elasticsearch/292531)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 1\ **Last updated:** [December 21, 2021, 8:47am UTC](https://discuss.elastic.co/t/addressing-log4j-vulnerability-for-1-x-and-2-x-elasticsearch/292531 "2021-12-21T08:47:07Z")
I am sure there are still people out there who are using this. Anyone with 1.7 and/or 2.3 that have to deal with this? --- ## [Unable to expand persistent volumes used by Elasticsearch on Oracle Cloud](https://discuss.elastic.co/t/unable-to-expand-persistent-volumes-used-by-elasticsearch-on-oracle-cloud/292114)
**Author:** [@Pranay\_Reddy](https://discuss.elastic.co/u/Pranay_Reddy)\ **Replies:** 2\ **Last updated:** [December 21, 2021, 8:03am UTC](https://discuss.elastic.co/t/unable-to-expand-persistent-volumes-used-by-elasticsearch-on-oracle-cloud/292114 "2021-12-21T08:03:17Z")
I am using block volumes on oracle cloud infrastructure for persistent storage of Elasticsearch(ECK). I wanted to increase the amount of storage of persistent volume. So, I increased the storage value in volume claim te… --- ## [Dec 21st, 2021: \[en\] Top 3 recommendations to keep your Elasticsearch cluster healthy](https://discuss.elastic.co/t/dec-21st-2021-en-top-3-recommendations-to-keep-your-elasticsearch-cluster-healthy/289326)
**Author:** [@Imma](https://discuss.elastic.co/u/Imma)\ **Replies:** 0\ **Last updated:** [December 21, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-21st-2021-en-top-3-recommendations-to-keep-your-elasticsearch-cluster-healthy/289326 "2021-12-21T08:00:53Z")
This article is also available in Spanish. Working as an Elastic support engineer, we see a few tools that are very useful to have already in place when we need to help our customers troubleshoot their Elasticsearch c… --- ## [Dec 21st, 2021: \[es\] Tres recomendaciones para tener un clúster Elasticsearch saludable](https://discuss.elastic.co/t/dec-21st-2021-es-tres-recomendaciones-para-tener-un-cluster-elasticsearch-saludable/289328)
**Author:** [@Imma](https://discuss.elastic.co/u/Imma)\ **Replies:** 0\ **Last updated:** [December 21, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-21st-2021-es-tres-recomendaciones-para-tener-un-cluster-elasticsearch-saludable/289328 "2021-12-21T08:00:53Z")
This article is also available in English: En nuestro día a día de soporte en Elastic vemos algunas herramientas que son muy útiles cuando necesitamos ayudar a nuestros clientes a solucionar problemas en sus clústeres… --- ## [Receiving "timed out waiting for all nodes to process published state"](https://discuss.elastic.co/t/receiving-timed-out-waiting-for-all-nodes-to-process-published-state/291670)
**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\ **Replies:** 13\ **Last updated:** [December 21, 2021, 7:44am UTC](https://discuss.elastic.co/t/receiving-timed-out-waiting-for-all-nodes-to-process-published-state/291670 "2021-12-21T07:44:44Z")
I am using Elasticsearch v6.6.1. There are total 16 nodes (10 data, 3 master, 3 client). I see a frequent message in elected master logs: {"type":"log","host":"Elasticsearch-master-55ff74b94d-ckhfw","level":"WARN", "ti… --- ## [Unique Count and Currency Format in Elasticsearch](https://discuss.elastic.co/t/unique-count-and-currency-format-in-elasticsearch/292444)
**Author:** [@arungoel142](https://discuss.elastic.co/u/arungoel142)\ **Replies:** 3\ **Last updated:** [December 21, 2021, 7:14am UTC](https://discuss.elastic.co/t/unique-count-and-currency-format-in-elasticsearch/292444 "2021-12-21T07:14:36Z")
I am facing unique count accuracy issue in Elasticsearch and currency format indian change. Please help. [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=746) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=748)