# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=766

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 767

---

## [Filebeat.yml can not convert String into Object](https://discuss.elastic.co/t/filebeat-yml-can-not-convert-string-into-object/290622)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 2\
**Last updated:** [December 1, 2021, 4:29am UTC](https://discuss.elastic.co/t/filebeat-yml-can-not-convert-string-into-object/290622 "2021-12-01T04:29:40Z")

</div>

Hello team, I am getting below error in filebeat.yml. I have commented all other lines and just added output.Elasticsearch Can anyone please help me here. output.elasticsearch: hosts =\> \["10.115.6.288:9200"\]

---

## [Analyzers at Index time and search time are not matching](https://discuss.elastic.co/t/analyzers-at-index-time-and-search-time-are-not-matching/290614)

<div class="topic-metadata">

**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 11:48pm UTC](https://discuss.elastic.co/t/analyzers-at-index-time-and-search-time-are-not-matching/290614 "2021-11-30T23:48:15Z")

</div>

Hi, I am trying to use synsets in Elasticsearch to build a pseudo QA System. My mapping file looks something as below: { "settings": { "analysis": { "analyzer": { "synset": { "tokenizer…

---

## [Does Elasticsearch provide highlighting on "copy\_to" field in their newer versions?](https://discuss.elastic.co/t/does-elasticsearch-provide-highlighting-on-copy-to-field-in-their-newer-versions/290611)

<div class="topic-metadata">

**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 11:24pm UTC](https://discuss.elastic.co/t/does-elasticsearch-provide-highlighting-on-copy-to-field-in-their-newer-versions/290611 "2021-11-30T23:24:10Z")

</div>

I had used Elasticsearch few years ago(version 6.4.0) and they had no provision to provide highlight the "copy\_to" field. I would like to know if they have this provision now? If yes, how do I avoid the highlighting of …

---

## [Disable doc\_values and index for nested type fields](https://discuss.elastic.co/t/disable-doc-values-and-index-for-nested-type-fields/290609)

<div class="topic-metadata">

**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 10:42pm UTC](https://discuss.elastic.co/t/disable-doc-values-and-index-for-nested-type-fields/290609 "2021-11-30T22:42:40Z")

</div>

I set 'doc\_values' to 'False' on nested fields but it does not work in index creation got stuck. I wonder how to correctly disable 'doc\_values' and 'index' on 'nested' fields? Should I disable it just on the level of the…

---

## [Elasticsearch for Two Services](https://discuss.elastic.co/t/elasticsearch-for-two-services/290344)

<div class="topic-metadata">

**Author:** [@Klaus\_Salazar](https://discuss.elastic.co/u/Klaus_Salazar)\
**Replies:** 2\
**Last updated:** [November 30, 2021, 9:44pm UTC](https://discuss.elastic.co/t/elasticsearch-for-two-services/290344 "2021-11-30T21:44:09Z")

</div>

Hi, is possible that Elasticsearch can support two services on the same server, for example i have a wazuh server and this use Elasticsearch but i need install in this same sserver thehive that also use Elasticsearch, is…

---

## [Logstash + Redis](https://discuss.elastic.co/t/logstash-redis/289100)

<div class="topic-metadata">

**Author:** [@Claudio\_Ract\_Costa](https://discuss.elastic.co/u/Claudio_Ract_Costa)\
**Replies:** 8\
**Last updated:** [November 30, 2021, 8:44pm UTC](https://discuss.elastic.co/t/logstash-redis/289100 "2021-11-30T20:44:38Z")

</div>

Hi guys, I am trying to figure out how to use Logstash with Redis Does anyone know how to configure logstash to insert a specific field in message in Redis ? For example, I have a json message with some fields, like: …

---

## [Nessus XML Parsing Errors and No output](https://discuss.elastic.co/t/nessus-xml-parsing-errors-and-no-output/290599)

<div class="topic-metadata">

**Author:** [@James\_Doherty](https://discuss.elastic.co/u/James_Doherty)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 8:19pm UTC](https://discuss.elastic.co/t/nessus-xml-parsing-errors-and-no-output/290599 "2021-11-30T20:19:30Z")

</div>

I am having a really difficult time getting my Nessus files to parse correctly if at all. This is my Logstash config: input { file { path =\> "/opt/nessus/\*" mode =\> "read" start\_position =\> "beginning" …

---

## [A security-enabled local group membership was enumerated -\> wbengine.exe](https://discuss.elastic.co/t/a-security-enabled-local-group-membership-was-enumerated-wbengine-exe/290550)

<div class="topic-metadata">

**Author:** [@Metro20357](https://discuss.elastic.co/u/Metro20357)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 11:26am UTC](https://discuss.elastic.co/t/a-security-enabled-local-group-membership-was-enumerated-wbengine-exe/290550 "2021-11-30T11:26:53Z")

</div>

Hi all :slightly\_smiling\_face: I'm starting my adventure with Elstick and please be patient to Me :slight\_smile: I have such a case.I would like to know if there is anything to be afraid of :expressionless: I got the…

---

## [ES 1.7.1 - Node health chcks](https://discuss.elastic.co/t/es-1-7-1-node-health-chcks/290562)

<div class="topic-metadata">

**Author:** [@Deepak\_Soni](https://discuss.elastic.co/u/Deepak_Soni)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 8:23pm UTC](https://discuss.elastic.co/t/es-1-7-1-node-health-chcks/290562 "2021-11-30T20:23:09Z")

</div>

Hello, We have a ES cluster using very old version of Elasticsearch 1.7.1. We are hosting it using EC2. We had a data node failure caused by EBS impairment. This failure was not detected as node failure by the data node …

---

## [Multiple Data Formats in TSVB causes display raw value](https://discuss.elastic.co/t/multiple-data-formats-in-tsvb-causes-display-raw-value/290454)

<div class="topic-metadata">

**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 7:49pm UTC](https://discuss.elastic.co/t/multiple-data-formats-in-tsvb-causes-display-raw-value/290454 "2021-11-30T19:49:45Z")

</div>

Hello, I recently upgraded to elastic stack 7.15 and one of my TSVB visualizations seems to have broke. the problem seems to come from adding a second type of data format to the graph see here the working graph ( using…

---

## [Mapping conflict](https://discuss.elastic.co/t/mapping-conflict/290571)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 2\
**Last updated:** [November 30, 2021, 7:16pm UTC](https://discuss.elastic.co/t/mapping-conflict/290571 "2021-11-30T19:16:08Z")

</div>

I have mapping conflict. I know which field it has it. and I know what happen. using 7.14.1 basically one of the field which suppose to be float 0.0 become text "0.0" I scan whole index and updated about 17,000 docume…

---

## [Import and load HTML+Js in Kibana as a visualization panel](https://discuss.elastic.co/t/import-and-load-html-js-in-kibana-as-a-visualization-panel/50834)

<div class="topic-metadata">

**Author:** [@Meenal.Luktuke](https://discuss.elastic.co/u/Meenal.Luktuke)\
**Replies:** 7\
**Last updated:** [November 30, 2021, 5:03pm UTC](https://discuss.elastic.co/t/import-and-load-html-js-in-kibana-as-a-visualization-panel/50834 "2021-11-30T17:03:25Z")

</div>

Hi, I have created a JS+HTML package which interacts with Elasticsearch and displays data in the format I want. I just want to display it on my Kibana dashboard. It's okay if it does not interact with other panels, but…

---

## [Best practice for handling \_ids in get and search results](https://discuss.elastic.co/t/best-practice-for-handling-ids-in-get-and-search-results/290500)

<div class="topic-metadata">

**Author:** [@davestewart](https://discuss.elastic.co/u/davestewart)\
**Replies:** 5\
**Last updated:** [November 30, 2021, 4:19pm UTC](https://discuss.elastic.co/t/best-practice-for-handling-ids-in-get-and-search-results/290500 "2021-11-30T16:19:52Z")

</div>

Hello, Frontend engineer here, slowly improving at using Elasticsearch. Does anyone have any advice on how to best work with document \_ids, specifically with regards to sending them to the front end after a \_search or \_…

---

## [Attachment Pipeline Support for Old MS Word and Excel Format](https://discuss.elastic.co/t/attachment-pipeline-support-for-old-ms-word-and-excel-format/290141)

<div class="topic-metadata">

**Author:** [@David\_Chan](https://discuss.elastic.co/u/David_Chan)\
**Replies:** 3\
**Last updated:** [November 30, 2021, 4:14pm UTC](https://discuss.elastic.co/t/attachment-pipeline-support-for-old-ms-word-and-excel-format/290141 "2021-11-30T16:14:23Z")

</div>

Hi All! I'm uploading a Microsoft Word in .doc format, instead of .docx, to Elasticsearch using attachment pipeline, and I receive the following response. { "error": { "root\_cause": \[ { …

---

## [FScrawler does not scans the \`/tmp/es\`](https://discuss.elastic.co/t/fscrawler-does-not-scans-the-tmp-es/290417)

<div class="topic-metadata">

**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 4:01pm UTC](https://discuss.elastic.co/t/fscrawler-does-not-scans-the-tmp-es/290417 "2021-11-30T16:01:32Z")

</div>

Using Debian 10, Elasticsearch7,Java jdk 11 and FScrawler, when I run the crawler, it only index the files in /tmp/es directory at first lunch after first setup of \_settings.yaml. At first initialize, it seems good cau…

---

## [File ingest timestamp question](https://discuss.elastic.co/t/file-ingest-timestamp-question/290566)

<div class="topic-metadata">

**Author:** [@hagaluly](https://discuss.elastic.co/u/hagaluly)\
**Replies:** 2\
**Last updated:** [November 30, 2021, 3:25pm UTC](https://discuss.elastic.co/t/file-ingest-timestamp-question/290566 "2021-11-30T15:25:45Z")

</div>

by default when i ingest a single json file kibana present timestamp at the time of the ingesting process. is there a way to use a timestamp record within the json and present it in kibana as the ingesting time?

---

## [Unable to bind specific network interface to logstash](https://discuss.elastic.co/t/unable-to-bind-specific-network-interface-to-logstash/290556)

<div class="topic-metadata">

**Author:** [@hari97](https://discuss.elastic.co/u/hari97)\
**Replies:** 6\
**Last updated:** [November 30, 2021, 2:32pm UTC](https://discuss.elastic.co/t/unable-to-bind-specific-network-interface-to-logstash/290556 "2021-11-30T14:32:12Z")

</div>

I have two interfaces eth0 and eth2. Network traffic of systems reaching to eth2 interface. I have Logstash instance which was working good for network traffic of default network interface (eth0). My requirement is log…

---

## [Kiaban - Controls (Option list) on date field use timestamp](https://discuss.elastic.co/t/kiaban-controls-option-list-on-date-field-use-timestamp/290409)

<div class="topic-metadata">

**Author:** [@SalvoDM91](https://discuss.elastic.co/u/SalvoDM91)\
**Replies:** 3\
**Last updated:** [November 30, 2021, 2:31pm UTC](https://discuss.elastic.co/t/kiaban-controls-option-list-on-date-field-use-timestamp/290409 "2021-11-30T14:31:27Z")

</div>

Hi All, I'm new on Kibana and I have a question about controls. In Discovery section I can see the list of my fields and one of them is important for me: dt\_reference\_date which is in this format YYYY-MM-DD HH:ii:ss. …

---

## [Issue while running FSCrawler on new install of Windows Server 2016](https://discuss.elastic.co/t/issue-while-running-fscrawler-on-new-install-of-windows-server-2016/290524)

<div class="topic-metadata">

**Author:** [@Steveh15](https://discuss.elastic.co/u/Steveh15)\
**Replies:** 2\
**Last updated:** [November 30, 2021, 12:42pm UTC](https://discuss.elastic.co/t/issue-while-running-fscrawler-on-new-install-of-windows-server-2016/290524 "2021-11-30T12:42:36Z")

</div>

Hello, My apologies if I have missed any data but I am new to ES. I get the following error when trying to run FSCrawler: Error: Could not find or load main class Files\\Elasticsearch\\fscrawler-es7-2.7.config.log4j2.xm…

---

## [How can I use "AnalyticsPlugin" to build my own Elasticsearch Node?](https://discuss.elastic.co/t/how-can-i-use-analyticsplugin-to-build-my-own-elasticsearch-node/290548)

<div class="topic-metadata">

**Author:** [@ZheHu](https://discuss.elastic.co/u/ZheHu)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 10:29am UTC](https://discuss.elastic.co/t/how-can-i-use-analyticsplugin-to-build-my-own-elasticsearch-node/290548 "2021-11-30T10:29:49Z")

</div>

Hi, community! I'm a freshman to Elasticsearch, recently, when I tried to build embedded test environment through InternalSettingsPreparer.prepareEnvironment(), I found that AnalyticsPlugin cannot be used (I want to use…

---

## [Field available in Discover is not available in Visualizations](https://discuss.elastic.co/t/field-available-in-discover-is-not-available-in-visualizations/287987)

<div class="topic-metadata">

**Author:** [@WimM](https://discuss.elastic.co/u/WimM)\
**Replies:** 6\
**Last updated:** [November 30, 2021, 10:06am UTC](https://discuss.elastic.co/t/field-available-in-discover-is-not-available-in-visualizations/287987 "2021-11-30T10:06:56Z")

</div>

Hi We've setup ELK/Kibana for one of our applications and using the Discover "Top 5" feature we could quickly identify a specific issue: I wanted to get this exact same thing (top 5 of field "message") in a Visualiza…

---

## [How to send data via Logstash](https://discuss.elastic.co/t/how-to-send-data-via-logstash/289947)

<div class="topic-metadata">

**Author:** [@smam](https://discuss.elastic.co/u/smam)\
**Replies:** 10\
**Last updated:** [November 30, 2021, 9:30am UTC](https://discuss.elastic.co/t/how-to-send-data-via-logstash/289947 "2021-11-30T09:30:13Z")

</div>

Hello, yes. This should be very common but I cannot send data to Elasticsearch-or I cannot find it there. Either way I am haven trouble using the data. What I am doing: Filebeat sends a collection of Log-Files to Logst…

---

## [How to merge aggregation bucket in Elasticsearch?](https://discuss.elastic.co/t/how-to-merge-aggregation-bucket-in-elasticsearch/290230)

<div class="topic-metadata">

**Author:** [@hyun](https://discuss.elastic.co/u/hyun)\
**Replies:** 7\
**Last updated:** [November 30, 2021, 9:04am UTC](https://discuss.elastic.co/t/how-to-merge-aggregation-bucket-in-elasticsearch/290230 "2021-11-30T09:04:53Z")

</div>

Query GET /\_search { "size" : 0, "query" : { "ids" : { "types" : \[ \], "values" : \[ "someId1", "someId2", "someId3" ... \] } }, "aggregations" : { "how\_to\_merge" : { "terms" : { …

---

## [How add prefix to the fields using kv filter](https://discuss.elastic.co/t/how-add-prefix-to-the-fields-using-kv-filter/238150)

<div class="topic-metadata">

**Author:** [@Ramalakshmi](https://discuss.elastic.co/u/Ramalakshmi)\
**Replies:** 7\
**Last updated:** [November 30, 2021, 9:00am UTC](https://discuss.elastic.co/t/how-add-prefix-to-the-fields-using-kv-filter/238150 "2021-11-30T09:00:20Z")

</div>

Hi I am adding prefix to the fields using kv filter, It's working to the some of the fields in the json message. Example: Filed name is resource.network.imageid while adding prefix as aws.datasource using kv filter I …

---

## [Time Difference with "took" and python timer](https://discuss.elastic.co/t/time-difference-with-took-and-python-timer/290445)

<div class="topic-metadata">

**Author:** [@icgncl](https://discuss.elastic.co/u/icgncl)\
**Replies:** 5\
**Last updated:** [November 30, 2021, 8:07am UTC](https://discuss.elastic.co/t/time-difference-with-took-and-python-timer/290445 "2021-11-30T08:07:10Z")

</div>

Hello everyone, I am very new in Elasticsearch and also in forum. I have created an index, then I have created some queries. When I checked the "took" time from kibana for my queries, it is between 7 and 10ms. However, w…

---

## [No data after CSV Export - Kibana](https://discuss.elastic.co/t/no-data-after-csv-export-kibana/289910)

<div class="topic-metadata">

**Author:** [@njain213](https://discuss.elastic.co/u/njain213)\
**Replies:** 19\
**Last updated:** [November 30, 2021, 7:45am UTC](https://discuss.elastic.co/t/no-data-after-csv-export-kibana/289910 "2021-11-30T07:45:54Z")

</div>

Hello Team, In reference to No data after CSV Export - Kibana I am also facing exact same issue. Could you please help me in fixing it? Note:- I am using kibana 7.9.3.

---

## [Indices recovering after a red - yellow state leads to writes stucked?](https://discuss.elastic.co/t/indices-recovering-after-a-red-yellow-state-leads-to-writes-stucked/290522)

<div class="topic-metadata">

**Author:** [@sebastienf](https://discuss.elastic.co/u/sebastienf)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 7:40am UTC](https://discuss.elastic.co/t/indices-recovering-after-a-red-yellow-state-leads-to-writes-stucked/290522 "2021-11-30T07:40:15Z")

</div>

Hi, There is something I don't understand, and I don't know if it is something peculiar. When my cluster ES (42 nodes with 32GB, 20000 shards in a old 5.6 version = we aim to go to a 7.x at the end of Q1 2022, we must …

---

## [Issue with visualizing a field in Kibana even when elasticsearch has its mapping](https://discuss.elastic.co/t/issue-with-visualizing-a-field-in-kibana-even-when-elasticsearch-has-its-mapping/290521)

<div class="topic-metadata">

**Author:** [@sanba06c](https://discuss.elastic.co/u/sanba06c)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 7:20am UTC](https://discuss.elastic.co/t/issue-with-visualizing-a-field-in-kibana-even-when-elasticsearch-has-its-mapping/290521 "2021-11-30T07:20:01Z")

</div>

Hello, I'm using Kibana and can filter for some specific values, but failed to filter some other fields. The following screenshots illustrate the current issue: I can successfully filter the value "http.Request.uri". O…

---

## [Will Kibana Basic License Expire?](https://discuss.elastic.co/t/will-kibana-basic-license-expire/290415)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 2\
**Last updated:** [November 30, 2021, 6:57am UTC](https://discuss.elastic.co/t/will-kibana-basic-license-expire/290415 "2021-11-30T06:57:01Z")

</div>

Hi Im building Kibana from GitHub - elastic/kibana at v7.4.2. Will that basic license expire anytime? Regards Ram

---

## [How to check for key exist script query parameters?](https://discuss.elastic.co/t/how-to-check-for-key-exist-script-query-parameters/290514)

<div class="topic-metadata">

**Author:** [@hyun](https://discuss.elastic.co/u/hyun)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 6:12am UTC](https://discuss.elastic.co/t/how-to-check-for-key-exist-script-query-parameters/290514 "2021-11-30T06:12:12Z")

</div>

Is there any way to return null if there is no corresponding value? example) Since params do not have a field4 value, I want the null value to be returned to the syn variable. "aggs": { "countries": { "terms"…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=765)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=767)
