# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=802 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 803 --- ## [No cached mapping for this field!](https://discuss.elastic.co/t/no-cached-mapping-for-this-field/286684)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 5\ **Last updated:** [October 15, 2021, 5:39am UTC](https://discuss.elastic.co/t/no-cached-mapping-for-this-field/286684 "2021-10-15T05:39:44Z")
I tried the management -\> index pattern and hit refreshed button still I am not getting these fields. In the discover window, I am seeing these fields with warning tags but I am not getting these fields while using in… --- ## [Cluster returns 200 to queries even if entire shards are unavailable](https://discuss.elastic.co/t/cluster-returns-200-to-queries-even-if-entire-shards-are-unavailable/286432)
**Author:** [@Mon48](https://discuss.elastic.co/u/Mon48)\ **Replies:** 11\ **Last updated:** [October 15, 2021, 5:16am UTC](https://discuss.elastic.co/t/cluster-returns-200-to-queries-even-if-entire-shards-are-unavailable/286432 "2021-10-15T05:16:31Z")
I'm working with about 80 instances, and a index of 2TB and 50 shards with 1 replica However for some reason from time to time the cluster collapses (still root causing this) As you can see from the image, instances… --- ## [Kibana-visualization Data Table not allow choose a source with index pattern type](https://discuss.elastic.co/t/kibana-visualization-data-table-not-allow-choose-a-source-with-index-pattern-type/286516)
**Author:** [@Oskr](https://discuss.elastic.co/u/Oskr)\ **Replies:** 4\ **Last updated:** [October 15, 2021, 2:52am UTC](https://discuss.elastic.co/t/kibana-visualization-data-table-not-allow-choose-a-source-with-index-pattern-type/286516 "2021-10-15T02:52:28Z")
When I tried to create a new visualization type Data Table in kibana can\`t select a index pattern. I have others spaces in my kibana and in the others if I can. What is the reason for this behavior? --- ## [Elapsed time filter calculating negative time](https://discuss.elastic.co/t/elapsed-time-filter-calculating-negative-time/286786)
**Author:** [@Indigo\_Star](https://discuss.elastic.co/u/Indigo_Star)\ **Replies:** 0\ **Last updated:** [October 15, 2021, 1:58am UTC](https://discuss.elastic.co/t/elapsed-time-filter-calculating-negative-time/286786 "2021-10-15T01:58:53Z")
Hi I am loading offline logs and using elapsed plugin to calculate delay between 2 events, but the time calculating is not always correct sometimes it doesn't display the value in correct second sometimes it shows negat… --- ## [Use Kibana current user to send request to Elasticsearch plugin](https://discuss.elastic.co/t/use-kibana-current-user-to-send-request-to-elasticsearch-plugin/286732)
**Author:** [@aza-zil](https://discuss.elastic.co/u/aza-zil)\ **Replies:** 2\ **Last updated:** [October 15, 2021, 1:37am UTC](https://discuss.elastic.co/t/use-kibana-current-user-to-send-request-to-elasticsearch-plugin/286732 "2021-10-15T01:37:39Z")
I have an ES ActionPlugin that has an API, and I created a Kibana plugin, I want the Kibana plugin to send a post request to the ES plugin using context.core.Elasticsearch.legacy.client.callAsInternalUser or context.c… --- ## [How to create ELK user in Bitnami ELK instance (AWS)](https://discuss.elastic.co/t/how-to-create-elk-user-in-bitnami-elk-instance-aws/286723)
**Author:** [@Swarup\_Mukherjee](https://discuss.elastic.co/u/Swarup_Mukherjee)\ **Replies:** 1\ **Last updated:** [October 15, 2021, 12:29am UTC](https://discuss.elastic.co/t/how-to-create-elk-user-in-bitnami-elk-instance-aws/286723 "2021-10-15T00:29:14Z")
Hi Team, How to create ELK user in Bitnami ELK instance (AWS) like we have “USER” Please share the steps. --- ## [JVM spikes over 85% and baseline doesn't drop back down](https://discuss.elastic.co/t/jvm-spikes-over-85-and-baseline-doesnt-drop-back-down/286730)
**Author:** [@cshawler](https://discuss.elastic.co/u/cshawler)\ **Replies:** 1\ **Last updated:** [October 15, 2021, 12:27am UTC](https://discuss.elastic.co/t/jvm-spikes-over-85-and-baseline-doesnt-drop-back-down/286730 "2021-10-15T00:27:16Z")
We have watchers setup to notify when our JVM increases over 85% we have noticed that once the watcher is triggered the alerts keep firing and the jvm usage never drops back down. Is this normal behavior? We have … --- ## [Securing Elastic Stack: Logstash](https://discuss.elastic.co/t/securing-elastic-stack-logstash/286782)
**Author:** [@jceddy](https://discuss.elastic.co/u/jceddy)\ **Replies:** 2\ **Last updated:** [October 15, 2021, 12:09am UTC](https://discuss.elastic.co/t/securing-elastic-stack-logstash/286782 "2021-10-15T00:09:53Z")
I have been working on securing my elastic stack, and am now stuck on getting Logstash to communicate with Elasticsearch securely. I have a cluster with three nodes (call them elk1, elk2, and elk3), each running an Elas… --- ## [Multiple Synonym lists for the same field controlled by other field in Elastic Search](https://discuss.elastic.co/t/multiple-synonym-lists-for-the-same-field-controlled-by-other-field-in-elastic-search/286784)
**Author:** [@twisha](https://discuss.elastic.co/u/twisha)\ **Replies:** 0\ **Last updated:** [October 14, 2021, 11:48pm UTC](https://discuss.elastic.co/t/multiple-synonym-lists-for-the-same-field-controlled-by-other-field-in-elastic-search/286784 "2021-10-14T23:48:58Z")
Is there a way to define multiple synonym lists in Elasticsearch 7 based on languages and some specific field in the Elasticsearch document? The use case is, I have a field "A" with possible values "Y" and "Z". Now, depe… --- ## [Elasticsearch cluster data nodes are being removed from cluster by timeout](https://discuss.elastic.co/t/elasticsearch-cluster-data-nodes-are-being-removed-from-cluster-by-timeout/285635)
**Author:** [@Vadym](https://discuss.elastic.co/u/Vadym)\ **Replies:** 17\ **Last updated:** [October 14, 2021, 10:43pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-data-nodes-are-being-removed-from-cluster-by-timeout/285635 "2021-10-14T22:43:52Z")
Hi everyone, I have an issue while deleting rather big 800Gb Elasticsearch index. Shortly after index deletion data nodes are getting disconnected, cluster loses all data nodes and switches into "red" state for ~10 minu… --- ## [Можно ли не индексировать очень большое полнотекстовое поле (text)?](https://discuss.elastic.co/t/text/286752)
**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\ **Replies:** 2\ **Last updated:** [October 14, 2021, 9:25pm UTC](https://discuss.elastic.co/t/text/286752 "2021-10-14T21:25:40Z")
Добрый день! У меня есть поля типа "text", но тут случилось страшное - разработчики начали внезапно писать в них base64 изображений. Естественно, кластер эластика мгновенно упал от такой нагрузки (более 150 000 rps) Мож… --- ## [Issue with Elastic Endgame Fundamentals](https://discuss.elastic.co/t/issue-with-elastic-endgame-fundamentals/286731)
**Author:** [@marisa.david](https://discuss.elastic.co/u/marisa.david)\ **Replies:** 9\ **Last updated:** [October 14, 2021, 8:11pm UTC](https://discuss.elastic.co/t/issue-with-elastic-endgame-fundamentals/286731 "2021-10-14T20:11:10Z")
I have attempted to set up my lab environment multiple times for Elastic Endgame Fundamentals. I am unable to deploy the sensor. I am given the error "site can't be reached." I have used Chrome and Chrome Incognito. --- ## [What is the content of the segment file in node/0/\_state](https://discuss.elastic.co/t/what-is-the-content-of-the-segment-file-in-node-0-state/286698)
**Author:** [@verdantyang](https://discuss.elastic.co/u/verdantyang)\ **Replies:** 2\ **Last updated:** [October 14, 2021, 6:44pm UTC](https://discuss.elastic.co/t/what-is-the-content-of-the-segment-file-in-node-0-state/286698 "2021-10-14T18:44:07Z")
Hello, ES 6.\* only stores .st files in the /nodes/0/\_state directory to record node status information. But under the ES 7.12 version, I found segment-related file in /nodes/0/\_state directory, such as segment\_N and .s… --- ## [Match only N queries in a large boolean query for a single result](https://discuss.elastic.co/t/match-only-n-queries-in-a-large-boolean-query-for-a-single-result/286754)
**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\ **Replies:** 0\ **Last updated:** [October 14, 2021, 4:20pm UTC](https://discuss.elastic.co/t/match-only-n-queries-in-a-large-boolean-query-for-a-single-result/286754 "2021-10-14T16:20:57Z")
I am constructing a query that looks like that: Bool(should=\[Bool(\_name='F002690\_sf3789834989482\_wgs\_hgsc', must=\[Bool(should=\[Terms(samples\_num\_alt\_1=\['S338492778\_HGSC', 'S59=89483927\_HGSC'\]), Terms(samples\_num\_alt\_2=\[… --- ## [Tag Doc if match to List of Text terms Keywords](https://discuss.elastic.co/t/tag-doc-if-match-to-list-of-text-terms-keywords/286662)
**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\ **Replies:** 2\ **Last updated:** [October 14, 2021, 5:42pm UTC](https://discuss.elastic.co/t/tag-doc-if-match-to-list-of-text-terms-keywords/286662 "2021-10-14T17:42:18Z")
I have a list of terms about 1000 words and I want to have logstash in a Filter tag the document if there is a match in any of the words in a text field. Example: text : "The big brown dog" My List of 1000 terms has D… --- ## [Log4net to logstash](https://discuss.elastic.co/t/log4net-to-logstash/286250)
**Author:** [@Vinicius\_Mylonas](https://discuss.elastic.co/u/Vinicius_Mylonas)\ **Replies:** 1\ **Last updated:** [October 14, 2021, 5:30pm UTC](https://discuss.elastic.co/t/log4net-to-logstash/286250 "2021-10-14T17:30:39Z")
I'm trying to get a log like this from log4net: \[27\]\[14:08:36.584\] \[{"name":"Vinicius","SerialNumber":"957593196"}\] \[37\]\[14:08:36.584\] \[{"name":"Mylonas","SerialNumber":"957593166"}\] ... How can I get this information… --- ## [Search returning no results after upgrade from 7.9.3 to 7.15.0](https://discuss.elastic.co/t/search-returning-no-results-after-upgrade-from-7-9-3-to-7-15-0/286739)
**Author:** [@williamhbell](https://discuss.elastic.co/u/williamhbell)\ **Replies:** 5\ **Last updated:** [October 14, 2021, 4:57pm UTC](https://discuss.elastic.co/t/search-returning-no-results-after-upgrade-from-7-9-3-to-7-15-0/286739 "2021-10-14T16:57:33Z")
Hi, Our Elasticsearch installation was recently updated from 7.9.3 to 7.15.0. (The host operating system was updated from Ubuntu LTS 18 to 20 at the same time.) Following this update, the search scripts and programs w… --- ## [Unexpected hits when using n-gram](https://discuss.elastic.co/t/unexpected-hits-when-using-n-gram/286760)
**Author:** [@bsharma](https://discuss.elastic.co/u/bsharma)\ **Replies:** 0\ **Last updated:** [October 14, 2021, 4:45pm UTC](https://discuss.elastic.co/t/unexpected-hits-when-using-n-gram/286760 "2021-10-14T16:45:40Z")
Hi, I am using n-gram filter with my index. Index configuration: PUT dev-dk-ngram-test { "settings": { "index": { "max\_ngram\_diff": 2 }, "analysis": { "analyzer": { "default": { … --- ## [Filter Elasticsearch results based on the number of 'matched\_queries'](https://discuss.elastic.co/t/filter-elasticsearch-results-based-on-the-number-of-matched-queries/286741)
**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\ **Replies:** 1\ **Last updated:** [October 14, 2021, 2:59pm UTC](https://discuss.elastic.co/t/filter-elasticsearch-results-based-on-the-number-of-matched-queries/286741 "2021-10-14T14:59:33Z")
There is such a thing in elasticsearch as named queries : When we use it, we get matched\_queries array together with each matched document in each elasticsearch hit. Now, I want to get only documents that matched \> n … --- ## [Visualize Library - Pie chart](https://discuss.elastic.co/t/visualize-library-pie-chart/286690)
**Author:** [@Emin\_Cevikol](https://discuss.elastic.co/u/Emin_Cevikol)\ **Replies:** 3\ **Last updated:** [October 14, 2021, 3:53pm UTC](https://discuss.elastic.co/t/visualize-library-pie-chart/286690 "2021-10-14T15:53:03Z")
Hi everyone, I have a pie chart which shows percentage of two values (Success or Failure) count. I want to filter for example If sum of count greater then 1000, Then show me the pie chart otherwise not. How can I provid… --- ## [Shard allocation fails during rebalancing](https://discuss.elastic.co/t/shard-allocation-fails-during-rebalancing/286706)
**Author:** [@bunste](https://discuss.elastic.co/u/bunste)\ **Replies:** 8\ **Last updated:** [October 14, 2021, 3:40pm UTC](https://discuss.elastic.co/t/shard-allocation-fails-during-rebalancing/286706 "2021-10-14T15:40:27Z")
We recently ran into a problem with our Elasticseach Cluster. We took a Data Node out of the cluster and completely reinstalled it with Debian 11. When the node was done and rejoined the cluster, Elasticsearch started r… --- ## [\[ANNOUNCEMENT\] - Elasticsearch Beyonder 7.15 released](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-7-15-released/286744)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [October 14, 2021, 2:55pm UTC](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-7-15-released/286744 "2021-10-14T14:55:00Z")
The Elasticsearch Beyonder team is pleased to announce the elasticsearch-beyonder-7.15 release! Elasticsearch Beyonder Elasticsearch beyonder provides automatic index, mapping, alias or template creation when an elasti… --- ## [Elastic - flattening multiple fields](https://discuss.elastic.co/t/elastic-flattening-multiple-fields/286246)
**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\ **Replies:** 5\ **Last updated:** [October 14, 2021, 2:01pm UTC](https://discuss.elastic.co/t/elastic-flattening-multiple-fields/286246 "2021-10-14T14:01:04Z")
Hi everybody, In one of the Elastic indices, I have a problem with some documents. I receive JSON from filebeat and parse them with the json plugin. But some of them contain a lot of fields. Example response.0.field1… --- ## [Save redis channel name inside document](https://discuss.elastic.co/t/save-redis-channel-name-inside-document/286633)
**Author:** [@Metehan\_Tagizade](https://discuss.elastic.co/u/Metehan_Tagizade)\ **Replies:** 2\ **Last updated:** [October 14, 2021, 1:55pm UTC](https://discuss.elastic.co/t/save-redis-channel-name-inside-document/286633 "2021-10-14T13:55:54Z")
Hi, I have logstash pipeline like: input { redis { host=\> "redis-endpoint.com" port =\> "6379" key =\> "\*" data\_type =\> "pattern\_channel" batch\_count =\> 100 codec =\> "… --- ## [Oracle Data into Elastic](https://discuss.elastic.co/t/oracle-data-into-elastic/286719)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 3\ **Last updated:** [October 14, 2021, 1:12pm UTC](https://discuss.elastic.co/t/oracle-data-into-elastic/286719 "2021-10-14T13:12:56Z")
Hi, I have been butting my head against a brick wall for over a week now trying to get the jdbc driver working in logstash, and have rethought the approach for getting data out of Oracle. I am currently trying to protot… --- ## [Detection Engine Workflow](https://discuss.elastic.co/t/detection-engine-workflow/286725)
**Author:** [@poojamehta\_ids](https://discuss.elastic.co/u/poojamehta_ids)\ **Replies:** 0\ **Last updated:** [October 14, 2021, 1:05pm UTC](https://discuss.elastic.co/t/detection-engine-workflow/286725 "2021-10-14T13:05:33Z")
How can I get to know more about detection engine workflow? How are the detection rules executed? Are there any resources available to understand its workflow as well as code? --- ## [Out Of Memory crash, few documents & load](https://discuss.elastic.co/t/out-of-memory-crash-few-documents-load/286597)
**Author:** [@cyril.r](https://discuss.elastic.co/u/cyril.r)\ **Replies:** 9\ **Last updated:** [October 14, 2021, 1:05pm UTC](https://discuss.elastic.co/t/out-of-memory-crash-few-documents-load/286597 "2021-10-14T13:05:28Z")
Hi there, I have a small Elasticsearch single node cluster for development purpose that is crashing about one time per month, even when there are no trafic/requests (like in the middle of the night, no one is working on… --- ## [How order aggregations using elasticsearch 7.15](https://discuss.elastic.co/t/how-order-aggregations-using-elasticsearch-7-15/286645)
**Author:** [@acantepie](https://discuss.elastic.co/u/acantepie)\ **Replies:** 4\ **Last updated:** [October 14, 2021, 12:59pm UTC](https://discuss.elastic.co/t/how-order-aggregations-using-elasticsearch-7-15/286645 "2021-10-14T12:59:09Z")
Hello, I have the following mapping : "COLOR": { "properties": { "order": { "type": "long" }, "value": { "type": "text", "fields": { "keyword": { … --- ## [Kibana export CSV encoding](https://discuss.elastic.co/t/kibana-export-csv-encoding/286656)
**Author:** [@Richard\_Schroeder](https://discuss.elastic.co/u/Richard_Schroeder)\ **Replies:** 1\ **Last updated:** [October 14, 2021, 12:40pm UTC](https://discuss.elastic.co/t/kibana-export-csv-encoding/286656 "2021-10-14T12:40:46Z")
Is there any way to change the default encoding of the CSV file when exporting data from a visualization? --- ## [If else return scripted field date field](https://discuss.elastic.co/t/if-else-return-scripted-field-date-field/286646)
**Author:** [@Surya\_Raviraj](https://discuss.elastic.co/u/Surya_Raviraj)\ **Replies:** 1\ **Last updated:** [October 14, 2021, 12:29pm UTC](https://discuss.elastic.co/t/if-else-return-scripted-field-date-field/286646 "2021-10-14T12:29:36Z")
Is it possible to do an if else return statement with dates? For example, if the date in the date column is 1/1/21 I want it to return Week 1. I tried doing that below but I am getting the error shown in the screenshot. … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=801) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=803)