# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=808 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 809 --- ## [Elasticsearch installation](https://discuss.elastic.co/t/elasticsearch-installation/285415)
**Author:** [@eugestel](https://discuss.elastic.co/u/eugestel)\ **Replies:** 45\ **Last updated:** [October 8, 2021, 2:08pm UTC](https://discuss.elastic.co/t/elasticsearch-installation/285415 "2021-10-08T14:08:19Z")
Requesting for help with Elasticsearch. I installed Elasticsearch in my ubuntu server 20.04 but unable to get it to work. The command : systemctl status Elasticsearch.service yielded the following: $ systemctl status… --- ## [Paginating through results in a query that doesnt use sort](https://discuss.elastic.co/t/paginating-through-results-in-a-query-that-doesnt-use-sort/286160)
**Author:** [@John\_Mackey](https://discuss.elastic.co/u/John_Mackey)\ **Replies:** 3\ **Last updated:** [October 8, 2021, 1:46pm UTC](https://discuss.elastic.co/t/paginating-through-results-in-a-query-that-doesnt-use-sort/286160 "2021-10-08T13:46:51Z")
We have the below query that returns 15K results. How do we paginate through all the results From the examples for search\_after , it can be used only if we are sorting by a unique field in the query . We do not intend … --- ## [Get Laste Value of each host with Query DSL in Discover](https://discuss.elastic.co/t/get-laste-value-of-each-host-with-query-dsl-in-discover/286002)
**Author:** [@GinkoLucas](https://discuss.elastic.co/u/GinkoLucas)\ **Replies:** 3\ **Last updated:** [October 8, 2021, 12:55pm UTC](https://discuss.elastic.co/t/get-laste-value-of-each-host-with-query-dsl-in-discover/286002 "2021-10-08T12:55:46Z")
Hi, Actually i store logs in Elastic. I would like to get all the last log collected from each host in Discover. If there is 20 differents hosts, the Discover have to show me 20 logs. I think i can use Elasticsearch Qu… --- ## [When does minimum\_should\_match change default value?](https://discuss.elastic.co/t/when-does-minimum-should-match-change-default-value/286234)
**Author:** [@dinamic](https://discuss.elastic.co/u/dinamic)\ **Replies:** 0\ **Last updated:** [October 8, 2021, 12:10pm UTC](https://discuss.elastic.co/t/when-does-minimum-should-match-change-default-value/286234 "2021-10-08T12:10:50Z")
Hey guys :wave: We've upgraded from 6.8 to 7.10 recently and are still finding out issues. It seems like minimum\_should\_match behaviour has been silently updated. Consider the following repeatable example: PUT /test-b… --- ## [Parsed JSON object/hash requires a target configuration option](https://discuss.elastic.co/t/parsed-json-object-hash-requires-a-target-configuration-option/286217)
**Author:** [@ktpktr0](https://discuss.elastic.co/u/ktpktr0)\ **Replies:** 0\ **Last updated:** [October 8, 2021, 9:47am UTC](https://discuss.elastic.co/t/parsed-json-object-hash-requires-a-target-configuration-option/286217 "2021-10-08T09:47:06Z")
My cluster architecture is elk + Kafka + filebeat. Use the following configuration to parse JSON logs: input { kafka { bootstrap\_servers =\> "192.168.1.176:9092,192.168.1.178:9092,192.168.1.177:9092" cl… --- ## [Nested query builder inside must\_not clause does not build inner hits](https://discuss.elastic.co/t/nested-query-builder-inside-must-not-clause-does-not-build-inner-hits/286210)
**Author:** [@cip999](https://discuss.elastic.co/u/cip999)\ **Replies:** 0\ **Last updated:** [October 8, 2021, 9:07am UTC](https://discuss.elastic.co/t/nested-query-builder-inside-must-not-clause-does-not-build-inner-hits/286210 "2021-10-08T09:07:25Z")
I encountered an unexpected behavior of ES when combining must\_not and nested. Let's say I have an index my\_index with the following schema: { "mappings": { "properties": { "normal\_field": { "type":… --- ## [Maximum number of shards reached on a single node cluster](https://discuss.elastic.co/t/maximum-number-of-shards-reached-on-a-single-node-cluster/286204)
**Author:** [@NoemieB](https://discuss.elastic.co/u/NoemieB)\ **Replies:** 2\ **Last updated:** [October 8, 2021, 8:40am UTC](https://discuss.elastic.co/t/maximum-number-of-shards-reached-on-a-single-node-cluster/286204 "2021-10-08T08:40:52Z")
Hello, When creating an Index, I get the following error : "this action would add \[2\] total shards, but this cluster currently has \[1000\]/\[1000\] maximum shards open;" I found out a few posts about this issue and checke… --- ## [New master is not getting selected](https://discuss.elastic.co/t/new-master-is-not-getting-selected/286194)
**Author:** [@NutaN\_Shrivastava](https://discuss.elastic.co/u/NutaN_Shrivastava)\ **Replies:** 3\ **Last updated:** [October 8, 2021, 8:40am UTC](https://discuss.elastic.co/t/new-master-is-not-getting-selected/286194 "2021-10-08T08:40:25Z")
I have created a cluster of 3 nodes, out of which 2 are data and master and 1 is only data node. Recently due to some technical glitch one of the master nodes was down, but through out we kept getting a log msg elastic… --- ## [Datastream index template not working](https://discuss.elastic.co/t/datastream-index-template-not-working/286201)
**Author:** [@Santhosh\_CT](https://discuss.elastic.co/u/Santhosh_CT)\ **Replies:** 0\ **Last updated:** [October 8, 2021, 8:12am UTC](https://discuss.elastic.co/t/datastream-index-template-not-working/286201 "2021-10-08T08:12:34Z")
I am trying to onboard datastream into my es cluster. I have created the ilm with necessary phases, created the index template and then creating the datastream. But I am stuck at one point and not able to go forward. I … --- ## [Options list control is not case sensitive](https://discuss.elastic.co/t/options-list-control-is-not-case-sensitive/285448)
**Author:** [@Rom1](https://discuss.elastic.co/u/Rom1)\ **Replies:** 2\ **Last updated:** [October 8, 2021, 8:01am UTC](https://discuss.elastic.co/t/options-list-control-is-not-case-sensitive/285448 "2021-10-08T08:01:43Z")
Hi all, I'm using the version 7.13.4 The answers I found for this topic don't resolve my problem. It seems that the 'options list' control is not case sensitive. My mapping is: ... "template" : { "settin… --- ## [How to parse different log in logstash configuration](https://discuss.elastic.co/t/how-to-parse-different-log-in-logstash-configuration/286142)
**Author:** [@Roccof97](https://discuss.elastic.co/u/Roccof97)\ **Replies:** 2\ **Last updated:** [October 8, 2021, 7:47am UTC](https://discuss.elastic.co/t/how-to-parse-different-log-in-logstash-configuration/286142 "2021-10-08T07:47:16Z")
Hello to all, i have a problem with activemq logos i have created different types of grok, but the problem is that sometimes the message is different with additional fields and consequently it is parsed incorrectly, i… --- ## [Extract concrete words with logstash](https://discuss.elastic.co/t/extract-concrete-words-with-logstash/286139)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 2\ **Last updated:** [October 8, 2021, 7:38am UTC](https://discuss.elastic.co/t/extract-concrete-words-with-logstash/286139 "2021-10-08T07:38:38Z")
Hi! I was interested in knowing if with logstash I could find words that match a pattern and extract them from the message, without parsing the whole message. For example: there has been an error on the \*\*s123s\*\* mach… --- ## [Missing DNS requests on Windows machine](https://discuss.elastic.co/t/missing-dns-requests-on-windows-machine/286067)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 4\ **Last updated:** [October 8, 2021, 7:00am UTC](https://discuss.elastic.co/t/missing-dns-requests-on-windows-machine/286067 "2021-10-08T07:00:20Z")
Hey, I'm investigating outbound DNS connections from an Active Directory Domain Controller. It contacted the DNS server tm1.edgedns-tm.info which is apparently owned by Microsoft. Nothing overly suspicious, but I wante… --- ## [Highlight same field twice with different settings](https://discuss.elastic.co/t/highlight-same-field-twice-with-different-settings/286184)
**Author:** [@Sam\_Gaunt](https://discuss.elastic.co/u/Sam_Gaunt)\ **Replies:** 0\ **Last updated:** [October 8, 2021, 6:44am UTC](https://discuss.elastic.co/t/highlight-same-field-twice-with-different-settings/286184 "2021-10-08T06:44:06Z")
I would like to return multiple highlights of the same field but with different fragment sizes. One would have a smaller fragment size and be used as a preview for the user before they open the document to see the full r… --- ## [Can I limit displayed search results to applicable sentences or paragraphs rather than entire document?](https://discuss.elastic.co/t/can-i-limit-displayed-search-results-to-applicable-sentences-or-paragraphs-rather-than-entire-document/286166)
**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\ **Replies:** 1\ **Last updated:** [October 8, 2021, 5:05am UTC](https://discuss.elastic.co/t/can-i-limit-displayed-search-results-to-applicable-sentences-or-paragraphs-rather-than-entire-document/286166 "2021-10-08T05:05:09Z")
I have indexed 24 Jack Reacher books. Any successful search displays at least one book in its entirety. e.g.: } GET books4/\_search { "query": { "match\_phrase":{ "content": "deerfield nodded" } } } Is … --- ## [No matching indices found: No indices match pattern](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern/286108)
**Author:** [@driveirk](https://discuss.elastic.co/u/driveirk)\ **Replies:** 3\ **Last updated:** [October 8, 2021, 5:25am UTC](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern/286108 "2021-10-08T05:25:56Z")
I have a lot of index patterns and not all of them now have an index in the elasticity, after updating the kibana from 7.8.1 to 7.14.0 I cannot go to Management - Index Patterns because of: Heavy load during transition … --- ## [Is it possible to turn off "Elasticsearch built-in security features are not enabled" notifications?](https://discuss.elastic.co/t/is-it-possible-to-turn-off-elasticsearch-built-in-security-features-are-not-enabled-notifications/286167)
**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\ **Replies:** 2\ **Last updated:** [October 8, 2021, 4:20am UTC](https://discuss.elastic.co/t/is-it-possible-to-turn-off-elasticsearch-built-in-security-features-are-not-enabled-notifications/286167 "2021-10-08T04:20:26Z")
I'm using ES on a stand-alone computer, without a wired or wireless network or internet connections. --- ## [ElasticSearch freezes suddenly and unable to respond](https://discuss.elastic.co/t/elasticsearch-freezes-suddenly-and-unable-to-respond/284256)
**Author:** [@Vishal\_Goel](https://discuss.elastic.co/u/Vishal_Goel)\ **Replies:** 11\ **Last updated:** [October 8, 2021, 3:52am UTC](https://discuss.elastic.co/t/elasticsearch-freezes-suddenly-and-unable-to-respond/284256 "2021-10-08T03:52:12Z")
Hi, We have ES OSS 7.0 running for more than couple of months. In last 15 days, ES froze and became very slow. It is almost unable to process any request. Setup: Single Node, Windows VM, 16 cores, 32GB RAM, ES Xmx 4G, … --- ## [Logstash error 403 with a remote elasticsearch instance](https://discuss.elastic.co/t/logstash-error-403-with-a-remote-elasticsearch-instance/286161)
**Author:** [@Indigo\_Star](https://discuss.elastic.co/u/Indigo_Star)\ **Replies:** 3\ **Last updated:** [October 7, 2021, 10:42pm UTC](https://discuss.elastic.co/t/logstash-error-403-with-a-remote-elasticsearch-instance/286161 "2021-10-07T22:42:13Z")
Hi, I have a logstash config which works fine with my local Elasticsearch instance but when i try to push to a remote instance config gives error at startup as follows: Using default mapping template \[2021-10-07T13:17… --- ## [Question: Are we going to run into problems using (abusing?) nested at scale](https://discuss.elastic.co/t/question-are-we-going-to-run-into-problems-using-abusing-nested-at-scale/285122)
**Author:** [@huggsboson](https://discuss.elastic.co/u/huggsboson)\ **Replies:** 4\ **Last updated:** [October 7, 2021, 10:31pm UTC](https://discuss.elastic.co/t/question-are-we-going-to-run-into-problems-using-abusing-nested-at-scale/285122 "2021-10-07T22:31:40Z")
We're looking for guidance on any pitfalls in terms of scale / performance we may run into when using the nested field type in Elasticsearch. We have a use-case where we have a 100k+ different customer schemas that we ar… --- ## [Add caracter in logstash custom patterns](https://discuss.elastic.co/t/add-caracter-in-logstash-custom-patterns/286158)
**Author:** [@Adixon\_Diaz](https://discuss.elastic.co/u/Adixon_Diaz)\ **Replies:** 2\ **Last updated:** [October 7, 2021, 8:45pm UTC](https://discuss.elastic.co/t/add-caracter-in-logstash-custom-patterns/286158 "2021-10-07T20:45:25Z")
Hi comunity, I want to add a caracter when i'm processing data with logstash, for example, add a space or : or -. I mean, i have the next log 2021-07-29122715960 grok custom pattern: FECHACORTA ((?\>\\d\\d){1,2}\[./-\]%{MO… --- ## [ECE Fundamentals Lab 1, step 32](https://discuss.elastic.co/t/ece-fundamentals-lab-1-step-32/286140)
**Author:** [@Bob.Collins](https://discuss.elastic.co/u/Bob.Collins)\ **Replies:** 2\ **Last updated:** [October 7, 2021, 4:23pm UTC](https://discuss.elastic.co/t/ece-fundamentals-lab-1-step-32/286140 "2021-10-07T16:23:40Z")
I'm nearing the end of Lab 1 for ECE Fundamentals and after 'sudo reboot' the VM never comes back up. I'm experiencing the same as described in a previous discussion, URL below. Can someone look into the VM for me? Than… --- ## [Can't work with object's properties for aggregations](https://discuss.elastic.co/t/cant-work-with-objects-properties-for-aggregations/285939)
**Author:** [@Thomas\_DRABO](https://discuss.elastic.co/u/Thomas_DRABO)\ **Replies:** 1\ **Last updated:** [October 7, 2021, 3:59pm UTC](https://discuss.elastic.co/t/cant-work-with-objects-properties-for-aggregations/285939 "2021-10-07T15:59:39Z")
Hello everyone, I'm trying to work with a property containing an array of objects in my index. You can find the index's mapping behind. This is my index mapping. PUT test-index { "mappings": { "properties": { … --- ## [Getting error while importing csv file to logstash](https://discuss.elastic.co/t/getting-error-while-importing-csv-file-to-logstash/285954)
**Author:** [@SSirurmath](https://discuss.elastic.co/u/SSirurmath)\ **Replies:** 6\ **Last updated:** [October 7, 2021, 3:56pm UTC](https://discuss.elastic.co/t/getting-error-while-importing-csv-file-to-logstash/285954 "2021-10-07T15:56:27Z")
\[2021-10-05T16:59:04,940\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of \[ \\… --- ## [Logstash.conf error](https://discuss.elastic.co/t/logstash-conf-error/286088)
**Author:** [@Johnny\_Cash\_Cow](https://discuss.elastic.co/u/Johnny_Cash_Cow)\ **Replies:** 1\ **Last updated:** [October 7, 2021, 3:54pm UTC](https://discuss.elastic.co/t/logstash-conf-error/286088 "2021-10-07T15:54:02Z")
Here is the error: "LogStash::ConfigurationError", :message=\>"Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \\"input\\", \\"filter\\", \\"output\\" at line 6, column 1 (byte 132) after ", and here is the logstash.conf file itself in… --- ## [How to convert kubernetes cpu usage and memory usage of metricbeat fields to percentage IN METRICBEAT index elasticsearch](https://discuss.elastic.co/t/how-to-convert-kubernetes-cpu-usage-and-memory-usage-of-metricbeat-fields-to-percentage-in-metricbeat-index-elasticsearch/285727)
**Author:** [@Jay\_Gajjar](https://discuss.elastic.co/u/Jay_Gajjar)\ **Replies:** 1\ **Last updated:** [October 7, 2021, 3:27pm UTC](https://discuss.elastic.co/t/how-to-convert-kubernetes-cpu-usage-and-memory-usage-of-metricbeat-fields-to-percentage-in-metricbeat-index-elasticsearch/285727 "2021-10-07T15:27:08Z")
Hello, how can i get the percentage of Kubernetes node CPU usage and Kubernetes node memory usage from metricbeat, as i am making a custom plugin where I wanted to show it in percentage. moreover i'm making Elasticsearch… --- ## [Field definition in logstash and elastic search](https://discuss.elastic.co/t/field-definition-in-logstash-and-elastic-search/286144)
**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\ **Replies:** 1\ **Last updated:** [October 7, 2021, 2:32pm UTC](https://discuss.elastic.co/t/field-definition-in-logstash-and-elastic-search/286144 "2021-10-07T14:32:59Z")
I have created three fields one index-number according to path and two static as mentioned in config file grok { match =\> {"path" =\> "indexer-(?\\[0-9\]\*)"} } mutate{ convert =\> {"index-number" =\> "int… --- ## [Multiple query with nested](https://discuss.elastic.co/t/multiple-query-with-nested/286020)
**Author:** [@elastic\_dev](https://discuss.elastic.co/u/elastic_dev)\ **Replies:** 5\ **Last updated:** [October 7, 2021, 2:24pm UTC](https://discuss.elastic.co/t/multiple-query-with-nested/286020 "2021-10-07T14:24:26Z")
Hi Below is my data. { "took" : 5, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1, "skipped" : 0, "failed" : 0 }, "hits" : { "total" : { "value" : 2, "relation… --- ## [Elasticsearch Angular](https://discuss.elastic.co/t/elasticsearch-angular/286042)
**Author:** [@Lyes\_Ouchene](https://discuss.elastic.co/u/Lyes_Ouchene)\ **Replies:** 4\ **Last updated:** [October 7, 2021, 2:15pm UTC](https://discuss.elastic.co/t/elasticsearch-angular/286042 "2021-10-07T14:15:21Z")
Hello everyone, i am new to Elasticsearch and want to create an angular search application. do you have any links for me ! --- ## [Batch Process Failed resolution](https://discuss.elastic.co/t/batch-process-failed-resolution/285389)
**Author:** [@2f404140b7ab0f69189f](https://discuss.elastic.co/u/2f404140b7ab0f69189f)\ **Replies:** 3\ **Last updated:** [October 7, 2021, 1:23pm UTC](https://discuss.elastic.co/t/batch-process-failed-resolution/285389 "2021-10-07T13:23:55Z")
I'm using Kibana 7.15.0 and I am constantly experiencing "Batch process failed" when I try to view an index on the Discover section. Can someone explain why this happens and what can be the solution please? [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=807) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=809)