# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=816 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 817 --- ## [Shard Relocation||ES expansion](https://discuss.elastic.co/t/shard-relocation-es-expansion/285336)
**Author:** [@Murali\_Thumalapalli](https://discuss.elastic.co/u/Murali_Thumalapalli)\ **Replies:** 3\ **Last updated:** [September 28, 2021, 10:23pm UTC](https://discuss.elastic.co/t/shard-relocation-es-expansion/285336 "2021-09-28T22:23:39Z")
Hi Team, Can someone guide us on this. How to find out the default retention for ES cluster for indices. also how to check the default on what basis the shards relocation happens. is it like cluster tries to bring the… --- ## [Observability Engineer Lab 3.3 - Empty Columns](https://discuss.elastic.co/t/observability-engineer-lab-3-3-empty-columns/285367)
**Author:** [@kvmuralidhar](https://discuss.elastic.co/u/kvmuralidhar)\ **Replies:** 5\ **Last updated:** [September 28, 2021, 8:13pm UTC](https://discuss.elastic.co/t/observability-engineer-lab-3-3-empty-columns/285367 "2021-09-28T20:13:07Z")
Hi, I'm working on the Observability Engineer lab. In Module 3.3, task 12, the document shows that the messages from /var/lib/mysql/mysql.log are parsed correctly, where as in my setup, the messages are not parsed. th… --- ## [Error with JDBC statement on MaxDB](https://discuss.elastic.co/t/error-with-jdbc-statement-on-maxdb/285392)
**Author:** [@franckfct](https://discuss.elastic.co/u/franckfct)\ **Replies:** 2\ **Last updated:** [September 28, 2021, 7:43pm UTC](https://discuss.elastic.co/t/error-with-jdbc-statement-on-maxdb/285392 "2021-09-28T19:43:09Z")
Hi, I would like to synchronize a MaxDB table to ES via logstash/JDBC, so in my pipeline i have =\> input { jdbc { jdbc\_driver\_library =\> "\/sapdbc.jar" jdbc\_driver\_class =\> "com.sap.dbtech.jdbc.DriverSa… --- ## [Order by length of array properties](https://discuss.elastic.co/t/order-by-length-of-array-properties/285393)
**Author:** [@juancruzdev](https://discuss.elastic.co/u/juancruzdev)\ **Replies:** 0\ **Last updated:** [September 28, 2021, 4:52pm UTC](https://discuss.elastic.co/t/order-by-length-of-array-properties/285393 "2021-09-28T16:52:43Z")
i have an index with objects and an array called "reviews" that inside has properties called positive\_comment, negative\_comment, reviewer\_name and more. There are some reviews that have the field positive\_comment empty … --- ## [Vercel Integration](https://discuss.elastic.co/t/vercel-integration/285092)
**Author:** [@jasonkuhrt](https://discuss.elastic.co/u/jasonkuhrt)\ **Replies:** 1\ **Last updated:** [September 28, 2021, 4:20pm UTC](https://discuss.elastic.co/t/vercel-integration/285092 "2021-09-28T16:20:55Z")
I am exploring if it is possible to send logs from our functions hosted on Vercel to our ELK trial. My first hurdle is trying to understand how to ship logs from the function to ELK. Currently I am willing to do this wi… --- ## [Logstash MetricNotFound](https://discuss.elastic.co/t/logstash-metricnotfound/285390)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 1\ **Last updated:** [September 28, 2021, 4:05pm UTC](https://discuss.elastic.co/t/logstash-metricnotfound/285390 "2021-09-28T16:05:01Z")
Please have a look at the error in the logstash-plain.log file: \[2021-09-28T15:51:47,918\]\[DEBUG\]\[logstash.agent \] 2021-09-28 15:51:47 - LogStash::Instrument::MetricStore::MetricNotFound - For path: events. Map… --- ## [Visualize pie](https://discuss.elastic.co/t/visualize-pie/284708)
**Author:** [@cva](https://discuss.elastic.co/u/cva)\ **Replies:** 3\ **Last updated:** [September 28, 2021, 3:52pm UTC](https://discuss.elastic.co/t/visualize-pie/284708 "2021-09-28T15:52:11Z")
Здравствуйте! У меня есть два индекса test1 с количеством документов 132000 и test2 с количеством документов 16000 объеденные в один шаблон test\*. Я хочу сделать круговую диаграмму "pie" и получить долю индекса test2 о… --- ## [Insert records for parent/child in same index of elastic search](https://discuss.elastic.co/t/insert-records-for-parent-child-in-same-index-of-elastic-search/285385)
**Author:** [@manjurgani](https://discuss.elastic.co/u/manjurgani)\ **Replies:** 0\ **Last updated:** [September 28, 2021, 3:40pm UTC](https://discuss.elastic.co/t/insert-records-for-parent-child-in-same-index-of-elastic-search/285385 "2021-09-28T15:40:28Z")
I have created a mapping in Elasticsearch like below POST /INDEX { "mappings": { "properties": { "id": { "type": "keyword" }, "join\_field": { "typ… --- ## [Elasticsearch don't remove old shards](https://discuss.elastic.co/t/elasticsearch-dont-remove-old-shards/284272)
**Author:** [@09a9373743777d8430c4](https://discuss.elastic.co/u/09a9373743777d8430c4)\ **Replies:** 8\ **Last updated:** [September 28, 2021, 3:20pm UTC](https://discuss.elastic.co/t/elasticsearch-dont-remove-old-shards/284272 "2021-09-28T15:20:56Z")
Hi. This week after \_forcemerge?only\_expunge\_deletes=true I saw an increase in disk space usage (# 1 in the picture), after that I tried to reduce the number of replicas from 2 to 1 (# 2 in the picture), and also notice… --- ## [Deploying ECK on AWS EKS with i3 and d2 instances and local volumes](https://discuss.elastic.co/t/deploying-eck-on-aws-eks-with-i3-and-d2-instances-and-local-volumes/235223)
**Author:** [@Chris\_Austin](https://discuss.elastic.co/u/Chris_Austin)\ **Replies:** 6\ **Last updated:** [September 28, 2021, 2:51pm UTC](https://discuss.elastic.co/t/deploying-eck-on-aws-eks-with-i3-and-d2-instances-and-local-volumes/235223 "2021-09-28T14:51:27Z")
I'm attempting to deploy Elasticsearch w/ ECK on EKS with i3 hot nodes and d2 warm nodes, with the EC2 instances created through Terraform as part of an autoscaling group so I can have failover across availability zones.… --- ## [Logstash tuning w/ 35 pipelines](https://discuss.elastic.co/t/logstash-tuning-w-35-pipelines/285345)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 0\ **Last updated:** [September 28, 2021, 11:12am UTC](https://discuss.elastic.co/t/logstash-tuning-w-35-pipelines/285345 "2021-09-28T11:12:39Z")
Hi, I have an Elasticsearch cluster with 24 data nodes. I have about 35 logstash pipelines on a single server that has 4 CPUs and 16 GB RAM. Each Logstash pipeline has 18 filters w/ two of them being Elasticsearch filte… --- ## [Logstash crashes at startup when custom codec is used in the config](https://discuss.elastic.co/t/logstash-crashes-at-startup-when-custom-codec-is-used-in-the-config/285078)
**Author:** [@Rara](https://discuss.elastic.co/u/Rara)\ **Replies:** 1\ **Last updated:** [September 28, 2021, 2:23pm UTC](https://discuss.elastic.co/t/logstash-crashes-at-startup-when-custom-codec-is-used-in-the-config/285078 "2021-09-28T14:23:45Z")
Hi Team I'm participating in the migration of a project from Logstash 6.4.3 to Logstash 7.10.2. The problem is that the new Logstash crashes at startup when one of our custom codecs is used in the configuration. The er… --- ## [Shrink ES Cluster size from 3 to 1 in ES 7.62](https://discuss.elastic.co/t/shrink-es-cluster-size-from-3-to-1-in-es-7-62/285369)
**Author:** [@hello5346](https://discuss.elastic.co/u/hello5346)\ **Replies:** 0\ **Last updated:** [September 28, 2021, 2:03pm UTC](https://discuss.elastic.co/t/shrink-es-cluster-size-from-3-to-1-in-es-7-62/285369 "2021-09-28T14:03:33Z")
We are Running an Elasticsearch cluster with 3 nodes and we want to downsize the current cluster to run with only 1 node. my cluster configs look like this. node.master and node.data is true on all 3 nodes and cluster… --- ## [Get an CORS error When requested elastic search rest API](https://discuss.elastic.co/t/get-an-cors-error-when-requested-elastic-search-rest-api/285331)
**Author:** [@MB\_KING](https://discuss.elastic.co/u/MB_KING)\ **Replies:** 2\ **Last updated:** [September 28, 2021, 1:11pm UTC](https://discuss.elastic.co/t/get-an-cors-error-when-requested-elastic-search-rest-api/285331 "2021-09-28T13:11:37Z")
hi Im working on React Project and using Axios package for requested Elasticsearch rest API . after call I receive CORS error how can fix this error and get data ? error : Access to XMLHttpRequest at '\ **Author:** [@brsolomon](https://discuss.elastic.co/u/brsolomon)\ **Replies:** 3\ **Last updated:** [September 28, 2021, 12:53pm UTC](https://discuss.elastic.co/t/deploying-eck-with-network-attached-persistentvolumes-e-g-awselasticblockstore/285353 "2021-09-28T12:53:39Z") The ECK docs would greatly benefit from an MCVE on how to deploy ECK with Network-attached PersistentVolumes and a provisioner such as kubernetes.io/aws-ebs. The Best Practices in AWS section suggests using one of Instan… --- ## [Values changing when ordering by metric](https://discuss.elastic.co/t/values-changing-when-ordering-by-metric/285055)
**Author:** [@Jomy](https://discuss.elastic.co/u/Jomy)\ **Replies:** 4\ **Last updated:** [September 28, 2021, 12:40pm UTC](https://discuss.elastic.co/t/values-changing-when-ordering-by-metric/285055 "2021-09-28T12:40:37Z")
Hi, I am facing an issue with "order by". I have an Y axis with an "average" aggregation. I have an X axis with a "Term" aggregation (where my terms are street names) =\> I have an average value for each street. I would… --- ## [Node Query Cache with keyword](https://discuss.elastic.co/t/node-query-cache-with-keyword/285314)
**Author:** [@yukai](https://discuss.elastic.co/u/yukai)\ **Replies:** 3\ **Last updated:** [September 28, 2021, 12:18pm UTC](https://discuss.elastic.co/t/node-query-cache-with-keyword/285314 "2021-09-28T12:18:23Z")
For search performance, changing field type of integer/long to keywords for term querys might increase search speed. However, I recently found that doing this change would no longer getting benefit from node query cach… --- ## [Kuromoji analyzer filters out text in Arabic](https://discuss.elastic.co/t/kuromoji-analyzer-filters-out-text-in-arabic/285350)
**Author:** [@anatoly21](https://discuss.elastic.co/u/anatoly21)\ **Replies:** 0\ **Last updated:** [September 28, 2021, 11:51am UTC](https://discuss.elastic.co/t/kuromoji-analyzer-filters-out-text-in-arabic/285350 "2021-09-28T11:51:34Z")
We have faced the issue with indexing and searching multilanguage Japanese/Arabic documents using kuromoji analyzer. The problem is that the analyzer filters out all tokens in Arabic, while tokens in other scripts are p… --- ## [7.15 metric visualization percentile bucket\[agg.parentId\] is undefined](https://discuss.elastic.co/t/7-15-metric-visualization-percentile-bucket-agg-parentid-is-undefined/285125)
**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\ **Replies:** 4\ **Last updated:** [September 28, 2021, 11:16am UTC](https://discuss.elastic.co/t/7-15-metric-visualization-percentile-bucket-agg-parentid-is-undefined/285125 "2021-09-28T11:16:54Z")
After upgrading from 7.14.2 to 7.15, some existing metric visualizations that use percentiles have stopped working. Search Error bucket\[agg.parentId\] is undefined getPercentileValue@https://.../44040/bundles/plugin/d… --- ## [Load balancing Kibana](https://discuss.elastic.co/t/load-balancing-kibana/284932)
**Author:** [@vee](https://discuss.elastic.co/u/vee)\ **Replies:** 5\ **Last updated:** [September 28, 2021, 9:50am UTC](https://discuss.elastic.co/t/load-balancing-kibana/284932 "2021-09-28T09:50:24Z")
Hi - we have 3 clusters in our prod spread across three diff Data centers. Each cluster setup: One instance of Kibana -\> 2 client nodes for load balancing -\> data nodes Since dashboards and visualizations are local to… --- ## [After Split again merge the json object](https://discuss.elastic.co/t/after-split-again-merge-the-json-object/285333)
**Author:** [@ansgoya](https://discuss.elastic.co/u/ansgoya)\ **Replies:** 0\ **Last updated:** [September 28, 2021, 9:25am UTC](https://discuss.elastic.co/t/after-split-again-merge-the-json-object/285333 "2021-09-28T09:25:33Z")
Hi Team, I am splitting the data and mutate the fields but i want to again merge the objects so filter { if \[data\] { split { field =\> "data" target =\> "indexData" } if !("" in \[indexData\]\[bcd\])… --- ## [Facing some issues in creating index patterns using the python elasticsearch API](https://discuss.elastic.co/t/facing-some-issues-in-creating-index-patterns-using-the-python-elasticsearch-api/285305)
**Author:** [@Rahul\_Kulhalli](https://discuss.elastic.co/u/Rahul_Kulhalli)\ **Replies:** 1\ **Last updated:** [September 28, 2021, 9:06am UTC](https://discuss.elastic.co/t/facing-some-issues-in-creating-index-patterns-using-the-python-elasticsearch-api/285305 "2021-09-28T09:06:41Z")
Hello, I want to create an index pattern on Kibana through the python API also set the default timeFieldName to @timestamp. However, I am a little confused in regards to the API documentation provided by Elasticsearch-p… --- ## [What's the difference between terms and term(with bool should)?](https://discuss.elastic.co/t/whats-the-difference-between-terms-and-term-with-bool-should/285186)
**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\ **Replies:** 4\ **Last updated:** [September 28, 2021, 8:50am UTC](https://discuss.elastic.co/t/whats-the-difference-between-terms-and-term-with-bool-should/285186 "2021-09-28T08:50:24Z")
I've always wondered, for example, about the following statements. A: { "bool": { "should": \[ { "term": { "userType": { "value": 0 } } }, { "term": { "userType": { "value": 1 } } }, { "term": { "use… --- ## [Translate plugin, iterate\_on and item id on fallback](https://discuss.elastic.co/t/translate-plugin-iterate-on-and-item-id-on-fallback/284205)
**Author:** [@elastic\_user\_forum](https://discuss.elastic.co/u/elastic_user_forum)\ **Replies:** 3\ **Last updated:** [September 28, 2021, 8:23am UTC](https://discuss.elastic.co/t/translate-plugin-iterate-on-and-item-id-on-fallback/284205 "2021-09-28T08:23:20Z")
Hi everyone, I'm using ELK 7.13 and I have a question about the translate filter plugin. I have the following dictionary.json { "TUTU": {"identifiant": "TRANSLATE VALUE FOR TUTU"}, "TOTO": {"identifiant": "TRANSLATE… --- ## [Error : Logstash shut down](https://discuss.elastic.co/t/error-logstash-shut-down/285307)
**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\ **Replies:** 9\ **Last updated:** [September 28, 2021, 7:59am UTC](https://discuss.elastic.co/t/error-logstash-shut-down/285307 "2021-09-28T07:59:03Z")
Hello friends, I got this error while trying to transfer data to Elasticsearch with logstash. Actually, the transfer started, some data was transferred, but then it gave this error. Does anyone have an idea what could be… --- ## [Join two index ( metricbeat & business )](https://discuss.elastic.co/t/join-two-index-metricbeat-business/285318)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 2\ **Last updated:** [September 28, 2021, 7:40am UTC](https://discuss.elastic.co/t/join-two-index-metricbeat-business/285318 "2021-09-28T07:40:31Z")
Hello! I will explain my case with an example. I have 2 indexes, one of them is the created by metricbeat and the other is an index that contains business data of my company. I would like to create a canvas. This canv… --- ## [Cannot read properties of undefined (reading 'statusCode')](https://discuss.elastic.co/t/cannot-read-properties-of-undefined-reading-statuscode/285141)
**Author:** [@Mohammad.ali](https://discuss.elastic.co/u/Mohammad.ali)\ **Replies:** 4\ **Last updated:** [September 28, 2021, 7:25am UTC](https://discuss.elastic.co/t/cannot-read-properties-of-undefined-reading-statuscode/285141 "2021-09-28T07:25:03Z")
Hello everyone currently iam using kibana 7.6.1..i have a index with more than 4k fields and what i need to do is to refresh field list regarding our developer created new fields ..when i do that it takes long time and… --- ## [Async delete by query in elastic search spawns never ending tasks](https://discuss.elastic.co/t/async-delete-by-query-in-elastic-search-spawns-never-ending-tasks/285226)
**Author:** [@ThijsBM](https://discuss.elastic.co/u/ThijsBM)\ **Replies:** 4\ **Last updated:** [September 28, 2021, 7:09am UTC](https://discuss.elastic.co/t/async-delete-by-query-in-elastic-search-spawns-never-ending-tasks/285226 "2021-09-28T07:09:11Z")
We have a lot of data in our index that is tagged by an ownerId which resembles a customer. Every customer has the ability to define its own retention period. After the retention period is passed all the documents that a… --- ## [Why the thread\_pool.bulk.size must be \<= 17](https://discuss.elastic.co/t/why-the-thread-pool-bulk-size-must-be-17/285315)
**Author:** [@dzw-tw](https://discuss.elastic.co/u/dzw-tw)\ **Replies:** 1\ **Last updated:** [September 28, 2021, 7:05am UTC](https://discuss.elastic.co/t/why-the-thread-pool-bulk-size-must-be-17/285315 "2021-09-28T07:05:58Z")
--- ## [Timestamp is wrong](https://discuss.elastic.co/t/timestamp-is-wrong/285310)
**Author:** [@cjw0202](https://discuss.elastic.co/u/cjw0202)\ **Replies:** 1\ **Last updated:** [September 28, 2021, 6:52am UTC](https://discuss.elastic.co/t/timestamp-is-wrong/285310 "2021-09-28T06:52:59Z")
ES 7.4 i use my custom timestamp, but the response timestamp is started at 1970 mapping: { "properties": { "hostName": { "type": "text", "fields": { "keyword": { "ignore\_above": … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=815) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=817)