# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=824 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 825 --- ## [How run autotest if elasticsearch in kubernetes?](https://discuss.elastic.co/t/how-run-autotest-if-elasticsearch-in-kubernetes/284604)
**Author:** [@patsevanton](https://discuss.elastic.co/u/patsevanton)\ **Replies:** 0\ **Last updated:** [September 20, 2021, 8:41am UTC](https://discuss.elastic.co/t/how-run-autotest-if-elasticsearch-in-kubernetes/284604 "2021-09-20T08:41:18Z")
Hello! I read documentation https://github.com/elastic/elasticsearch/blob/master/TESTING.asciidoc ./gradlew test -Dtests.haltonfailure=false ./gradlew test -verbose But how run autotest if elasticsearch in kubernetes? … --- ## [Sub Aggregating a terms Bucket Aggregation](https://discuss.elastic.co/t/sub-aggregating-a-terms-bucket-aggregation/284481)
**Author:** [@Manisekhar\_techo](https://discuss.elastic.co/u/Manisekhar_techo)\ **Replies:** 3\ **Last updated:** [September 20, 2021, 8:11am UTC](https://discuss.elastic.co/t/sub-aggregating-a-terms-bucket-aggregation/284481 "2021-09-20T08:11:31Z")
Hello, I have a bool Query which gives me results and terms bucket Aggregation on one of the Fields. is there a way to Aggregate each Bucket item with Date Histogram aggregation { "size": 10, "query": { … --- ## [Terms Bucket Aggregation count per Year](https://discuss.elastic.co/t/terms-bucket-aggregation-count-per-year/284487)
**Author:** [@Manisekhar\_techo](https://discuss.elastic.co/u/Manisekhar_techo)\ **Replies:** 2\ **Last updated:** [September 20, 2021, 7:34am UTC](https://discuss.elastic.co/t/terms-bucket-aggregation-count-per-year/284487 "2021-09-20T07:34:49Z")
I have a terms Bucket Aggregation, is there a way for me to get the date histogram for those individual bucket items by combining the date histogram with that date Histogram { "dates": { "date\_histogram": {… --- ## [View rollover condition](https://discuss.elastic.co/t/view-rollover-condition/284558)
**Author:** [@kmohammad](https://discuss.elastic.co/u/kmohammad)\ **Replies:** 3\ **Last updated:** [September 20, 2021, 7:24am UTC](https://discuss.elastic.co/t/view-rollover-condition/284558 "2021-09-20T07:24:15Z")
We have an elasticsearch cluster 5.6.12 which xpack didn't installed on it, new indexes created on this cluster regularly, I found the index alias and I want to see the rollover condition of that index alias but I can't … --- ## [Date histogram for Bucket Aggregation](https://discuss.elastic.co/t/date-histogram-for-bucket-aggregation/284592)
**Author:** [@Manisekhar\_techo](https://discuss.elastic.co/u/Manisekhar_techo)\ **Replies:** 0\ **Last updated:** [September 20, 2021, 5:43am UTC](https://discuss.elastic.co/t/date-histogram-for-bucket-aggregation/284592 "2021-09-20T05:43:07Z")
Hi, I have a terms bucket aggregation on a field. is there a way to get the date histogram for each of the listed Bucket items received from terms aggregation. Something like this. this isn't working but just to give t… --- ## [How i can calculate the cluster nodes size like RAM, CPU and Disk](https://discuss.elastic.co/t/how-i-can-calculate-the-cluster-nodes-size-like-ram-cpu-and-disk/283933)
**Author:** [@elastic\_dev](https://discuss.elastic.co/u/elastic_dev)\ **Replies:** 9\ **Last updated:** [September 20, 2021, 5:14am UTC](https://discuss.elastic.co/t/how-i-can-calculate-the-cluster-nodes-size-like-ram-cpu-and-disk/283933 "2021-09-20T05:14:56Z")
HI, I am trying to figure how should I calculate my nodes size, its RAM, CPU, and Disk. If I have data of around 10G. On basis of what I should calculate nodes size. Can anyone guide me, please? --- ## [Container vs Dedicated Instances Benchmarks](https://discuss.elastic.co/t/container-vs-dedicated-instances-benchmarks/284460)
**Author:** [@ithfdemir](https://discuss.elastic.co/u/ithfdemir)\ **Replies:** 1\ **Last updated:** [September 20, 2021, 4:49am UTC](https://discuss.elastic.co/t/container-vs-dedicated-instances-benchmarks/284460 "2021-09-20T04:49:08Z")
Hi, I have an Elasticsearch cluster (71 Nodes (64 data + 7 master) running in 16 dedicated servers). I'm considering about containerization for this running cluster. Is it possible? If yes, is there any benchmarks or no… --- ## [Caused by: org.elasticsearch.action.UnavailableShardsException: \[.monitoring-es-7-2021.09.17\]\[0\] primary shard is not active Timeout: \[1m\], request: \[BulkShardRequest \[\[.monitoring-es-7-2021.09.17\]\[0\]\] containing \[463\] requests\] ... 11 more](https://discuss.elastic.co/t/caused-by-org-elasticsearch-action-unavailableshardsexception-monitoring-es-7-2021-09-17-0-primary-shard-is-not-active-timeout-1m-request-bulkshardrequest-monitoring-es-7-2021-09-17-0-containing-463-requests-11-more/284520)
**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\ **Replies:** 1\ **Last updated:** [September 20, 2021, 4:34am UTC](https://discuss.elastic.co/t/caused-by-org-elasticsearch-action-unavailableshardsexception-monitoring-es-7-2021-09-17-0-primary-shard-is-not-active-timeout-1m-request-bulkshardrequest-monitoring-es-7-2021-09-17-0-containing-463-requests-11-more/284520 "2021-09-20T04:34:42Z")
How to troubleshoot the following? Caused by: org.elasticsearch.action.UnavailableShardsException: \[.monitoring-es-7-2021.09.17\]\[0\] primary shard is not active Timeout: \[1m\], request: \[BulkShardRequest \[\[.monitoring-es-… --- ## [Can't scale ElasticSearch cluster](https://discuss.elastic.co/t/cant-scale-elasticsearch-cluster/284577)
**Author:** [@mxmtrms](https://discuss.elastic.co/u/mxmtrms)\ **Replies:** 1\ **Last updated:** [September 20, 2021, 4:17am UTC](https://discuss.elastic.co/t/cant-scale-elasticsearch-cluster/284577 "2021-09-20T04:17:35Z")
Hello everyone! Prerequisites For the last year my team and I have been developing a project in which we decided to use ElasticSearch. In the early stages of development, we used a simple single-node cluster that more … --- ## [Logstash service getting restarted after trying to set keystore on \`v7.14\`](https://discuss.elastic.co/t/logstash-service-getting-restarted-after-trying-to-set-keystore-on-v7-14/284582)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 15\ **Last updated:** [September 20, 2021, 2:28am UTC](https://discuss.elastic.co/t/logstash-service-getting-restarted-after-trying-to-set-keystore-on-v7-14/284582 "2021-09-20T02:28:40Z")
Hi Team, I am trying to set logstash keystore but having hard time. I have refer below link but still its not working. (not creating keystore password from below) I am creating keystore as, echo y | /usr/share/log… --- ## [Zabbix 5.4, unable send data to Elastic Search (date field)](https://discuss.elastic.co/t/zabbix-5-4-unable-send-data-to-elastic-search-date-field/284585)
**Author:** [@denisb](https://discuss.elastic.co/u/denisb)\ **Replies:** 0\ **Last updated:** [September 20, 2021, 12:34am UTC](https://discuss.elastic.co/t/zabbix-5-4-unable-send-data-to-elastic-search-date-field/284585 "2021-09-20T00:34:49Z")
Hello everybody. There is zabbix 5.4 and Elastic Search 7.11.2. Problem: Can't send data over zabbix\_sender to the element type "zabbix trapper" Error: elastic\_writer\_flush() cannot send data to elasticsearch: index… --- ## [Failed to Parse Date Field](https://discuss.elastic.co/t/failed-to-parse-date-field/284576)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 2\ **Last updated:** [September 19, 2021, 10:34pm UTC](https://discuss.elastic.co/t/failed-to-parse-date-field/284576 "2021-09-19T22:34:18Z")
I have some CSV files I'm trying to ingest using Logstash's CVS filter plugin. I'm needing the "Date" column to represent the event time field in Kibana (rather than @timestamp, which just tells me when I imported the CS… --- ## [Kibana Showing partial data for Mulesoft API's. Urgent help needed](https://discuss.elastic.co/t/kibana-showing-partial-data-for-mulesoft-apis-urgent-help-needed/284301)
**Author:** [@haribabu.vadlapati](https://discuss.elastic.co/u/haribabu.vadlapati)\ **Replies:** 3\ **Last updated:** [September 19, 2021, 10:09pm UTC](https://discuss.elastic.co/t/kibana-showing-partial-data-for-mulesoft-apis-urgent-help-needed/284301 "2021-09-19T22:09:33Z")
Hello Elastic Community, We are using ELK Stack to monitor Mulesoft cle framework log feeding using filebeat configuration installed on Linux Servers(same servers hosting JV services). We also have different Elastic se… --- ## [Logstash bug while removing field](https://discuss.elastic.co/t/logstash-bug-while-removing-field/284562)
**Author:** [@zeoiioze](https://discuss.elastic.co/u/zeoiioze)\ **Replies:** 0\ **Last updated:** [September 19, 2021, 12:13pm UTC](https://discuss.elastic.co/t/logstash-bug-while-removing-field/284562 "2021-09-19T12:13:57Z")
Hey, I realized that the following line : remove\_field =\> \[ "\[doc\]\[vegetables\]\[%{\[tmp\_vegetable\_data\]\[name\]}\]" \] Was not only removing \[doc\]\[vegetables\]\[%{\[tmp\_vegetable\_data\]\[name\]}\], but was also like removing \[tmp\_… --- ## [Remove the number from the field, and only remain letter](https://discuss.elastic.co/t/remove-the-number-from-the-field-and-only-remain-letter/284548)
**Author:** [@zaidsalah](https://discuss.elastic.co/u/zaidsalah)\ **Replies:** 5\ **Last updated:** [September 19, 2021, 10:23am UTC](https://discuss.elastic.co/t/remove-the-number-from-the-field-and-only-remain-letter/284548 "2021-09-19T10:23:35Z")
remove the number from the field, only I want letter . in my PDF have table contain name and id, id is number when I index and using ingest attachment pipeline number will store as well like this id name 123 user… --- ## [How can I combine some mysql query events with logstash aggregate filter?](https://discuss.elastic.co/t/how-can-i-combine-some-mysql-query-events-with-logstash-aggregate-filter/284533)
**Author:** [@e-fo](https://discuss.elastic.co/u/e-fo)\ **Replies:** 2\ **Last updated:** [September 19, 2021, 6:13am UTC](https://discuss.elastic.co/t/how-can-i-combine-some-mysql-query-events-with-logstash-aggregate-filter/284533 "2021-09-19T06:13:09Z")
Hello, I implemented pipeline with JDBC input plugin, my table in mysql follow the EAV (Entity-Attribute-Value) structure, therefore I can't get all attributes that related to one user (Entity) in one row with mysql que… --- ## [Handling of gigantic unsearchable fields](https://discuss.elastic.co/t/handling-of-gigantic-unsearchable-fields/284552)
**Author:** [@typewar](https://discuss.elastic.co/u/typewar)\ **Replies:** 0\ **Last updated:** [September 19, 2021, 5:52am UTC](https://discuss.elastic.co/t/handling-of-gigantic-unsearchable-fields/284552 "2021-09-19T05:52:20Z")
Hello. I was wondering what good methods for handling gigantic fields are? Let's say a document has an array field for unique visitors of a post, so it will save the ip or the username in this array. If the post now … --- ## [How to match 2 key value pairs in unstructured string that looks like column](https://discuss.elastic.co/t/how-to-match-2-key-value-pairs-in-unstructured-string-that-looks-like-column/284541)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 10\ **Last updated:** [September 18, 2021, 7:15pm UTC](https://discuss.elastic.co/t/how-to-match-2-key-value-pairs-in-unstructured-string-that-looks-like-column/284541 "2021-09-18T19:15:51Z")
I have a document with some lines like: Example requested: 24:00:00 Example Used: 01:14:11 What I want is to have is: { "example\_requested": "24:00:00", "example\_used": 01:14:11 } What I tried (t… --- ## [Check if a field exists](https://discuss.elastic.co/t/check-if-a-field-exists/284545)
**Author:** [@zeoiioze](https://discuss.elastic.co/u/zeoiioze)\ **Replies:** 1\ **Last updated:** [September 18, 2021, 4:25pm UTC](https://discuss.elastic.co/t/check-if-a-field-exists/284545 "2021-09-18T16:25:50Z")
I'm using nested fields and a field name in the nested field name, as you can see below (example) : \[doc\]\[vegetables\]\[%{\[tmp\_data\]\[vegetable\_name\]}\]\[number\] The field above is getting created, but now, I want in anot… --- ## [Kibana dashboards and index patterns lost after delete kibana pod](https://discuss.elastic.co/t/kibana-dashboards-and-index-patterns-lost-after-delete-kibana-pod/284422)
**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\ **Replies:** 1\ **Last updated:** [September 18, 2021, 1:27pm UTC](https://discuss.elastic.co/t/kibana-dashboards-and-index-patterns-lost-after-delete-kibana-pod/284422 "2021-09-18T13:27:33Z")
Hi, I just delete the kibana pod that I build with eck and I lost all the dashboards and index patterns that I've created. I thought that that info was loaded in the .kibana index. Its theres a way that I can recover th… --- ## ["suggest\_mode": "always" doesn't work for term suggester](https://discuss.elastic.co/t/suggest-mode-always-doesnt-work-for-term-suggester/284537)
**Author:** [@Tomohiro](https://discuss.elastic.co/u/Tomohiro)\ **Replies:** 0\ **Last updated:** [September 18, 2021, 7:56am UTC](https://discuss.elastic.co/t/suggest-mode-always-doesnt-work-for-term-suggester/284537 "2021-09-18T07:56:07Z")
Hello everyone. I'm a rookie cloud developer who is working on a full stack web service. We are introducing elasticsearch to fetch suggestions of movie title. The problem is suggestions couldn't be fetched when the que… --- ## [DSL Query to search in message field for some value and it must not contain something else](https://discuss.elastic.co/t/dsl-query-to-search-in-message-field-for-some-value-and-it-must-not-contain-something-else/284450)
**Author:** [@mguttula](https://discuss.elastic.co/u/mguttula)\ **Replies:** 1\ **Last updated:** [September 18, 2021, 7:35am UTC](https://discuss.elastic.co/t/dsl-query-to-search-in-message-field-for-some-value-and-it-must-not-contain-something-else/284450 "2021-09-18T07:35:25Z")
Trying to come up with a query to search "message" field for something like "Hello" and also the field must not contain strings like "Test" "TestProcess". "UpdatingTestProcess" Below are sample messages: Message: Hel… --- ## [Disk partitioning for Elasticsearch](https://discuss.elastic.co/t/disk-partitioning-for-elasticsearch/284459)
**Author:** [@ithfdemir](https://discuss.elastic.co/u/ithfdemir)\ **Replies:** 1\ **Last updated:** [September 18, 2021, 7:29am UTC](https://discuss.elastic.co/t/disk-partitioning-for-elasticsearch/284459 "2021-09-18T07:29:08Z")
Hi, I have SAS and SSD disk coming from data center's pool. I want to setup my Elasticsearch cluster with those disks. I want to use SSDs only for recent 1 week and SAS for past. Is it possible? This setup will be ded… --- ## [Stopwords(Elasticsearch7.14+ fscrawler2.7)](https://discuss.elastic.co/t/stopwords-elasticsearch7-14-fscrawler2-7/284053)
**Author:** [@Tarik\_Bouhasse](https://discuss.elastic.co/u/Tarik_Bouhasse)\ **Replies:** 6\ **Last updated:** [September 18, 2021, 1:29am UTC](https://discuss.elastic.co/t/stopwords-elasticsearch7-14-fscrawler2-7/284053 "2021-09-18T01:29:49Z")
how to configure stopwords. I am in fscrawler2.7 and Elasticsearch7.14 --- ## [Как писать напрямую из filebeat в elasticsearch в индекс с кастомным именем (не filebeat-\*)](https://discuss.elastic.co/t/filebeat-elasticsearch-filebeat/284518)
**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\ **Replies:** 1\ **Last updated:** [September 18, 2021, 1:27am UTC](https://discuss.elastic.co/t/filebeat-elasticsearch-filebeat/284518 "2021-09-18T01:27:32Z")
Добрый день! Скажите, возможно ли напрямую писать в эластик из filebeat в индекс, имя которого отличается от filebeat? Никак не получается. Делаю такой вот конфиг: filebeat.config.inputs: enabled: true path: inputs… --- ## [Match complete line after some regex pattern](https://discuss.elastic.co/t/match-complete-line-after-some-regex-pattern/284385)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 9\ **Last updated:** [September 17, 2021, 9:57pm UTC](https://discuss.elastic.co/t/match-complete-line-after-some-regex-pattern/284385 "2021-09-17T21:57:55Z")
I have lines in document like this. \*\*\* Begin time: Sat Jun 26 21:11:14 AEST 2019 Want to assign new field begin\_time = Sat Jun 26 21:11:14 AEST 2019 This is what I tried: if x =~ /(\\bBegin time:\\s+(.\*))/ … --- ## [Pipeline.workers configuration and aggregation filter](https://discuss.elastic.co/t/pipeline-workers-configuration-and-aggregation-filter/284461)
**Author:** [@Roberto\_B](https://discuss.elastic.co/u/Roberto_B)\ **Replies:** 8\ **Last updated:** [September 17, 2021, 8:04pm UTC](https://discuss.elastic.co/t/pipeline-workers-configuration-and-aggregation-filter/284461 "2021-09-17T20:04:38Z")
Hi all, I'm going to use a brand new server with 4 vCPU and 16GB RAM, I've some pipelines (+60) and I'll run multiple pipeline (for eg: 1 pipeline for 10 "easy pipelines" 8 for "medium pipelines" and so on). Some of th… --- ## [How to decrease the response time for the first time call of Elasticsearch query?](https://discuss.elastic.co/t/how-to-decrease-the-response-time-for-the-first-time-call-of-elasticsearch-query/284361)
**Author:** [@pavan\_kalyan](https://discuss.elastic.co/u/pavan_kalyan)\ **Replies:** 5\ **Last updated:** [September 17, 2021, 7:54pm UTC](https://discuss.elastic.co/t/how-to-decrease-the-response-time-for-the-first-time-call-of-elasticsearch-query/284361 "2021-09-17T19:54:32Z")
sample query here, could anyone please help me to solve this issue. query = { "size": 20, "\_source": { "includes": \[ "xyz", "abc", 'dgs'\], }, "query": { "bool": { "mus… --- ## [Native controller process has stopped](https://discuss.elastic.co/t/native-controller-process-has-stopped/284505)
**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\ **Replies:** 1\ **Last updated:** [September 17, 2021, 6:09pm UTC](https://discuss.elastic.co/t/native-controller-process-has-stopped/284505 "2021-09-17T18:09:03Z")
I am not able to start the elasticsearch service, I am getting the following errors. I could find many discussions with the same error but didn't find solution in any of them. Below are the logs, can anyone please provi… --- ## [Parse Hostname from offline logs and then apply to all events](https://discuss.elastic.co/t/parse-hostname-from-offline-logs-and-then-apply-to-all-events/284467)
**Author:** [@sirReeall](https://discuss.elastic.co/u/sirReeall)\ **Replies:** 6\ **Last updated:** [September 17, 2021, 3:16pm UTC](https://discuss.elastic.co/t/parse-hostname-from-offline-logs-and-then-apply-to-all-events/284467 "2021-09-17T15:16:23Z")
Hi, I'm building an offline log parser using logstash, ES and Kibana. In this scenario the logs are provided in a zip from servers. They are placed in a volume mounted into the logstash container, then pushed into ES an… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=823) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=825)