# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=838 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 839 --- ## [Reduce number of shards to the same index?](https://discuss.elastic.co/t/reduce-number-of-shards-to-the-same-index/283186)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 2\ **Last updated:** [September 2, 2021, 3:27pm UTC](https://discuss.elastic.co/t/reduce-number-of-shards-to-the-same-index/283186 "2021-09-02T15:27:07Z")
Hello I know of the reindex and shrink API calls BUT Im trying to see how to do it without creating a new index (or better yet, without touching the creation date of each index) How can I do this? --- ## [No connection could be made because the target machine actively refused it](https://discuss.elastic.co/t/no-connection-could-be-made-because-the-target-machine-actively-refused-it/283179)
**Author:** [@sarac1](https://discuss.elastic.co/u/sarac1)\ **Replies:** 2\ **Last updated:** [September 2, 2021, 2:54pm UTC](https://discuss.elastic.co/t/no-connection-could-be-made-because-the-target-machine-actively-refused-it/283179 "2021-09-02T14:54:50Z")
Hi, I see this issue comes up often. However the answers in the posts I've looked at have no fixed my issue, I've gotten closer, but not all the way. I have a single ELK system from the latest bitnami 7.14 image. I am… --- ## [Logstash: how to concatenate static field with dynamic field?](https://discuss.elastic.co/t/logstash-how-to-concatenate-static-field-with-dynamic-field/283183)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 1\ **Last updated:** [September 2, 2021, 2:47pm UTC](https://discuss.elastic.co/t/logstash-how-to-concatenate-static-field-with-dynamic-field/283183 "2021-09-02T14:47:37Z")
I'm trying to prepend a static variable to identify certain hosts mutate { add\_field =\> { "\[host\]\[hostname\]" =\> "UK\_\_\[app\]\[host\]" } } I need to preprend "UK\_\_" to all fields of app.host field. But the a… --- ## [Update "Living" values using update by query](https://discuss.elastic.co/t/update-living-values-using-update-by-query/281996)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 2\ **Last updated:** [September 2, 2021, 2:22pm UTC](https://discuss.elastic.co/t/update-living-values-using-update-by-query/281996 "2021-09-02T14:22:08Z")
Hi, I'm attempting to create a "score" field that will hold a value that will change whenever the sum of other fields change, but I'm not sure if this is feasible with update-by-query. For example, if I wanted to create… --- ## [Create Multiple Indexes from filebeat](https://discuss.elastic.co/t/create-multiple-indexes-from-filebeat/283163)
**Author:** [@rahul\_sirugudi](https://discuss.elastic.co/u/rahul_sirugudi)\ **Replies:** 2\ **Last updated:** [September 2, 2021, 1:54pm UTC](https://discuss.elastic.co/t/create-multiple-indexes-from-filebeat/283163 "2021-09-02T13:54:57Z")
Hi, I am new to ELK stack. I am trying to set up logs for applications. In total we have 29 applications (deb). running in both (autoscaling and spot-fleet in aws). My idea is to use one filebeat configuration on all the… --- ## [Elasticsearch and Kibana network.host CIDR?](https://discuss.elastic.co/t/elasticsearch-and-kibana-network-host-cidr/282612)
**Author:** [@Tydorius](https://discuss.elastic.co/u/Tydorius)\ **Replies:** 3\ **Last updated:** [September 2, 2021, 1:51pm UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-network-host-cidr/282612 "2021-09-02T13:51:50Z")
Good afternoon (At least, for EST) - Do the various hosts field in the elasticsearch.yml and kibana.yml file support CIDR for restricting access to specific subnets? I attempted to set network.host: 10.0.0.0/24 And E… --- ## [Multiple workers fail to process CSV files when auto detect column names is set](https://discuss.elastic.co/t/multiple-workers-fail-to-process-csv-files-when-auto-detect-column-names-is-set/283121)
**Author:** [@ylmp](https://discuss.elastic.co/u/ylmp)\ **Replies:** 2\ **Last updated:** [September 2, 2021, 1:37pm UTC](https://discuss.elastic.co/t/multiple-workers-fail-to-process-csv-files-when-auto-detect-column-names-is-set/283121 "2021-09-02T13:37:10Z")
The issue described here is related to CSV filter plugin with autodetect\_column\_names set. I experience inconsistent behavior when processing CSV files with multiple workers. Seems that the first line in the file is re… --- ## [Service will not start (RHE7)](https://discuss.elastic.co/t/service-will-not-start-rhe7/282591)
**Author:** [@stacey](https://discuss.elastic.co/u/stacey)\ **Replies:** 7\ **Last updated:** [September 2, 2021, 1:09pm UTC](https://discuss.elastic.co/t/service-will-not-start-rhe7/282591 "2021-09-02T13:09:22Z")
Hi I have installed elasticsearch via the rpm as per the documentation. But I am unable to start the elasticsearch service, but running directly works (with warnings). ES 7.14.0 JDK (bundled): openjdk version "16.0.… --- ## [Parse nested JSON data into logstash](https://discuss.elastic.co/t/parse-nested-json-data-into-logstash/283039)
**Author:** [@Magesh\_02](https://discuss.elastic.co/u/Magesh_02)\ **Replies:** 3\ **Last updated:** [September 2, 2021, 1:05pm UTC](https://discuss.elastic.co/t/parse-nested-json-data-into-logstash/283039 "2021-09-02T13:05:31Z")
New to ELK stack, trying to import my JSON data into elastic serach, but its fails, since my json input is nested types. I have tried many solution but still i could not able to get. here is my input { "Folders": \[ … --- ## [Difference of min and max aggregation for missing values](https://discuss.elastic.co/t/difference-of-min-and-max-aggregation-for-missing-values/283158)
**Author:** [@str8y](https://discuss.elastic.co/u/str8y)\ **Replies:** 0\ **Last updated:** [September 2, 2021, 10:53am UTC](https://discuss.elastic.co/t/difference-of-min-and-max-aggregation-for-missing-values/283158 "2021-09-02T10:53:18Z")
Hi, I'm trying to understand the difference of the min and max aggregation for documents where all field values are missing. Let's imagine the following simple document: PUT /test/\_doc/1 { "name": "A", "number": n… --- ## [Send openshift metricbeat to remote elasticsearch's custom index](https://discuss.elastic.co/t/send-openshift-metricbeat-to-remote-elasticsearchs-custom-index/283155)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 0\ **Last updated:** [September 2, 2021, 10:18am UTC](https://discuss.elastic.co/t/send-openshift-metricbeat-to-remote-elasticsearchs-custom-index/283155 "2021-09-02T10:18:27Z")
Can anyone tell me how to send the metricbeat data from from openshift to remote elasticsearch custom index? In regular metricbeat yaml file, we have these config: setup.template.enabled: true setup.template.name: "me… --- ## [Kibana KQL issue, Greater than does not work for event.duration field](https://discuss.elastic.co/t/kibana-kql-issue-greater-than-does-not-work-for-event-duration-field/282943)
**Author:** [@geekzy](https://discuss.elastic.co/u/geekzy)\ **Replies:** 3\ **Last updated:** [September 2, 2021, 10:01am UTC](https://discuss.elastic.co/t/kibana-kql-issue-greater-than-does-not-work-for-event-duration-field/282943 "2021-09-02T10:01:32Z")
I am currently on using Kibana v7.13.3. I am ingesting zeek logs into my elastic stack and trying to filter by event duration that exceeds a specific time frame. I have tried using the following basic KQL to filter by: e… --- ## [Wrap text in dashboard table](https://discuss.elastic.co/t/wrap-text-in-dashboard-table/283107)
**Author:** [@elastic9](https://discuss.elastic.co/u/elastic9)\ **Replies:** 1\ **Last updated:** [September 2, 2021, 9:27am UTC](https://discuss.elastic.co/t/wrap-text-in-dashboard-table/283107 "2021-09-02T09:27:48Z")
I'm currently on Kibana 7.13.3, and was wondering if it was possible to wrap text in tables made in the dashboard. I've got long text entries, and when visualising them in the dashboard tables, they seem to just truncate… --- ## [Ability to manipulate the slope "m" of linear function used to boost relevance scores](https://discuss.elastic.co/t/ability-to-manipulate-the-slope-m-of-linear-function-used-to-boost-relevance-scores/283144)
**Author:** [@jsandeep316](https://discuss.elastic.co/u/jsandeep316)\ **Replies:** 0\ **Last updated:** [September 2, 2021, 8:37am UTC](https://discuss.elastic.co/t/ability-to-manipulate-the-slope-m-of-linear-function-used-to-boost-relevance-scores/283144 "2021-09-02T08:37:28Z")
Hi there, I have a use case where I need to augment the text based relevance scoring (such as TF-IDF) with a linear function. However, when I went through the Elasticsearch documentation, nowhere does it mention that the… --- ## [Ищу специалиста на Эластике](https://discuss.elastic.co/t/topic/283142)
**Author:** [@drumns](https://discuss.elastic.co/u/drumns)\ **Replies:** 0\ **Last updated:** [September 2, 2021, 8:18am UTC](https://discuss.elastic.co/t/topic/283142 "2021-09-02T08:18:03Z")
Всем добрый день! Нужен специалист по работе Эластика с БэкЭндом Есть ряд задач, нужен специалист по работе Эластика с БэкЭндом, способный их решать. Проект и подробности сброшу откликнувшимся. Не бесплатно, понятное… --- ## [Cardinality agg off by one even after precision increase](https://discuss.elastic.co/t/cardinality-agg-off-by-one-even-after-precision-increase/283096)
**Author:** [@matt.snyder](https://discuss.elastic.co/u/matt.snyder)\ **Replies:** 1\ **Last updated:** [September 2, 2021, 7:50am UTC](https://discuss.elastic.co/t/cardinality-agg-off-by-one-even-after-precision-increase/283096 "2021-09-02T07:50:06Z")
Docs in my index have a unique id field, which I want to count using a cardinality agg. I found that if my result set is 5792 docs or smaller, the cardinality agg is accurate, but if I go to 5793 or larger, the cardinal… --- ## [Uptime Monitor - An internal server error](https://discuss.elastic.co/t/uptime-monitor-an-internal-server-error/282296)
**Author:** [@Henry943](https://discuss.elastic.co/u/Henry943)\ **Replies:** 4\ **Last updated:** [September 2, 2021, 7:52am UTC](https://discuss.elastic.co/t/uptime-monitor-an-internal-server-error/282296 "2021-09-02T07:52:53Z")
Hi, Kibana uptime monitor showing "An internal server error occurred". And we couldnt view any details in the Kibana uptime monitor. But we could see the nodes document under Discover. And also, in heartbeat indices … --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/282925)
**Author:** [@Alvaro\_Eixea](https://discuss.elastic.co/u/Alvaro_Eixea)\ **Replies:** 6\ **Last updated:** [September 2, 2021, 7:21am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/282925 "2021-09-02T07:21:54Z")
Hi, I have upgrade my monolithic server using these guide: Upgrade Elasticsearch, Filebeat and Kibana - Upgrade guide Now ,i have my server broken, kibana show always the message "kibana server is not ready yet" on scr… --- ## [How to delete all the elasticsearch indices, that start with a certain string, based on date ranges](https://discuss.elastic.co/t/how-to-delete-all-the-elasticsearch-indices-that-start-with-a-certain-string-based-on-date-ranges/283063)
**Author:** [@JaswantG](https://discuss.elastic.co/u/JaswantG)\ **Replies:** 7\ **Last updated:** [September 2, 2021, 6:03am UTC](https://discuss.elastic.co/t/how-to-delete-all-the-elasticsearch-indices-that-start-with-a-certain-string-based-on-date-ranges/283063 "2021-09-02T06:03:05Z")
I am using elasticsearch 2.2.0. I have a requirement wherein I have to delete certain indices, which are created on a day-to-day basis, based on two different dates. (format - abc-xyz-yyyy-mm-dd) For e.g. - There are 1… --- ## [Logstash CSV Output all fields are not working](https://discuss.elastic.co/t/logstash-csv-output-all-fields-are-not-working/282985)
**Author:** [@yogicd](https://discuss.elastic.co/u/yogicd)\ **Replies:** 2\ **Last updated:** [September 2, 2021, 5:55am UTC](https://discuss.elastic.co/t/logstash-csv-output-all-fields-are-not-working/282985 "2021-09-02T05:55:32Z")
Hello, I am testing to get the all the data in .CSV file and unable to get the all the fields and nested in the.CSV file,My config file as below input { stdin {} beats { port =\> 5044 } } output { csv { #fields … --- ## [Elasticsearch.service: Failed with result 'exit-code'](https://discuss.elastic.co/t/elasticsearch-service-failed-with-result-exit-code/283123)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 7\ **Last updated:** [September 2, 2021, 5:51am UTC](https://discuss.elastic.co/t/elasticsearch-service-failed-with-result-exit-code/283123 "2021-09-02T05:51:26Z")
My Elasticsearch is not starting, I don't know why I am getting below error. root@i3insight2:~# systemctl status elasticsearch.service â elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/e… --- ## [Complete newbie, but need urgent cleanup](https://discuss.elastic.co/t/complete-newbie-but-need-urgent-cleanup/282802)
**Author:** [@TwanVeugelers](https://discuss.elastic.co/u/TwanVeugelers)\ **Replies:** 7\ **Last updated:** [September 2, 2021, 5:45am UTC](https://discuss.elastic.co/t/complete-newbie-but-need-urgent-cleanup/282802 "2021-09-02T05:45:41Z")
Hi. I have taken over the monitoring / elastic search from a colleague that left the company. I now see that our D drive is almost reaching its limits and will be full pretty shortly. I'm a full newbie and need to lea… --- ## [Mail log event correlation](https://discuss.elastic.co/t/mail-log-event-correlation/283115)
**Author:** [@mherbert](https://discuss.elastic.co/u/mherbert)\ **Replies:** 11\ **Last updated:** [September 2, 2021, 5:25am UTC](https://discuss.elastic.co/t/mail-log-event-correlation/283115 "2021-09-02T05:25:51Z")
Apologies, I don't know whether this is the correct forum for this question, please bear with me. I have an elasticsearch index containing mail logging events from syslog, however as with postfix the complete transactio… --- ## [Attempted to resurrect connection to dead ES instance in secure ELK](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-in-secure-elk/282989)
**Author:** [@kiran80511](https://discuss.elastic.co/u/kiran80511)\ **Replies:** 2\ **Last updated:** [September 2, 2021, 4:56am UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-in-secure-elk/282989 "2021-09-02T04:56:48Z")
Hi, I am using version 7.14 for elasticsearch, logstash and kibana . In logstash log I got this error: Sep 01 10:43:09 elastic.sys logstash\[2975\]: \[2021-09-01T10:43:09,352\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]… --- ## [Watcher soporta multiples fuentes](https://discuss.elastic.co/t/watcher-soporta-multiples-fuentes/281871)
**Author:** [@EduardoM](https://discuss.elastic.co/u/EduardoM)\ **Replies:** 3\ **Last updated:** [August 24, 2021, 9:00pm UTC](https://discuss.elastic.co/t/watcher-soporta-multiples-fuentes/281871 "2021-08-24T21:00:48Z")
¡Hola a todos!! Espero que estén bien, está preguntándome si se puede tener un Watcher con dos o más fuentes de información por ejemplo: "data": \[ { "name": "max", "url": { "index": "iot… --- ## [Failed to authenticate user \[kibana\_system\]](https://discuss.elastic.co/t/failed-to-authenticate-user-kibana-system/282864)
**Author:** [@yyyayo](https://discuss.elastic.co/u/yyyayo)\ **Replies:** 3\ **Last updated:** [September 2, 2021, 2:38am UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-kibana-system/282864 "2021-09-02T02:38:14Z")
When I tried Kibana development, I ran the following commands: yarn es snapshot --license trial yarn start --run-examples Then I encountered an error in Elasticsearch: failed to retrieve password hash for reserved use… --- ## [Threat intelligence module](https://discuss.elastic.co/t/threat-intelligence-module/282766)
**Author:** [@Servando\_Dominguez](https://discuss.elastic.co/u/Servando_Dominguez)\ **Replies:** 3\ **Last updated:** [September 2, 2021, 2:20am UTC](https://discuss.elastic.co/t/threat-intelligence-module/282766 "2021-09-02T02:20:57Z")
Hi there! Alert for a maybe, a stupid question. I want to enable the thread intelligence module from diferent resources. I click enable in Kibana and go to the documentation: My question is, where I put this config/… --- ## [Logstash is not able to connect to ELasticsearch](https://discuss.elastic.co/t/logstash-is-not-able-to-connect-to-elasticsearch/282206)
**Author:** [@Aboli\_77](https://discuss.elastic.co/u/Aboli_77)\ **Replies:** 12\ **Last updated:** [September 2, 2021, 1:07am UTC](https://discuss.elastic.co/t/logstash-is-not-able-to-connect-to-elasticsearch/282206 "2021-09-02T01:07:40Z")
I am trying to run logstash but getting below error: ./logstash -f /etc/logstash/conf.d/abc.conf WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the p… --- ## [Kibana UI refused to connect](https://discuss.elastic.co/t/kibana-ui-refused-to-connect/283093)
**Author:** [@peter\_murphy](https://discuss.elastic.co/u/peter_murphy)\ **Replies:** 2\ **Last updated:** [September 1, 2021, 10:28pm UTC](https://discuss.elastic.co/t/kibana-ui-refused-to-connect/283093 "2021-09-01T22:28:57Z")
Hi I'm having trouble accessing the Kibana UI in my browser. I'm sure it's something in the config but I can't tell what. I can successfully curl localhost:9200 on the server but not localhost:5601, and I cannot curl eit… --- ## [Elasticsearch.service has failed (code=exited, status=143)](https://discuss.elastic.co/t/elasticsearch-service-has-failed-code-exited-status-143/283072)
**Author:** [@larzu](https://discuss.elastic.co/u/larzu)\ **Replies:** 1\ **Last updated:** [September 1, 2021, 10:17pm UTC](https://discuss.elastic.co/t/elasticsearch-service-has-failed-code-exited-status-143/283072 "2021-09-01T22:17:09Z")
I'm a "bit" lost with this Elasticsearch installation (for Magento). I was following the installation for Centos Install Elasticsearch with RPM | Elasticsearch Guide \[7.14\] | Elastic Unfortunately Elasticsearch is not s… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=837) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=839)