# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=854 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 855 --- ## [Duplicate a document on elasticsearch](https://discuss.elastic.co/t/duplicate-a-document-on-elasticsearch/281504)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [August 16, 2021, 6:22am UTC](https://discuss.elastic.co/t/duplicate-a-document-on-elasticsearch/281504 "2021-08-16T06:22:50Z")
Hi, I want to create a duplicate document entry in elasticsearch as it has 40 fields associated with it. Also i want to create another document entry with just 1 fields altered. Which command to go about ? --- ## [Jar file version for logstash jdbc input](https://discuss.elastic.co/t/jar-file-version-for-logstash-jdbc-input/281353)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 1\ **Last updated:** [August 16, 2021, 5:20am UTC](https://discuss.elastic.co/t/jar-file-version-for-logstash-jdbc-input/281353 "2021-08-16T05:20:29Z")
I am trying to pull in data from a MS SQL Server database via logstash that is hosted on a linux server. It looks like this is a great job for the JDBC input plugin. I am going through the example config posted on the d… --- ## [Search thread pool active and queue not full but rejected happened](https://discuss.elastic.co/t/search-thread-pool-active-and-queue-not-full-but-rejected-happened/281494)
**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\ **Replies:** 7\ **Last updated:** [August 16, 2021, 4:20am UTC](https://discuss.elastic.co/t/search-thread-pool-active-and-queue-not-full-but-rejected-happened/281494 "2021-08-16T04:20:12Z")
i found a datanode search thread pool has rejected，but grafana monitor show that moment search threap\_pool ’s active(size=49) and queue(size=2000) is not full，I can't understand why ，please help me。thanks a lot... --- ## [Elastic search configuration with kibana and nodes](https://discuss.elastic.co/t/elastic-search-configuration-with-kibana-and-nodes/281431)
**Author:** [@Dilnawaz\_Khan](https://discuss.elastic.co/u/Dilnawaz_Khan)\ **Replies:** 1\ **Last updated:** [August 16, 2021, 2:51am UTC](https://discuss.elastic.co/t/elastic-search-configuration-with-kibana-and-nodes/281431 "2021-08-16T02:51:33Z")
I have 2 master node of elasticsearch 7.5.2 and 3 data nodes & 1 seperate node for kibana following is the config files. Elasticsearch master1 & master2 ( elasticssearch.yml ) cluster.name: Es\_Cluster node.name: ES\_ma… --- ## [Custom index does NOT show in Kibana](https://discuss.elastic.co/t/custom-index-does-not-show-in-kibana/281490)
**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\ **Replies:** 3\ **Last updated:** [August 15, 2021, 11:08pm UTC](https://discuss.elastic.co/t/custom-index-does-not-show-in-kibana/281490 "2021-08-15T23:08:56Z")
I'm outputting a custom index from Logstash to Elastisearch but it won't show in KIbana's main dashboards (e.g. Security panel / data sources). While it will show in index management in settings. Here is the how out… --- ## [Kibana 7.14 - fresh installation fails \[Starting saved objects migrations - action failed\]](https://discuss.elastic.co/t/kibana-7-14-fresh-installation-fails-starting-saved-objects-migrations-action-failed/281385)
**Author:** [@Dostoyevsky](https://discuss.elastic.co/u/Dostoyevsky)\ **Replies:** 1\ **Last updated:** [August 15, 2021, 10:43pm UTC](https://discuss.elastic.co/t/kibana-7-14-fresh-installation-fails-starting-saved-objects-migrations-action-failed/281385 "2021-08-15T22:43:53Z")
Hi everyone, note that this is a fresh install, not an upgrade, also elasticsearch is running i am attempting to run Kibana on my local win10 machine, however, am faced with the following message : log \[18:58:43.305… --- ## [Удалить/очистить данные с конкретным тегом в индексе](https://discuss.elastic.co/t/topic/280908)
**Author:** [@cva](https://discuss.elastic.co/u/cva)\ **Replies:** 5\ **Last updated:** [August 13, 2021, 1:50pm UTC](https://discuss.elastic.co/t/topic/280908 "2021-08-13T13:50:12Z")
Hi! Имеется индекс test, в нем несколько тегов: tags1, tags2, tags3. К tags1 относятся данные из jdbc запроса к БД. Я изменил запрос к БД (добавил поля) и теперь хочу очистить все данные с tags1 и создать их заново, к… --- ## [Understanding elasticsearch certiifcate](https://discuss.elastic.co/t/understanding-elasticsearch-certiifcate/281482)
**Author:** [@naaviin](https://discuss.elastic.co/u/naaviin)\ **Replies:** 1\ **Last updated:** [August 15, 2021, 5:00pm UTC](https://discuss.elastic.co/t/understanding-elasticsearch-certiifcate/281482 "2021-08-15T17:00:31Z")
i saw there 2 type of certificate which is elastic-stack-ca.p12 and elastic-certificates.p12. What are the differences between this 2 certificate https://www.elastic.co/guide/en/elasticsearch/reference/current/security-… --- ## [Cold data node is not starting after restart the ES service 7.7.0](https://discuss.elastic.co/t/cold-data-node-is-not-starting-after-restart-the-es-service-7-7-0/281474)
**Author:** [@alicango](https://discuss.elastic.co/u/alicango)\ **Replies:** 2\ **Last updated:** [August 15, 2021, 10:29am UTC](https://discuss.elastic.co/t/cold-data-node-is-not-starting-after-restart-the-es-service-7-7-0/281474 "2021-08-15T10:29:51Z")
Hi, I am getting below exception after restart the ES service; journalctl -xe systemd-entrypoint\[4842\]: Exception in thread "main" org.apache.lucene.index.CorruptIndexException: codec header mismatch: actual header=10… --- ## [Scripting - custom script to generate span query?](https://discuss.elastic.co/t/scripting-custom-script-to-generate-span-query/281470)
**Author:** [@byteandbit](https://discuss.elastic.co/u/byteandbit)\ **Replies:** 0\ **Last updated:** [August 15, 2021, 5:08am UTC](https://discuss.elastic.co/t/scripting-custom-script-to-generate-span-query/281470 "2021-08-15T05:08:23Z")
Our search use case uses Span Queries. Due to the nature of our data and Span Queries the "query" definition has to be always dynamic as we have to analyse the search text, eg: "quick brown fox" -\> { "query": { "s… --- ## [Tags for security-related encoding issues](https://discuss.elastic.co/t/tags-for-security-related-encoding-issues/281466)
**Author:** [@cknz](https://discuss.elastic.co/u/cknz)\ **Replies:** 0\ **Last updated:** [August 14, 2021, 11:58pm UTC](https://discuss.elastic.co/t/tags-for-security-related-encoding-issues/281466 "2021-08-14T23:58:42Z")
Let's say you have some logstash module or Ruby configuration that cleans up / parses / etc. logs, and it comes across something that would be illegal (Eg. illegal UTF-8 encoding sequence which if it were not sanitized c… --- ## [What Elasticsearch GUI admin and monitoring tools have you found that are awesome?](https://discuss.elastic.co/t/what-elasticsearch-gui-admin-and-monitoring-tools-have-you-found-that-are-awesome/281449)
**Author:** [@Jason\_Baumgartner](https://discuss.elastic.co/u/Jason_Baumgartner)\ **Replies:** 0\ **Last updated:** [August 14, 2021, 4:09pm UTC](https://discuss.elastic.co/t/what-elasticsearch-gui-admin-and-monitoring-tools-have-you-found-that-are-awesome/281449 "2021-08-14T16:09:44Z")
We all know that Kibana is an amazing product, but I'm curious what tools the rest of the ES community is using to monitor the health of their cluster and tools that help simplify administration of an Elasticsearch clust… --- ## [Order of CTX operators?](https://discuss.elastic.co/t/order-of-ctx-operators/281442)
**Author:** [@Jason\_Baumgartner](https://discuss.elastic.co/u/Jason_Baumgartner)\ **Replies:** 0\ **Last updated:** [August 14, 2021, 2:36pm UTC](https://discuss.elastic.co/t/order-of-ctx-operators/281442 "2021-08-14T14:36:22Z")
I am trying to make an update script condition that specifies only updating a document if the retrieved\_utc is newer than the existing one and then after that, examine several other conditions. When I try to use parenthe… --- ## [Filter logs which are after a particular event](https://discuss.elastic.co/t/filter-logs-which-are-after-a-particular-event/281437)
**Author:** [@Pavan\_Kumar\_R](https://discuss.elastic.co/u/Pavan_Kumar_R)\ **Replies:** 0\ **Last updated:** [August 14, 2021, 11:12am UTC](https://discuss.elastic.co/t/filter-logs-which-are-after-a-particular-event/281437 "2021-08-14T11:12:30Z")
I have 4 applications each will write "Application started : App1", with application's name at the end. In logstash I used grok filter to extract applications name into a field 'appName', I also added tags '\_event', 'app… --- ## [Most efficient mapping for a chat search engine](https://discuss.elastic.co/t/most-efficient-mapping-for-a-chat-search-engine/281434)
**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 0\ **Last updated:** [August 14, 2021, 10:36am UTC](https://discuss.elastic.co/t/most-efficient-mapping-for-a-chat-search-engine/281434 "2021-08-14T10:36:49Z")
Hi, I'm building a new cluster to allow search on our internal chat system. Given the volume of data to index, and the budget for it, storage efficiency is a key here. Message structure: channel\_id: integer user\_id: i… --- ## [Fatal CLI Error cannot find module to-regex while starting Kibana](https://discuss.elastic.co/t/fatal-cli-error-cannot-find-module-to-regex-while-starting-kibana/279972)
**Author:** [@Ashutosh](https://discuss.elastic.co/u/Ashutosh)\ **Replies:** 2\ **Last updated:** [August 14, 2021, 8:37am UTC](https://discuss.elastic.co/t/fatal-cli-error-cannot-find-module-to-regex-while-starting-kibana/279972 "2021-08-14T08:37:52Z")
Hi All, I have installed Kibana 7.13. I am not able to start Kibana using "systemctl start kibana". I keep seeing the following errors when I run journalctl -u kibana -f fatal CLI Error cannot find module to-regex I a… --- ## [Elasticsearch start failed after the reboot the server](https://discuss.elastic.co/t/elasticsearch-start-failed-after-the-reboot-the-server/281416)
**Author:** [@alicango](https://discuss.elastic.co/u/alicango)\ **Replies:** 2\ **Last updated:** [August 14, 2021, 7:23am UTC](https://discuss.elastic.co/t/elasticsearch-start-failed-after-the-reboot-the-server/281416 "2021-08-14T07:23:52Z")
Hi, I couldn't start the elasticsearch service after reboot the server. How can i fix it? I have 3 Mater, 2 Hot, 2 Warm, 2 Cold nodes (Totaly 9 nodes) Elasticsearch version: 7.7.0 OS: CentOS Linux release 8.1.1911 (C… --- ## [Kibana 7.12.0 Index fields are summed by day](https://discuss.elastic.co/t/kibana-7-12-0-index-fields-are-summed-by-day/280860)
**Author:** [@zhyp](https://discuss.elastic.co/u/zhyp)\ **Replies:** 2\ **Last updated:** [August 14, 2021, 7:06am UTC](https://discuss.elastic.co/t/kibana-7-12-0-index-fields-are-summed-by-day/280860 "2021-08-14T07:06:16Z")
Hi I have an index. Its structure is as follows: Date Hour time Number of hours Number of dates I want the number of dates to automatically add up by day. Calculation formula: Number of dates = Number of… --- ## [How to use @elastic/ecs-winston-format with winston-elasticsearch](https://discuss.elastic.co/t/how-to-use-elastic-ecs-winston-format-with-winston-elasticsearch/281418)
**Author:** [@kkireyev](https://discuss.elastic.co/u/kkireyev)\ **Replies:** 0\ **Last updated:** [August 14, 2021, 2:03am UTC](https://discuss.elastic.co/t/how-to-use-elastic-ecs-winston-format-with-winston-elasticsearch/281418 "2021-08-14T02:03:52Z")
Hi! I'm trying to long events from Javascript (especially from express application) to ELK. I can write to console just fine: const ecsFormat = require('@elastic/ecs-winston-format'); const myLogger = winston.createLogg… --- ## [Parsing an existing field further](https://discuss.elastic.co/t/parsing-an-existing-field-further/281389)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 5\ **Last updated:** [August 13, 2021, 11:53pm UTC](https://discuss.elastic.co/t/parsing-an-existing-field-further/281389 "2021-08-13T23:53:05Z")
Hi, Is there way to parse the data from a single filed into 2 different fields? I have a field that contains a username and an ID that I would like to break out. So I want to assign to keep the username in the usernam… --- ## [Logstash Indexing Questions](https://discuss.elastic.co/t/logstash-indexing-questions/281415)
**Author:** [@timtom935](https://discuss.elastic.co/u/timtom935)\ **Replies:** 1\ **Last updated:** [August 13, 2021, 11:15pm UTC](https://discuss.elastic.co/t/logstash-indexing-questions/281415 "2021-08-13T23:15:23Z")
Hello I have been setting up a proof of concept elastic stack for our company. We had data flowing through the elastic stack without errors when we were just shipping the Winlogbeat data directly to Kibana. All of the W… --- ## [Add term filter query](https://discuss.elastic.co/t/add-term-filter-query/281012)
**Author:** [@Jose\_Manuel\_Tirado](https://discuss.elastic.co/u/Jose_Manuel_Tirado)\ **Replies:** 0\ **Last updated:** [August 11, 2021, 8:17am UTC](https://discuss.elastic.co/t/add-term-filter-query/281012 "2021-08-11T08:17:07Z")
HI: I am using this query to fetch elastic data through python connector: { "query": {"range": {"nuanceTimestamp": {"gte": f"{date1}T{str(hour\_in).zfill(2)}:00:00Z", … --- ## [Need ELK REST API for view alerts which meet threshold value](https://discuss.elastic.co/t/need-elk-rest-api-for-view-alerts-which-meet-threshold-value/281289)
**Author:** [@prashant.j.singh](https://discuss.elastic.co/u/prashant.j.singh)\ **Replies:** 1\ **Last updated:** [August 13, 2021, 10:37pm UTC](https://discuss.elastic.co/t/need-elk-rest-api-for-view-alerts-which-meet-threshold-value/281289 "2021-08-13T22:37:38Z")
MY ELK APM version is 7.14 - licence Free basics . please suggest or help me how can view all alert or any API those alert meet threshold value. using alert connector : server log and index --- ## [Kibana Enhanced Table Plugin - Computed columns issue](https://discuss.elastic.co/t/kibana-enhanced-table-plugin-computed-columns-issue/281351)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [August 13, 2021, 10:29pm UTC](https://discuss.elastic.co/t/kibana-enhanced-table-plugin-computed-columns-issue/281351 "2021-08-13T22:29:16Z")
Hi , I'm using Kibana - Elasticsearch Plugin - Enhanced Table. Issue is I can create computed columns for fields in buckets like terms, filters etc. I cannot create computed columns for fields in metrics aggregation l… --- ## [ELK APM : Select a connector type "Index" - where can view these alert](https://discuss.elastic.co/t/elk-apm-select-a-connector-type-index-where-can-view-these-alert/281288)
**Author:** [@prashant.j.singh](https://discuss.elastic.co/u/prashant.j.singh)\ **Replies:** 1\ **Last updated:** [August 13, 2021, 10:10pm UTC](https://discuss.elastic.co/t/elk-apm-select-a-connector-type-index-where-can-view-these-alert/281288 "2021-08-13T22:10:33Z")
I have enabled connector Type "index" in kibana 7.14 and apply index connector. please help where can view these alert for index connector . Any have API or log ? ELK APM Detail : Kibaban 7.14 , Elasticserach 7.14 --- ## [Significant Terms with multi word results](https://discuss.elastic.co/t/significant-terms-with-multi-word-results/281394)
**Author:** [@Barrett\_Jones](https://discuss.elastic.co/u/Barrett_Jones)\ **Replies:** 1\ **Last updated:** [August 13, 2021, 10:07pm UTC](https://discuss.elastic.co/t/significant-terms-with-multi-word-results/281394 "2021-08-13T22:07:02Z")
I have an ElasticSearch index that includes a "text" field that I would like to do ElasticSearch significant\_terms aggregation on to determine meaningful terms and phrases from the "text" field. The problem I am facing, … --- ## [Exclude duplicate data](https://discuss.elastic.co/t/exclude-duplicate-data/281226)
**Author:** [@dcarpio080](https://discuss.elastic.co/u/dcarpio080)\ **Replies:** 1\ **Last updated:** [August 13, 2021, 10:02pm UTC](https://discuss.elastic.co/t/exclude-duplicate-data/281226 "2021-08-13T22:02:31Z")
Hello, Could you please help me to exclude the duplicate data from some charts that I'm creating for our executive team, basically I want to count the last update for each ticket, but It seems It is counting all the tic… --- ## [DLQ pipeline not showing fields added in the filter section of the Logstash pipeline in the datastream](https://discuss.elastic.co/t/dlq-pipeline-not-showing-fields-added-in-the-filter-section-of-the-logstash-pipeline-in-the-datastream/281383)
**Author:** [@mguttula](https://discuss.elastic.co/u/mguttula)\ **Replies:** 2\ **Last updated:** [August 13, 2021, 10:02pm UTC](https://discuss.elastic.co/t/dlq-pipeline-not-showing-fields-added-in-the-filter-section-of-the-logstash-pipeline-in-the-datastream/281383 "2021-08-13T22:02:25Z")
Elastic stack 7.13 version. Winlogbeat messages are ingested into Elasticsearch cluster and the dead letter queue is filling up and causing "/var/log/messages" to fill up as well with messages containing "cannot write ev… --- ## [Issue with 7.14 ES query failed: java.io.IOException: ElasticsearchException\[Invalid or missing build flavor \[oss\]\]](https://discuss.elastic.co/t/issue-with-7-14-es-query-failed-java-io-ioexception-elasticsearchexception-invalid-or-missing-build-flavor-oss/281396)
**Author:** [@elastic-sss](https://discuss.elastic.co/u/elastic-sss)\ **Replies:** 3\ **Last updated:** [August 13, 2021, 10:01pm UTC](https://discuss.elastic.co/t/issue-with-7-14-es-query-failed-java-io-ioexception-elasticsearchexception-invalid-or-missing-build-flavor-oss/281396 "2021-08-13T22:01:03Z")
Hi, My queries are working fine with ES 7.13.4 but when I upgraded to 7.14.0 I get this error ""class java.lang.IllegalStateException:ES query failed: java.io.IOException: ElasticsearchException\[Invalid or missing build… --- ## [7.14.0 no cURL disable](https://discuss.elastic.co/t/7-14-0-no-curl-disable/281381)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 4\ **Last updated:** [August 13, 2021, 9:56pm UTC](https://discuss.elastic.co/t/7-14-0-no-curl-disable/281381 "2021-08-13T21:56:10Z")
I upgraded 7.14.0 and now I don't have option to copy my sql that I test on dev tool to copy as cURL is there a switch or it is disable due to license issue. I have basic free license [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=853) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=855)