# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=937

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 938

---

## [Coordination Node Client request stats](https://discuss.elastic.co/t/coordination-node-client-request-stats/272807)

<div class="topic-metadata">

**Author:** [@mani1](https://discuss.elastic.co/u/mani1)\
**Replies:** 6\
**Last updated:** [May 25, 2021, 2:25pm UTC](https://discuss.elastic.co/t/coordination-node-client-request-stats/272807 "2021-05-25T14:25:32Z")

</div>

Hi, In our Elasticsearch cluster, there are three coordinatin nodes (dedicated) which are forwarding client search requests to Hot Nodes. There is no load balancer before Coord Nodes. They are receiving client request d…

---

## [Logstash Java plugin development, faster testing w/o rebuilding ruby gem?](https://discuss.elastic.co/t/logstash-java-plugin-development-faster-testing-w-o-rebuilding-ruby-gem/273954)

<div class="topic-metadata">

**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\
**Replies:** 0\
**Last updated:** [May 25, 2021, 2:12pm UTC](https://discuss.elastic.co/t/logstash-java-plugin-development-faster-testing-w-o-rebuilding-ruby-gem/273954 "2021-05-25T14:12:10Z")

</div>

I'm putting together a Logstash Java plugin, and it's working well, but it takes a bit of time to package to a gem and install in logstash every time we want to test it. Is it possible to use something like path.plugins …

---

## [Lowercase field value](https://discuss.elastic.co/t/lowercase-field-value/273869)

<div class="topic-metadata">

**Author:** [@prosens](https://discuss.elastic.co/u/prosens)\
**Replies:** 4\
**Last updated:** [May 25, 2021, 2:08pm UTC](https://discuss.elastic.co/t/lowercase-field-value/273869 "2021-05-25T14:08:44Z")

</div>

We are using 2.4.1. We have a string field that might contain both uppercase and lowercase values. Is there a way to return it as lowercase always without reindexing the data?

---

## [Dfs\_query\_then\_fetch returns the same scores as query\_then\_fetch](https://discuss.elastic.co/t/dfs-query-then-fetch-returns-the-same-scores-as-query-then-fetch/273024)

<div class="topic-metadata">

**Author:** [@Drept](https://discuss.elastic.co/u/Drept)\
**Replies:** 2\
**Last updated:** [May 25, 2021, 2:02pm UTC](https://discuss.elastic.co/t/dfs-query-then-fetch-returns-the-same-scores-as-query-then-fetch/273024 "2021-05-25T14:02:58Z")

</div>

I have multiple indices in Elasticsearch (and the corresponding documents in Django created using django-elasticsearch-dsl). All of the indices have these settings: settings = {'number\_of\_shards': 1, …

---

## [Integer is not recognized](https://discuss.elastic.co/t/integer-is-not-recognized/273920)

<div class="topic-metadata">

**Author:** [@dinesh5](https://discuss.elastic.co/u/dinesh5)\
**Replies:** 0\
**Last updated:** [May 25, 2021, 10:57am UTC](https://discuss.elastic.co/t/integer-is-not-recognized/273920 "2021-05-25T10:57:12Z")

</div>

Hi Here is my sample data Madhya Pradesh;22.9734;78.6569;57766;764338;7558 Maharashtra;19.7515;75.7139;351005;5579897;88620 Manipur;24.6637;93.9063;6534;44089;688 Logstash considered the text and float but it doesn'…

---

## [Sort with aggregation with another aggregation in Java REST API](https://discuss.elastic.co/t/sort-with-aggregation-with-another-aggregation-in-java-rest-api/273520)

<div class="topic-metadata">

**Author:** [@Nick\_M](https://discuss.elastic.co/u/Nick_M)\
**Replies:** 1\
**Last updated:** [May 25, 2021, 1:33pm UTC](https://discuss.elastic.co/t/sort-with-aggregation-with-another-aggregation-in-java-rest-api/273520 "2021-05-25T13:33:59Z")

</div>

I created the query below and I want to execute it with the Java Client provided but I can't really find a way. GET asset-records-latest/\_search { "size": 0, "aggs": { "agg1": { "terms": { "field":…

---

## [Use multiple Elasticsearch Ingest Pipelines with Logstash Elasticsearch Output](https://discuss.elastic.co/t/use-multiple-elasticsearch-ingest-pipelines-with-logstash-elasticsearch-output/273939)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 0\
**Last updated:** [May 25, 2021, 1:23pm UTC](https://discuss.elastic.co/t/use-multiple-elasticsearch-ingest-pipelines-with-logstash-elasticsearch-output/273939 "2021-05-25T13:23:07Z")

</div>

When passing module logs through Logstash to Elasticsearch for processing by ES ingest pipelines, as described here, is it possible to specify multiple pipelines to apply in order?

---

## [Summing values of similar fields in a time range](https://discuss.elastic.co/t/summing-values-of-similar-fields-in-a-time-range/273812)

<div class="topic-metadata">

**Author:** [@Dna61](https://discuss.elastic.co/u/Dna61)\
**Replies:** 3\
**Last updated:** [May 25, 2021, 1:18pm UTC](https://discuss.elastic.co/t/summing-values-of-similar-fields-in-a-time-range/273812 "2021-05-25T13:18:25Z")

</div>

Hello, I am shipping custom log data into Elasticsearch and my source data look like this: 1621805488 foo\_126 cpu 0.62 1621805488 foo\_59 cpu 0.63 1621805489 foo\_183 cpu 0.82 1621805489 foo\_2 cpu 0.67 1621805489 fo…

---

## [Import JSON from SQL Server to ElasticSearch](https://discuss.elastic.co/t/import-json-from-sql-server-to-elasticsearch/273931)

<div class="topic-metadata">

**Author:** [@qttv](https://discuss.elastic.co/u/qttv)\
**Replies:** 0\
**Last updated:** [May 25, 2021, 12:28pm UTC](https://discuss.elastic.co/t/import-json-from-sql-server-to-elasticsearch/273931 "2021-05-25T12:28:49Z")

</div>

Hi, I'm importing some data from Microsoft SQL Server in ElasticSearch using Logstash. I'm dealing with a table in wich a column contains JSON logs, and i need to import these logs splitting the fields in order to create…

---

## [Invalid FieldReference: \`\[\]\`](https://discuss.elastic.co/t/invalid-fieldreference/273834)

<div class="topic-metadata">

**Author:** [@Roberto\_B](https://discuss.elastic.co/u/Roberto_B)\
**Replies:** 3\
**Last updated:** [May 25, 2021, 1:02pm UTC](https://discuss.elastic.co/t/invalid-fieldreference/273834 "2021-05-25T13:02:43Z")

</div>

Hi all, i receive from logstash error this kind of error: :exception=\>#\<RuntimeError: Invalid FieldReference: \[\] this pipeline transform a csv , in the line i've \[ \] value a couple of field. for exaple the line can …

---

## ['reindexed-v7-yellow' shards?](https://discuss.elastic.co/t/reindexed-v7-yellow-shards/273661)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 2\
**Last updated:** [May 25, 2021, 12:23pm UTC](https://discuss.elastic.co/t/reindexed-v7-yellow-shards/273661 "2021-05-25T12:23:49Z")

</div>

After some recent server updates these showed up as 'unassigned shards'. What are they and can I delete them? They're on every node in the cluster.

---

## [Extract routing value from document - bulk index](https://discuss.elastic.co/t/extract-routing-value-from-document-bulk-index/273404)

<div class="topic-metadata">

**Author:** [@brjisc](https://discuss.elastic.co/u/brjisc)\
**Replies:** 1\
**Last updated:** [May 25, 2021, 12:05pm UTC](https://discuss.elastic.co/t/extract-routing-value-from-document-bulk-index/273404 "2021-05-25T12:05:15Z")

</div>

The documentation states " When setting up explicit mapping, you can also use the \_routing field to direct the index operation to extract the routing value from the document itself" How is the routing information repres…

---

## [Viewing a Webinar](https://discuss.elastic.co/t/viewing-a-webinar/273383)

<div class="topic-metadata">

**Author:** [@stexxen](https://discuss.elastic.co/u/stexxen)\
**Replies:** 3\
**Last updated:** [May 25, 2021, 11:13am UTC](https://discuss.elastic.co/t/viewing-a-webinar/273383 "2021-05-25T11:13:03Z")

</div>

Hi, I registered for this webinar But on the day in question (11th May) I was unable to make it. The invite said the webinar would be sent to all those who registered, but I have received no such email, nor can I tra…

---

## [Geo\_shape mapping for xyz format to xy format](https://discuss.elastic.co/t/geo-shape-mapping-for-xyz-format-to-xy-format/273579)

<div class="topic-metadata">

**Author:** [@cpavan811](https://discuss.elastic.co/u/cpavan811)\
**Replies:** 3\
**Last updated:** [May 25, 2021, 11:02am UTC](https://discuss.elastic.co/t/geo-shape-mapping-for-xyz-format-to-xy-format/273579 "2021-05-25T11:02:27Z")

</div>

We have field in one of our index with GeoJSON supported format of coordinates \[ x, y , z\] in number format. however when tried to created mapping with geo\_shape format with flag "ignore\_z\_value" to true it still fails t…

---

## [Unable to calculate average bucket over multi layer data](https://discuss.elastic.co/t/unable-to-calculate-average-bucket-over-multi-layer-data/273270)

<div class="topic-metadata">

**Author:** [@sumit.sontakke](https://discuss.elastic.co/u/sumit.sontakke)\
**Replies:** 1\
**Last updated:** [May 25, 2021, 10:34am UTC](https://discuss.elastic.co/t/unable-to-calculate-average-bucket-over-multi-layer-data/273270 "2021-05-25T10:34:25Z")

</div>

Hi, I'm able to calculate average bucket score over one layer of data, but not on two lever hierarchy data. Example: A-parent-group m-group t-team 1 A-parent-group m-group t-team 4 A-parent-group n-group p-team 45 …

---

## [./gradlew clean check is giving error \> Task :licenseHeaders FAILED](https://discuss.elastic.co/t/gradlew-clean-check-is-giving-error-task-licenseheaders-failed/273745)

<div class="topic-metadata">

**Author:** [@Sreekumar\_Chathambil](https://discuss.elastic.co/u/Sreekumar_Chathambil)\
**Replies:** 1\
**Last updated:** [May 25, 2021, 10:30am UTC](https://discuss.elastic.co/t/gradlew-clean-check-is-giving-error-task-licenseheaders-failed/273745 "2021-05-25T10:30:50Z")

</div>

Hi, I am new to plugin development. I have created ingest-plugin project using cookiecutter for the version 7.9.0 and tried checking with ./gradle clean check. i was getting an error Task :licenseHeaders FAILED Unapp…

---

## [Parsing JSON array inside](https://discuss.elastic.co/t/parsing-json-array-inside/273870)

<div class="topic-metadata">

**Author:** [@mirko.spezie](https://discuss.elastic.co/u/mirko.spezie)\
**Replies:** 2\
**Last updated:** [May 25, 2021, 9:53am UTC](https://discuss.elastic.co/t/parsing-json-array-inside/273870 "2021-05-25T09:53:34Z")

</div>

Hi, I've got a json with an array inside. Based on another thread I've tried something with ruby to change the key names but it doesn't work. "messages": \[ { "message": "XSS Attack Detected via libinjection…

---

## [Wildcard match on multiple fields](https://discuss.elastic.co/t/wildcard-match-on-multiple-fields/273852)

<div class="topic-metadata">

**Author:** [@Rammi22](https://discuss.elastic.co/u/Rammi22)\
**Replies:** 2\
**Last updated:** [May 25, 2021, 7:11am UTC](https://discuss.elastic.co/t/wildcard-match-on-multiple-fields/273852 "2021-05-25T07:11:03Z")

</div>

Hi, im looking for the right query to find in multiple fields a wildcard query (phone number in phone number fields). i use ElasticsearchDSL ElasticsearchPHP I try the Multi-match query with a part of given value, t…

---

## [Setting Xms and Xmx](https://discuss.elastic.co/t/setting-xms-and-xmx/273875)

<div class="topic-metadata">

**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Replies:** 2\
**Last updated:** [May 25, 2021, 8:52am UTC](https://discuss.elastic.co/t/setting-xms-and-xmx/273875 "2021-05-25T08:52:52Z")

</div>

I assume this is a long-debated topic but I was kind of puzzled by this recommendation: Modifying advanced settings is generally not recommended and could negatively impact performance and stability. Using the Elastics…

---

## [Parsing xml in logstash \[0\] "\_xmlparsefailure"](https://discuss.elastic.co/t/parsing-xml-in-logstash-0-xmlparsefailure/273857)

<div class="topic-metadata">

**Author:** [@Bugsbee](https://discuss.elastic.co/u/Bugsbee)\
**Replies:** 4\
**Last updated:** [May 25, 2021, 8:42am UTC](https://discuss.elastic.co/t/parsing-xml-in-logstash-0-xmlparsefailure/273857 "2021-05-25T08:42:18Z")

</div>

Issue: \[0\] "\_xmlparsefailure" ..Hi all need your help on below issue.. Pleaes refer to step by step explanation of the issue. Step 1 : I have sample input as per below. \<?xml version="1.0" encoding="UTF-8"?\> blue …

---

## [Preventing duplicates when reading the same data multiple times](https://discuss.elastic.co/t/preventing-duplicates-when-reading-the-same-data-multiple-times/273576)

<div class="topic-metadata">

**Author:** [@wlbsxnlp22](https://discuss.elastic.co/u/wlbsxnlp22)\
**Replies:** 2\
**Last updated:** [May 25, 2021, 8:34am UTC](https://discuss.elastic.co/t/preventing-duplicates-when-reading-the-same-data-multiple-times/273576 "2021-05-25T08:34:51Z")

</div>

Hi, I'm wondering if anyone has a good solution to the following. I have to read in .csv files that are generated every hour. These .csv files contain all the historic data for as far back as the program has run. Every…

---

## [Does anyone know the password for "file1" in zipWithEncryption?](https://discuss.elastic.co/t/does-anyone-know-the-password-for-file1-in-zipwithencryption/273817)

<div class="topic-metadata">

**Author:** [@fox1](https://discuss.elastic.co/u/fox1)\
**Replies:** 3\
**Last updated:** [May 25, 2021, 7:29am UTC](https://discuss.elastic.co/t/does-anyone-know-the-password-for-file1-in-zipwithencryption/273817 "2021-05-25T07:29:52Z")

</div>

HI all, I just hope I'm on the right place... Does anyone know by chance what is the password for that little text file called "file1" in the zip file called "zipWithEncryption" ? located somewhere here : ...\\layer\\u…

---

## [Avro to Json](https://discuss.elastic.co/t/avro-to-json/273820)

<div class="topic-metadata">

**Author:** [@thirty2](https://discuss.elastic.co/u/thirty2)\
**Replies:** 2\
**Last updated:** [May 25, 2021, 6:45am UTC](https://discuss.elastic.co/t/avro-to-json/273820 "2021-05-25T06:45:48Z")

</div>

Hi, I am consuming data from Kafka with INPUT configuration: input { kafka { codec =\> avro { schema\_uri =\> "/etc/logstash/avro.avsc" } key\_deserializer\_class =\> "org.apach…

---

## [Stuck at Successfully started Logstash API endpoint {:port=\>9601}](https://discuss.elastic.co/t/stuck-at-successfully-started-logstash-api-endpoint-port-9601/273890)

<div class="topic-metadata">

**Author:** [@dinesh5](https://discuss.elastic.co/u/dinesh5)\
**Replies:** 4\
**Last updated:** [May 25, 2021, 6:10am UTC](https://discuss.elastic.co/t/stuck-at-successfully-started-logstash-api-endpoint-port-9601/273890 "2021-05-25T06:10:24Z")

</div>

Hello Please help me out I'm stuck at Successfully started Logstash API endpoint {:port=\>9601} my conf file input { file { path =\> "/home/lsdp/Desktop/covid2405.csv" start\_position =\> "beginning" sincedb\_path =\> "…

---

## [OutOfMemoryError of web browser happen by search specific word in Kibana](https://discuss.elastic.co/t/outofmemoryerror-of-web-browser-happen-by-search-specific-word-in-kibana/273884)

<div class="topic-metadata">

**Author:** [@BlackCat](https://discuss.elastic.co/u/BlackCat)\
**Replies:** 2\
**Last updated:** [May 25, 2021, 5:32am UTC](https://discuss.elastic.co/t/outofmemoryerror-of-web-browser-happen-by-search-specific-word-in-kibana/273884 "2021-05-25T05:32:30Z")

</div>

■Elasticsearch server spec CPU:8 Memory:64GB Disk:1TB Total Java Heap Size:32GB in yml. es01 - "ES\_JAVA\_OPTS=-Xms12g -Xmx12g" es02 - "ES\_JAVA\_OPTS=-Xms10g -Xmx10g" es03 - "ES\_JAVA\_OPTS=-Xms10g -Xmx10g" number…

---

## [Поиск нераспарсенных логов](https://discuss.elastic.co/t/topic/273801)

<div class="topic-metadata">

**Author:** [@vladimirzn](https://discuss.elastic.co/u/vladimirzn)\
**Replies:** 3\
**Last updated:** [May 25, 2021, 5:25am UTC](https://discuss.elastic.co/t/topic/273801 "2021-05-25T05:25:54Z")

</div>

Добрый день! Есть ли способ найти логи, которые не получилось распарсить в ELK (warning вида "could not index event to elasticsearch - failed to parse"), имея имя индекса и id объекта? Пробовал делать с помощью GET ind…

---

## [Kiaban service unavailable while creating visualization](https://discuss.elastic.co/t/kiaban-service-unavailable-while-creating-visualization/273798)

<div class="topic-metadata">

**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\
**Replies:** 4\
**Last updated:** [May 25, 2021, 4:49am UTC](https://discuss.elastic.co/t/kiaban-service-unavailable-while-creating-visualization/273798 "2021-05-25T04:49:13Z")

</div>

Hi, I have a ELK 7.6.2 setup of 5 node cluster. When I am saving the new visualization or creating a new index in kibana getting following error. Also I checked elasticsearch and kibana logs and found no error. Ki…

---

## [Kibana TSVB limitation](https://discuss.elastic.co/t/kibana-tsvb-limitation/273835)

<div class="topic-metadata">

**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\
**Replies:** 2\
**Last updated:** [May 25, 2021, 4:11am UTC](https://discuss.elastic.co/t/kibana-tsvb-limitation/273835 "2021-05-25T04:11:35Z")

</div>

Please let me know if we can calculate the unique count of a field on the basis of another field in TSVB visual. I want to create a visual like below: - But in TSVB, there is no option for Unique count

---

## [Compare 2 lines of a given index](https://discuss.elastic.co/t/compare-2-lines-of-a-given-index/273253)

<div class="topic-metadata">

**Author:** [@Ronan\_Petit](https://discuss.elastic.co/u/Ronan_Petit)\
**Replies:** 2\
**Last updated:** [May 25, 2021, 3:53am UTC](https://discuss.elastic.co/t/compare-2-lines-of-a-given-index/273253 "2021-05-25T03:53:30Z")

</div>

Hi ! My system is giving me two lines Start/Stop in the same index for the use of services. It looks like the following example : Timestamp1 Start Service1 IDService11 Timestamp2 Start Service1 IDService21 Timestamp3…

---

## [How can I match timestamp](https://discuss.elastic.co/t/how-can-i-match-timestamp/273612)

<div class="topic-metadata">

**Author:** [@BAIBAA](https://discuss.elastic.co/u/BAIBAA)\
**Replies:** 3\
**Last updated:** [May 25, 2021, 3:44am UTC](https://discuss.elastic.co/t/how-can-i-match-timestamp/273612 "2021-05-25T03:44:22Z")

</div>

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=936)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=938)
