# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=973 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 974 --- ## [Data too large circuit breaking exception after migrating to 7.12](https://discuss.elastic.co/t/data-too-large-circuit-breaking-exception-after-migrating-to-7-12/269029)
**Author:** [@voharunado](https://discuss.elastic.co/u/voharunado)\ **Replies:** 3\ **Last updated:** [April 21, 2021, 12:10pm UTC](https://discuss.elastic.co/t/data-too-large-circuit-breaking-exception-after-migrating-to-7-12/269029 "2021-04-21T12:10:45Z")
Hello, We have just migrated our cluster from 6.8 to 7.12 and just noticed some recurring errors during intensive parallel indexations. Here is the kind of error we have: \[parent\] Data too large, data for \[\ **Author:** [@Kuo\_Hugo](https://discuss.elastic.co/u/Kuo_Hugo)\ **Replies:** 4\ **Last updated:** [April 21, 2021, 11:38am UTC](https://discuss.elastic.co/t/elasticsearch-visualization-search-error-with-empty-response/270706 "2021-04-21T11:38:03Z") The batch query for rendering a visualization from the search programname:"proxy-server" AND status\_int:\[200 TO 299\] and request\_method:GET . The search works fine even with 7days period. But the visualization as below a… --- ## [Collapse with multi value](https://discuss.elastic.co/t/collapse-with-multi-value/270437)
**Author:** [@arcturuscom](https://discuss.elastic.co/u/arcturuscom)\ **Replies:** 13\ **Last updated:** [April 21, 2021, 11:15am UTC](https://discuss.elastic.co/t/collapse-with-multi-value/270437 "2021-04-21T11:15:16Z")
Hello, i tried to collapse multivalued field and its doesnt work e.g: "field": \[id1, id2, id3\] i'm asking if there's a workaround to solve this issue. any suggestions please !! --- ## [ECK Coordinating only node 7.10.2 has all node roles](https://discuss.elastic.co/t/eck-coordinating-only-node-7-10-2-has-all-node-roles/270591)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 6\ **Last updated:** [April 21, 2021, 11:04am UTC](https://discuss.elastic.co/t/eck-coordinating-only-node-7-10-2-has-all-node-roles/270591 "2021-04-21T11:04:03Z")
Hi, Deploying ECK and trying to configure a client/coordinating-only node. The node roles is configured to: node.roles: \[ \] As stated here. But the client node seem to have all the roles and shards are wrongfully cr… --- ## ["reason"=\>"object mapping for \[host\] tried to parse field \[host\] as object, but found a concrete value"](https://discuss.elastic.co/t/reason-object-mapping-for-host-tried-to-parse-field-host-as-object-but-found-a-concrete-value/270790)
**Author:** [@BlackCat](https://discuss.elastic.co/u/BlackCat)\ **Replies:** 5\ **Last updated:** [April 21, 2021, 10:09am UTC](https://discuss.elastic.co/t/reason-object-mapping-for-host-tried-to-parse-field-host-as-object-but-found-a-concrete-value/270790 "2021-04-21T10:09:36Z")
Please how to do resolve. Logstash outputs below error log. \[2021-04-21T15:31:47,803\]\[WARN \]\[logstash.outputs.elasticsearch\]\[＜pipeline.id＞\]\[b0981f4f69ba05c595e4bfce70b5e813c0b082207400c67bd72b366d2d36ba65\] Could not in… --- ## [Logstash fails with not an SSL/TLS record](https://discuss.elastic.co/t/logstash-fails-with-not-an-ssl-tls-record/270812)
**Author:** [@Enrique\_Pedroza](https://discuss.elastic.co/u/Enrique_Pedroza)\ **Replies:** 0\ **Last updated:** [April 21, 2021, 9:20am UTC](https://discuss.elastic.co/t/logstash-fails-with-not-an-ssl-tls-record/270812 "2021-04-21T09:20:49Z")
I'm running Logstash with Elasticsearch and Kibana, and all configuration setted up. The problem is that the services is giving the following error \[2021-04-21T10:08:56,344\]\[INFO \]\[org.logstash.beats.BeatsHandler\]\[main\]… --- ## [Kibana field is not show on Visualization](https://discuss.elastic.co/t/kibana-field-is-not-show-on-visualization/270789)
**Author:** [@Nazakat](https://discuss.elastic.co/u/Nazakat)\ **Replies:** 7\ **Last updated:** [April 21, 2021, 9:07am UTC](https://discuss.elastic.co/t/kibana-field-is-not-show-on-visualization/270789 "2021-04-21T09:07:03Z")
Kibana field is show on discover. But It not show create visualization This is my discover page This i create visualization --- ## [Stop the search request once it finds first 10 hits](https://discuss.elastic.co/t/stop-the-search-request-once-it-finds-first-10-hits/270783)
**Author:** [@DEEPTHI\_SONA\_G](https://discuss.elastic.co/u/DEEPTHI_SONA_G)\ **Replies:** 8\ **Last updated:** [April 21, 2021, 9:02am UTC](https://discuss.elastic.co/t/stop-the-search-request-once-it-finds-first-10-hits/270783 "2021-04-21T09:02:35Z")
I am doing some performance testing on Elasticsearch. So I am comparing Oracle db with Elasticsearch. The Oracle query is able to stop it's search once it finds the first 10matches by using the code select \* from mtd\_s… --- ## [Change date format in timepicker from 24 hr to 12 hour](https://discuss.elastic.co/t/change-date-format-in-timepicker-from-24-hr-to-12-hour/270108)
**Author:** [@fidsamurai](https://discuss.elastic.co/u/fidsamurai)\ **Replies:** 5\ **Last updated:** [April 21, 2021, 6:41am UTC](https://discuss.elastic.co/t/change-date-format-in-timepicker-from-24-hr-to-12-hour/270108 "2021-04-21T06:41:53Z")
Hi, I would like to change the time format in the date-picker in Discover, Visualizations and Dashboards from 24 hours to 12 hours eg. currently it's 15:30 16:00.... I would like it to show as 3:30 pm 4:00pm. Could som… --- ## [Kibana 7.12 nginx reverse proxy, docker compose](https://discuss.elastic.co/t/kibana-7-12-nginx-reverse-proxy-docker-compose/270776)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 4:36am UTC](https://discuss.elastic.co/t/kibana-7-12-nginx-reverse-proxy-docker-compose/270776 "2021-04-21T04:36:46Z")
Hi Im trying to use nginx as a reverse proxy for kibana but I can make it work, this is my kibana.yml server.name: kibana server.host: "localhost" elasticsearch.hosts: \[ "https://elasticsearch:9200" \] elasticsearch.user… --- ## [The issue of tcp connection of logstash](https://discuss.elastic.co/t/the-issue-of-tcp-connection-of-logstash/270780)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 0\ **Last updated:** [April 21, 2021, 3:27am UTC](https://discuss.elastic.co/t/the-issue-of-tcp-connection-of-logstash/270780 "2021-04-21T03:27:49Z")
It seems to me that the limit of the no of tcp connection of logstash is about 110. If the no of connection is more than 110, filebeat will show something like handshake.....ERROR...i/o timeout when running test output c… --- ## [Hot-warm search question](https://discuss.elastic.co/t/hot-warm-search-question/270778)
**Author:** [@abhishekc92](https://discuss.elastic.co/u/abhishekc92)\ **Replies:** 2\ **Last updated:** [April 21, 2021, 2:26am UTC](https://discuss.elastic.co/t/hot-warm-search-question/270778 "2021-04-21T02:26:53Z")
Hi, I have a pretty basic question around how search functions under the hood. I am evaluating a hot-warm architecture on aws (SSD, S3 backed respectively). Our use case is such that some searches may have to be issued a… --- ## [Filebeat Netflow Module || Kibana Dashboard Extremly Slow](https://discuss.elastic.co/t/filebeat-netflow-module-kibana-dashboard-extremly-slow/269926)
**Author:** [@albertosoares](https://discuss.elastic.co/u/albertosoares)\ **Replies:** 6\ **Last updated:** [April 21, 2021, 1:18am UTC](https://discuss.elastic.co/t/filebeat-netflow-module-kibana-dashboard-extremly-slow/269926 "2021-04-21T01:18:16Z")
I've deployed the Netflow module and when I go to the Filebeat Netflow Dashboards and I query for 24 hours, today or 4 hours the query is extremely slow. Environment ELK 7.12 3 data nodes (12 vCPU, 10 RAM -Xms5g m / -… --- ## [Is there a way to automate external identity mapping?](https://discuss.elastic.co/t/is-there-a-way-to-automate-external-identity-mapping/270774)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 3\ **Last updated:** [April 20, 2021, 11:38pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-automate-external-identity-mapping/270774 "2021-04-20T23:38:48Z")
With some help I've successfully mapped a few of my Active Directory users to their Google Drive counterparts. But I can't help but wonder if there is a better way. Do external identity mapping's have to be configured v… --- ## [Supporting very high number of query terms a good idea?](https://discuss.elastic.co/t/supporting-very-high-number-of-query-terms-a-good-idea/270771)
**Author:** [@elastic\_yogi](https://discuss.elastic.co/u/elastic_yogi)\ **Replies:** 1\ **Last updated:** [April 20, 2021, 11:07pm UTC](https://discuss.elastic.co/t/supporting-very-high-number-of-query-terms-a-good-idea/270771 "2021-04-20T23:07:24Z")
We have a postgres table with nearly a million rows that we index into elasticsearch. We want to support a specific use case of allowing a user to copy and paste nearly 10k unique identifiers to filter for specific entri… --- ## [Elasticsearch using more RAM](https://discuss.elastic.co/t/elasticsearch-using-more-ram/270669)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 1\ **Last updated:** [April 20, 2021, 10:56pm UTC](https://discuss.elastic.co/t/elasticsearch-using-more-ram/270669 "2021-04-20T22:56:49Z")
my /etc/elasticsearch/jvm.options is : ## JVM configuration ################################################################ ## IMPORTANT: JVM heap size ################################################################ … --- ## [How to map Native Realm Active Directory users to Google Drive users?](https://discuss.elastic.co/t/how-to-map-native-realm-active-directory-users-to-google-drive-users/270769)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 6\ **Last updated:** [April 20, 2021, 10:51pm UTC](https://discuss.elastic.co/t/how-to-map-native-realm-active-directory-users-to-google-drive-users/270769 "2021-04-20T22:51:26Z")
From the docs I've been trying to map my Active Directory users to their Google Drive counterparts. The API calls return 200, but when I try to list all identities, the list is empty. POST http://search.example.org/api/… --- ## [After selecting App Search, I can no longer select Workplace Search](https://discuss.elastic.co/t/after-selecting-app-search-i-can-no-longer-select-workplace-search/270629)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 6\ **Last updated:** [April 20, 2021, 8:20pm UTC](https://discuss.elastic.co/t/after-selecting-app-search-i-can-no-longer-select-workplace-search/270629 "2021-04-20T20:20:55Z")
When I logged into Enterprise Search via my AD/ES-Native user, I was given the option to choose either App Search or Workplace Search. I selected App Search. Now, when I go back to /ent/select, Workplace Search no longer… --- ## [Multiple group\_search.base\_dn for one LDAP/AD](https://discuss.elastic.co/t/multiple-group-search-base-dn-for-one-ldap-ad/270746)
**Author:** [@ctan](https://discuss.elastic.co/u/ctan)\ **Replies:** 1\ **Last updated:** [April 20, 2021, 6:07pm UTC](https://discuss.elastic.co/t/multiple-group-search-base-dn-for-one-ldap-ad/270746 "2021-04-20T18:07:44Z")
We have two spots for groups to reside inside of AD, which are not children of the same folders (but in the same domain). I am looking for a way to have ES search them both to get the group membership, while not travers… --- ## [Reindex API from remote server](https://discuss.elastic.co/t/reindex-api-from-remote-server/270743)
**Author:** [@cool\_aarti2](https://discuss.elastic.co/u/cool_aarti2)\ **Replies:** 0\ **Last updated:** [April 20, 2021, 4:43pm UTC](https://discuss.elastic.co/t/reindex-api-from-remote-server/270743 "2021-04-20T16:43:31Z")
Hi, We have a remote server which have some elastic indices. I would like to reindex the data from this server onto another. But I am getting the error: "type": "s\_s\_l\_handshake\_exception", "reason": "PKIX path build… --- ## [Cluster doesn't respect routing.allocation.require.data\_type](https://discuss.elastic.co/t/cluster-doesnt-respect-routing-allocation-require-data-type/270700)
**Author:** [@gorek](https://discuss.elastic.co/u/gorek)\ **Replies:** 1\ **Last updated:** [April 20, 2021, 3:11pm UTC](https://discuss.elastic.co/t/cluster-doesnt-respect-routing-allocation-require-data-type/270700 "2021-04-20T15:11:59Z")
Hi, we have cluster with 2 nodes. Every node has set data\_type attribute. One node has low disk watermark exceed. We prepared ILM policy to keep indices on one node for some time and after move it to another. Rarely … --- ## [Reverse proxy - Webseal](https://discuss.elastic.co/t/reverse-proxy-webseal/270737)
**Author:** [@kvmuralidhar](https://discuss.elastic.co/u/kvmuralidhar)\ **Replies:** 0\ **Last updated:** [April 20, 2021, 3:11pm UTC](https://discuss.elastic.co/t/reverse-proxy-webseal/270737 "2021-04-20T15:11:45Z")
Hi there, Has anyone integrated webseal (IBM Tivoli Access Manager) as reverse proxy to log into Kibana ? Thanks Murali --- ## [Surprised by deprecation of common\_terms query. What about its relevance features?](https://discuss.elastic.co/t/surprised-by-deprecation-of-common-terms-query-what-about-its-relevance-features/270416)
**Author:** [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\ **Replies:** 4\ **Last updated:** [April 20, 2021, 2:21pm UTC](https://discuss.elastic.co/t/surprised-by-deprecation-of-common-terms-query-what-about-its-relevance-features/270416 "2021-04-20T14:21:00Z")
Hi all, I was actually excited to dig into an experiment at work using the common terms query. I see however, it's been deprecated as the performance benefits are seen now in the match query, as mentioned in this issue. … --- ## [Sorting in KQL](https://discuss.elastic.co/t/sorting-in-kql/270711)
**Author:** [@mortenb123](https://discuss.elastic.co/u/mortenb123)\ **Replies:** 2\ **Last updated:** [April 20, 2021, 2:08pm UTC](https://discuss.elastic.co/t/sorting-in-kql/270711 "2021-04-20T14:08:00Z")
Hi, I know I can sort in Elastic api and in kibana, but now I have to use an api which only have KQL input which it encodes in base64 and send to elasticsearch. (external service) I've tried all instances of id: desc\`\`s… --- ## [Logstashで３階層のデータを生成したい](https://discuss.elastic.co/t/logstash/270717)
**Author:** [@atsuizo](https://discuss.elastic.co/u/atsuizo)\ **Replies:** 0\ **Last updated:** [April 20, 2021, 1:49pm UTC](https://discuss.elastic.co/t/logstash/270717 "2021-04-20T13:49:07Z")
RDBMS上に３階層で構成されている表のデータを、 ３階層のドキュメント構造でElasticsearchに反映させたいと考えています。 ほぼ以下のURLで語られているとおりなのですが、 このトピックのやりとりで解決したのかまでが不明で、 参考にして設定しても期待した形を実現できなかったため 質問させて下さい。 【RDBMS（MySQL）上の構造、データ】 表A-\>表B-\>表Cの３階層 表A-\>表Bは、1:N 表B-\>表… --- ## [One elastic node fills up prior to the others?](https://discuss.elastic.co/t/one-elastic-node-fills-up-prior-to-the-others/269276)
**Author:** [@Jcroy](https://discuss.elastic.co/u/Jcroy)\ **Replies:** 13\ **Last updated:** [April 20, 2021, 1:48pm UTC](https://discuss.elastic.co/t/one-elastic-node-fills-up-prior-to-the-others/269276 "2021-04-20T13:48:39Z")
Am I missing a policy or something? I have a 8 node cluster. 3k Winlogbeat agents reporting in. I ran winlogbeat setup -e to get the template installed. I've reviewed logs and nothing related to allocation seems to be in… --- ## [Multiple sheets in Kibana Table](https://discuss.elastic.co/t/multiple-sheets-in-kibana-table/270702)
**Author:** [@Vivekks](https://discuss.elastic.co/u/Vivekks)\ **Replies:** 1\ **Last updated:** [April 20, 2021, 1:48pm UTC](https://discuss.elastic.co/t/multiple-sheets-in-kibana-table/270702 "2021-04-20T13:48:22Z")
Hi, I'm new to Kibana I want to create multiple sheets in Kibana table just like in excel sheet. Is it possible in Kibana ? --- ## [Ignore a specific or drop a field when using another Grok Pattern](https://discuss.elastic.co/t/ignore-a-specific-or-drop-a-field-when-using-another-grok-pattern/270522)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 3\ **Last updated:** [April 20, 2021, 1:35pm UTC](https://discuss.elastic.co/t/ignore-a-specific-or-drop-a-field-when-using-another-grok-pattern/270522 "2021-04-20T13:35:14Z")
HI, I have a filter that works except for when the log doesn't contains different data for a field that I am using an extra grok pattern on. I am extracting the username from DN (Distinguished Name) from the main log a… --- ## [Add new field in existing index and template](https://discuss.elastic.co/t/add-new-field-in-existing-index-and-template/270679)
**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\ **Replies:** 6\ **Last updated:** [April 20, 2021, 1:10pm UTC](https://discuss.elastic.co/t/add-new-field-in-existing-index-and-template/270679 "2021-04-20T13:10:59Z")
Hi, I want to add an new field in exiting index and corresponding to it's template. Could you pls help me on this ? This is current template: curl -XPUT 'vl-dev01:9200/\_template/latesttmpl-farm-qusage-mon?pretty' -H … --- ## [Logstash jdbc\_streaming filter pipeline reload and database access](https://discuss.elastic.co/t/logstash-jdbc-streaming-filter-pipeline-reload-and-database-access/270619)
**Author:** [@rverchere](https://discuss.elastic.co/u/rverchere)\ **Replies:** 2\ **Last updated:** [April 20, 2021, 11:56am UTC](https://discuss.elastic.co/t/logstash-jdbc-streaming-filter-pipeline-reload-and-database-access/270619 "2021-04-20T11:56:05Z")
Hello, I'm using logstash with the jdbc\_streaming filter, that connects to an external MariaDB database. When I stop and restart the database, the pipeline using the jdbc\_streaming filter fails, and there is no automat… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=972) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=974)