# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=991 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 992 --- ## [Can someone helps me with this Json input!](https://discuss.elastic.co/t/can-someone-helps-me-with-this-json-input/269122)
**Author:** [@Skander\_Harrabi](https://discuss.elastic.co/u/Skander_Harrabi)\ **Replies:** 4\ **Last updated:** [April 5, 2021, 11:15pm UTC](https://discuss.elastic.co/t/can-someone-helps-me-with-this-json-input/269122 "2021-04-05T23:15:28Z")
Hello there, So i created an alias based on two indexes, and am creating a visualization with that alias that have a metric (count), what i want do is to make that metric works with documents from only one of indexes … --- ## [TypeError: Cannot read property 'error' of undefined](https://discuss.elastic.co/t/typeerror-cannot-read-property-error-of-undefined/268971)
**Author:** [@satyabrat\_majhi](https://discuss.elastic.co/u/satyabrat_majhi)\ **Replies:** 3\ **Last updated:** [April 5, 2021, 9:28pm UTC](https://discuss.elastic.co/t/typeerror-cannot-read-property-error-of-undefined/268971 "2021-04-05T21:28:36Z")
log \[07:40:32.609\] \[warning\]\[config\]\[deprecation\] Config key \[monitoring.cluster\_alerts.email\_notifications.email\_address\] will be required for email notifications to work in 8.0." log \[07:40:33.237\] \[info\]\[plugi… --- ## [Float value accepted as date during initial document indexing, but fails on update/re-index](https://discuss.elastic.co/t/float-value-accepted-as-date-during-initial-document-indexing-but-fails-on-update-re-index/268417)
**Author:** [@Brooke\_Babcock](https://discuss.elastic.co/u/Brooke_Babcock)\ **Replies:** 3\ **Last updated:** [April 5, 2021, 8:06pm UTC](https://discuss.elastic.co/t/float-value-accepted-as-date-during-initial-document-indexing-but-fails-on-update-re-index/268417 "2021-04-05T20:06:22Z")
I encountered what appears to be a "gotcha" with dates. Wondering if this is expected behavior, or potentially room for improvement. If you index a float value into a date field, by default Elasticsearch allows it. And… --- ## [All primary shards of some indices keep getting assigned to 1 of 14 data nodes](https://discuss.elastic.co/t/all-primary-shards-of-some-indices-keep-getting-assigned-to-1-of-14-data-nodes/267726)
**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\ **Replies:** 2\ **Last updated:** [April 5, 2021, 7:58pm UTC](https://discuss.elastic.co/t/all-primary-shards-of-some-indices-keep-getting-assigned-to-1-of-14-data-nodes/267726 "2021-04-05T19:58:20Z")
ES: 7.6.x 3 coordinator, 3 master, 14 data 6 shards, 1 replica All primary shards of some indices keep getting assigned to only 1 of 14 data nodes. So data node 12 has 6 primary shards of index x, y, z, etc. The other… --- ## [Add new field with value from grok filter](https://discuss.elastic.co/t/add-new-field-with-value-from-grok-filter/269253)
**Author:** [@Automation\_Scripts](https://discuss.elastic.co/u/Automation_Scripts)\ **Replies:** 2\ **Last updated:** [April 5, 2021, 7:51pm UTC](https://discuss.elastic.co/t/add-new-field-with-value-from-grok-filter/269253 "2021-04-05T19:51:13Z")
Hi all, I need to add a value to a field from a variable within a grok filter. filter { grok { match =\> \[ "message", "(?\(.\*?))\\t(?\(.\*?))" \] } mutate { add\_field =\> { "container\_id" =\> "%{u… --- ## [ЗАДАЧА РЕШЕНА = Ошибка после обновления ДО Elasticsearch 7.11](https://discuss.elastic.co/t/elasticsearch-7-11/269255)
**Author:** [@Dima\_Sid](https://discuss.elastic.co/u/Dima_Sid)\ **Replies:** 0\ **Last updated:** [April 5, 2021, 5:52pm UTC](https://discuss.elastic.co/t/elasticsearch-7-11/269255 "2021-04-05T17:52:18Z")
ЗАДАЧА РЕШЕНА = Лишние скобки у should Собственно ошибка 'error' =\> \[ 'error' =\> \[ 'root\_cause' =\> \[ \[ 'type' =\> 'x\_content\_parse\_exception', 'reason' =\> '\[1:182\] \[bool\] failed to parse field \[should\]', \], \], … --- ## [How to compare two fields of two or more documents](https://discuss.elastic.co/t/how-to-compare-two-fields-of-two-or-more-documents/269190)
**Author:** [@Dinesh\_Sharma](https://discuss.elastic.co/u/Dinesh_Sharma)\ **Replies:** 3\ **Last updated:** [April 5, 2021, 5:53pm UTC](https://discuss.elastic.co/t/how-to-compare-two-fields-of-two-or-more-documents/269190 "2021-04-05T17:53:07Z")
Hi, I have 500 documents and half of them contains "IP.keyword" and half contains "Pim\_IP".keyword. Now I want to filter to get all the document which will have Pim\_IP(from one docuement) == IP.keyword( from other docum… --- ## [Find Trending topics without background set](https://discuss.elastic.co/t/find-trending-topics-without-background-set/269207)
**Author:** [@sj12345](https://discuss.elastic.co/u/sj12345)\ **Replies:** 5\ **Last updated:** [April 5, 2021, 5:34pm UTC](https://discuss.elastic.co/t/find-trending-topics-without-background-set/269207 "2021-04-05T17:34:25Z")
i have read this article Find trending article Referring to Mark Harwood's comment on that page : " maybe it’s failing to find anything statistically significant in the sample of 100 headlines that differs materially fr… --- ## [Kibana table using data histogram aggregation resulting in counts with decimals](https://discuss.elastic.co/t/kibana-table-using-data-histogram-aggregation-resulting-in-counts-with-decimals/269249)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 1\ **Last updated:** [April 5, 2021, 5:08pm UTC](https://discuss.elastic.co/t/kibana-table-using-data-histogram-aggregation-resulting-in-counts-with-decimals/269249 "2021-04-05T17:08:41Z")
Hello, I'm using Kibana 7.3.2 where I'm create a simple count table using data histogram aggregation to split the rows into buckets. I am using the timestamp for each event and set the interval to 60 minutes and the in… --- ## [7.4 Embedded Kibana in Iframe Login Page Keeps Reloading and Redirecting to Same Page](https://discuss.elastic.co/t/7-4-embedded-kibana-in-iframe-login-page-keeps-reloading-and-redirecting-to-same-page/269132)
**Author:** [@Ben\_Chen](https://discuss.elastic.co/u/Ben_Chen)\ **Replies:** 1\ **Last updated:** [April 5, 2021, 4:23pm UTC](https://discuss.elastic.co/t/7-4-embedded-kibana-in-iframe-login-page-keeps-reloading-and-redirecting-to-same-page/269132 "2021-04-05T16:23:17Z")
Possible same issue: Cookies issue while embedding kibana dashboard with iFrame On an embedded, iframed Kibana, the user cannot login on Safari nor Chrome. Opening up the fullscreen dashboard in a separate tab, where … --- ## [Kibana filtering based on some search term](https://discuss.elastic.co/t/kibana-filtering-based-on-some-search-term/268732)
**Author:** [@Darshan\_Kamat](https://discuss.elastic.co/u/Darshan_Kamat)\ **Replies:** 2\ **Last updated:** [April 5, 2021, 3:05pm UTC](https://discuss.elastic.co/t/kibana-filtering-based-on-some-search-term/268732 "2021-04-05T15:05:16Z")
I am new to Elastic . I have setup like Filebeat-\>ES\<-Kibana Data is unformatted with single lines and multiple lines of logs and inserted into ES from Filebeat. Based on multi line expression new line is inserted int… --- ## [The content length is bigger than the maximum allowed string](https://discuss.elastic.co/t/the-content-length-is-bigger-than-the-maximum-allowed-string/269223)
**Author:** [@Ivan44785372](https://discuss.elastic.co/u/Ivan44785372)\ **Replies:** 1\ **Last updated:** [April 5, 2021, 2:38pm UTC](https://discuss.elastic.co/t/the-content-length-is-bigger-than-the-maximum-allowed-string/269223 "2021-04-05T14:38:18Z")
I'm not sure if this error related to Kibana or Elasticsearch . When Try to search in "discovery" I'm getting "The content length (771413825) is bigger than the maximum allowed string (536870888)" How can I fix it ? --- ## [Timeout executing grok](https://discuss.elastic.co/t/timeout-executing-grok/269184)
**Author:** [@Andrey\_RF](https://discuss.elastic.co/u/Andrey_RF)\ **Replies:** 8\ **Last updated:** [April 5, 2021, 2:27pm UTC](https://discuss.elastic.co/t/timeout-executing-grok/269184 "2021-04-05T14:27:19Z")
I have a quite long regex to pars my log message. But it drops with Timeout executing grok . Does have any mechanisms to speed up regex work? Also I have a multiple regexs and if one is failed does it other works ? --- ## [Parsing quoted and escaped json events](https://discuss.elastic.co/t/parsing-quoted-and-escaped-json-events/269233)
**Author:** [@LeonT123](https://discuss.elastic.co/u/LeonT123)\ **Replies:** 0\ **Last updated:** [April 5, 2021, 12:38pm UTC](https://discuss.elastic.co/t/parsing-quoted-and-escaped-json-events/269233 "2021-04-05T12:38:23Z")
Hi I'm trying to find a way to parse a JSON encoded message like this. I do not know if filebeat is a good choice here or logstash is better one. the events are look like this and I'm looking for a way to extract the "… --- ## [Maven Packages](https://discuss.elastic.co/t/maven-packages/268748)
**Author:** [@nmalocic](https://discuss.elastic.co/u/nmalocic)\ **Replies:** 5\ **Last updated:** [April 5, 2021, 11:50am UTC](https://discuss.elastic.co/t/maven-packages/268748 "2021-04-05T11:50:16Z")
Hi everyone, Is it possible to load maven package to use Json Processor from code? I am writing plugin, and I need to use Json Processor to parse data. Thanks, Nemanja --- ## [Possible bug with Elastic Agent ca certificate checks](https://discuss.elastic.co/t/possible-bug-with-elastic-agent-ca-certificate-checks/267253)
**Author:** [@finbarr996](https://discuss.elastic.co/u/finbarr996)\ **Replies:** 10\ **Last updated:** [April 5, 2021, 11:34am UTC](https://discuss.elastic.co/t/possible-bug-with-elastic-agent-ca-certificate-checks/267253 "2021-04-05T11:34:48Z")
Hi there, TL;DR: The endpoint agent can't talk to ES as it doesn't trust the self signed ca cert, despite this being in the trusted root store of the endpoint. The workaround: The agent requires a path to be defined in… --- ## [APM Agent Status states "No data has been received from agents yet"](https://discuss.elastic.co/t/apm-agent-status-states-no-data-has-been-received-from-agents-yet/268295)
**Author:** [@Stud21](https://discuss.elastic.co/u/Stud21)\ **Replies:** 9\ **Last updated:** [April 5, 2021, 10:25am UTC](https://discuss.elastic.co/t/apm-agent-status-states-no-data-has-been-received-from-agents-yet/268295 "2021-04-05T10:25:19Z")
Hi, I have deployed and configured APM which on clicking APM server status states as "You have correctly setup APM Server" I am successfully running a Petclinic application using the below script: sudo java -javaage… --- ## [GROK query generating .keyword fields in Elasticsearch](https://discuss.elastic.co/t/grok-query-generating-keyword-fields-in-elasticsearch/269152)
**Author:** [@finbarr996](https://discuss.elastic.co/u/finbarr996)\ **Replies:** 2\ **Last updated:** [April 5, 2021, 10:24am UTC](https://discuss.elastic.co/t/grok-query-generating-keyword-fields-in-elasticsearch/269152 "2021-04-05T10:24:57Z")
Hi there, I'm happily parsing a bunch of syslog files in Logstash, but notice that an entry like %{DATA:Something} creates a Something field and additionally a Something.keyword field in Elasticsearch. Is there a way t… --- ## [Return specific search results](https://discuss.elastic.co/t/return-specific-search-results/269220)
**Author:** [@Jay\_Timbadia](https://discuss.elastic.co/u/Jay_Timbadia)\ **Replies:** 0\ **Last updated:** [April 5, 2021, 10:01am UTC](https://discuss.elastic.co/t/return-specific-search-results/269220 "2021-04-05T10:01:53Z")
I have these structures of my index. { "\_index" : "sentences", "\_type" : "\_doc", "\_id" : "PHhYoXgBJv8cgfRDHSag", "\_score" : 11.336952, "\_source" : { "word" : "acacia", … --- ## [Encountered a retryable error. will retry with exponential backoff (code:503)](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-503/269217)
**Author:** [@lilyyy](https://discuss.elastic.co/u/lilyyy)\ **Replies:** 0\ **Last updated:** [April 5, 2021, 9:09am UTC](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-503/269217 "2021-04-05T09:09:41Z")
Hello. I have a problem when i use logstash. My ELK version is 6.8 and when i start logstash, it was going well at first but a few times later i got this error. I've searched about this error on google but i was not abl… --- ## [Getting error after injecting gcs credentials in elasticsearch](https://discuss.elastic.co/t/getting-error-after-injecting-gcs-credentials-in-elasticsearch/268989)
**Author:** [@chandu2](https://discuss.elastic.co/u/chandu2)\ **Replies:** 5\ **Last updated:** [April 5, 2021, 7:46am UTC](https://discuss.elastic.co/t/getting-error-after-injecting-gcs-credentials-in-elasticsearch/268989 "2021-04-05T07:46:32Z")
I am deploying ECK : 1.3.0 and elasticsearch version 7.9.0 in GKE. When I tried to inject secret called gcs-crdentials, elasticsearch nodes were getting restarted, but on crashloop back state. secureSettings: - secre… --- ## [How to put filter inside Vega visualization scatter plot](https://discuss.elastic.co/t/how-to-put-filter-inside-vega-visualization-scatter-plot/267618)
**Author:** [@Shalhevet](https://discuss.elastic.co/u/Shalhevet)\ **Replies:** 2\ **Last updated:** [April 5, 2021, 7:19am UTC](https://discuss.elastic.co/t/how-to-put-filter-inside-vega-visualization-scatter-plot/267618 "2021-04-05T07:19:28Z")
hi, I want to present the plots for documents with "group"==a, and I only want to present documents with the latest date of the time range applied by the dashboard. How can I do this? here is my script: { $schema: … --- ## [Completion Suggester](https://discuss.elastic.co/t/completion-suggester/269002)
**Author:** [@Lamees\_Mahmoud](https://discuss.elastic.co/u/Lamees_Mahmoud)\ **Replies:** 0\ **Last updated:** [April 1, 2021, 9:04am UTC](https://discuss.elastic.co/t/completion-suggester/269002 "2021-04-01T09:04:45Z")
Why elastic search auto completion suggester doesn't return all matching documents? --- ## [KIBANA - discover- share\[CSV Report\]](https://discuss.elastic.co/t/kibana-discover-share-csv-report/268041)
**Author:** [@ycseol](https://discuss.elastic.co/u/ycseol)\ **Replies:** 1\ **Last updated:** [April 5, 2021, 7:08am UTC](https://discuss.elastic.co/t/kibana-discover-share-csv-report/268041 "2021-04-05T07:08:32Z")
안녕하세요 KIBANA 사용에 문의가 있습니다. 인덱스 생성 후 discover에서 filter를 걸어 데이터를 정상적으로 확인하였습니다. 이 데이터들을 discover- share\[CSV Report\] 로 추출해봤는데 한글이 깨지는 현상이 나옵니다. 옵션을 주는 부분이 있는거 같은데 어느 부분을 살펴 봐야 할까요? --- ## [Не корректно работает index pattern remote cluster для Space](https://discuss.elastic.co/t/index-pattern-remote-cluster-space/269097)
**Author:** [@Ivacom](https://discuss.elastic.co/u/Ivacom)\ **Replies:** 2\ **Last updated:** [April 5, 2021, 6:12am UTC](https://discuss.elastic.co/t/index-pattern-remote-cluster-space/269097 "2021-04-05T06:12:47Z")
Добрый день. Имеется 3 кластера Test-cluster 7.10.2 (Basic) \[1 master, 3 data\] Prod-cluster 7.10.2 (Basic) \[1-master+data, 1-data\] Public-cluster 7.11.2 (trial) \[2-master+data\] +Active Directory Все действия дел… --- ## [Slowness in elastic search - optimization of query and score against individual values of the field](https://discuss.elastic.co/t/slowness-in-elastic-search-optimization-of-query-and-score-against-individual-values-of-the-field/269199)
**Author:** [@Nisar\_Ansari](https://discuss.elastic.co/u/Nisar_Ansari)\ **Replies:** 0\ **Last updated:** [April 5, 2021, 12:07am UTC](https://discuss.elastic.co/t/slowness-in-elastic-search-optimization-of-query-and-score-against-individual-values-of-the-field/269199 "2021-04-05T00:07:06Z")
Dear All, We have documents in below format , the number of documents is more than 5 million. {"\_index":"Testinlive","\_type":"\_doc","\_id":"vxYmiHgBWrQelERu5MPg","\_score":1.0,"\_source":{"GID":"433444","aLIASES":"Kishor… --- ## [Weird Uptime Data Visualization](https://discuss.elastic.co/t/weird-uptime-data-visualization/269181)
**Author:** [@GeekyAle](https://discuss.elastic.co/u/GeekyAle)\ **Replies:** 2\ **Last updated:** [April 4, 2021, 10:36pm UTC](https://discuss.elastic.co/t/weird-uptime-data-visualization/269181 "2021-04-04T22:36:44Z")
Hello Everyone, As per the title, I'm having a strange visualization of the Uptime data, I have Heartbeat monitoring 7 hosts in my house, and the monitor is set to every 30sec. Now to the weirdness; With the monitor e… --- ## [Geoip - Apache logs](https://discuss.elastic.co/t/geoip-apache-logs/269166)
**Author:** [@gloupe](https://discuss.elastic.co/u/gloupe)\ **Replies:** 5\ **Last updated:** [April 4, 2021, 7:07pm UTC](https://discuss.elastic.co/t/geoip-apache-logs/269166 "2021-04-04T19:07:12Z")
Hi, I'm trying to get geoip info from ipclient from my access logs generated by a apache2 server. I tried this filter in logstash: filter { if \[tags\]\[path\] =~ "/var/log/apache2/xxx-access.log" { … --- ## [How to do ES fault drills](https://discuss.elastic.co/t/how-to-do-es-fault-drills/269186)
**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\ **Replies:** 1\ **Last updated:** [April 4, 2021, 6:05pm UTC](https://discuss.elastic.co/t/how-to-do-es-fault-drills/269186 "2021-04-04T18:05:41Z")
We want to do elasticsearch failure exercises, but currently we can only simulate some simple failures, such as network interruption and process death. The remaining deep-level failures are not well simulated. I would li… --- ## [Visualizing json documents](https://discuss.elastic.co/t/visualizing-json-documents/268807)
**Author:** [@Tlm\_Konstantinos](https://discuss.elastic.co/u/Tlm_Konstantinos)\ **Replies:** 2\ **Last updated:** [April 4, 2021, 4:59pm UTC](https://discuss.elastic.co/t/visualizing-json-documents/268807 "2021-04-04T16:59:03Z")
Hi every one. I have enriched all records in an es index with some json data. ex {'key1':{"key11":val11, "key12":val12}, 'key2': val2} I am looking for a nice way to display that json in Table view or maybe in another… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=990) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=992)