# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1050

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1051

---

## [User\_bundle from internal Artifactory problem](https://discuss.elastic.co/t/user-bundle-from-internal-artifactory-problem/263087)

<div class="topic-metadata">

**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\
**Replies:** 1\
**Last updated:** [February 3, 2021, 1:47pm UTC](https://discuss.elastic.co/t/user-bundle-from-internal-artifactory-problem/263087 "2021-02-03T13:47:42Z")

</div>

Hi! I'm trying to add a custom cacerts.zip User\_Bundle to my ELK deployment in our ECE. Elasticsearch is bootlooping and the reason is an untrusted certificate. "elasticsearch": { "user\_bundles": \[ { …

---

## [Optimizing segment merging](https://discuss.elastic.co/t/optimizing-segment-merging/264111)

<div class="topic-metadata">

**Author:** [@buncieboy](https://discuss.elastic.co/u/buncieboy)\
**Replies:** 0\
**Last updated:** [February 12, 2021, 11:03am UTC](https://discuss.elastic.co/t/optimizing-segment-merging/264111 "2021-02-12T11:03:38Z")

</div>

When we index our data from our database (using the HibernateSearch-ElasticSearch implementation) we found we were getting a large amount of segments (20-30). On our current data we found that force-merging the data (2 i…

---

## [Split an array of arrays](https://discuss.elastic.co/t/split-an-array-of-arrays/263724)

<div class="topic-metadata">

**Author:** [@opellulo](https://discuss.elastic.co/u/opellulo)\
**Replies:** 4\
**Last updated:** [February 12, 2021, 10:52am UTC](https://discuss.elastic.co/t/split-an-array-of-arrays/263724 "2021-02-12T10:52:00Z")

</div>

Hi all, I'm currently working on parsing a really nasty xml stream: events come in single file form, can get up to 5000 lines and, most important, includes arrays of arrays which crucially hold the data I need to parse …

---

## [Cluster status red and unassigned shards](https://discuss.elastic.co/t/cluster-status-red-and-unassigned-shards/264081)

<div class="topic-metadata">

**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\
**Replies:** 2\
**Last updated:** [February 12, 2021, 10:49am UTC](https://discuss.elastic.co/t/cluster-status-red-and-unassigned-shards/264081 "2021-02-12T10:49:59Z")

</div>

I updated the elastic cluster to 7.10.1. Then elasticsearch service was restarted. Then cluster status became "Red". There are two unassigned shards (same index primary and replica shards). I want to know how to make cl…

---

## [Cannot be changed from type \[float\] to \[long\] issue appears. But, we have dynamic data and it's hard to put mappings on them](https://discuss.elastic.co/t/cannot-be-changed-from-type-float-to-long-issue-appears-but-we-have-dynamic-data-and-its-hard-to-put-mappings-on-them/264105)

<div class="topic-metadata">

**Author:** [@Kruthika\_C\_S](https://discuss.elastic.co/u/Kruthika_C_S)\
**Replies:** 0\
**Last updated:** [February 12, 2021, 10:35am UTC](https://discuss.elastic.co/t/cannot-be-changed-from-type-float-to-long-issue-appears-but-we-have-dynamic-data-and-its-hard-to-put-mappings-on-them/264105 "2021-02-12T10:35:10Z")

</div>

I have a lot of unstructured data in millions. Some of them have {...data, value: \<float\>} and some have {...data, value: \<long\>} in the data. All I'm trying to say is, the data type of value can differ. In addition t…

---

## [Logstash input via website user file upload](https://discuss.elastic.co/t/logstash-input-via-website-user-file-upload/263994)

<div class="topic-metadata">

**Author:** [@Daniel\_Jankech](https://discuss.elastic.co/u/Daniel_Jankech)\
**Replies:** 2\
**Last updated:** [February 12, 2021, 10:16am UTC](https://discuss.elastic.co/t/logstash-input-via-website-user-file-upload/263994 "2021-02-12T10:16:54Z")

</div>

Hi, Im very new to the whole ELK stack and Im still learning. For my current project Im required to process some MongoDB log files uploaded by user through our website and I have trouble figuring out how I should configu…

---

## [7.11: Expected two arguments specifying path to ES\_PATH\_CONF and plugins directory](https://discuss.elastic.co/t/7-11-expected-two-arguments-specifying-path-to-es-path-conf-and-plugins-directory/263986)

<div class="topic-metadata">

**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\
**Replies:** 2\
**Last updated:** [February 12, 2021, 8:26am UTC](https://discuss.elastic.co/t/7-11-expected-two-arguments-specifying-path-to-es-path-conf-and-plugins-directory/263986 "2021-02-12T08:26:10Z")

</div>

Вчера вечером решил обновить 7.10.2(windows 2016) на свежий 7.11 Прощёлкал как всегда далее и на этапе запуска сервиса облом. В ивентах: Service cannot be started. Elastic.ProcessHosts.Process.StartupException: Could n…

---

## [Need to setup cpu,memory,disk dashboards in kibana](https://discuss.elastic.co/t/need-to-setup-cpu-memory-disk-dashboards-in-kibana/263295)

<div class="topic-metadata">

**Author:** [@charanteja](https://discuss.elastic.co/u/charanteja)\
**Replies:** 6\
**Last updated:** [February 12, 2021, 6:17am UTC](https://discuss.elastic.co/t/need-to-setup-cpu-memory-disk-dashboards-in-kibana/263295 "2021-02-12T06:17:29Z")

</div>

I am fairly new to ELK and going thru dis portal is kind of helping me a little bit. I saw you are active and knowledgable in ELK. Could you help me in setting my visualization so I could set up the dashboards for my ne…

---

## [Indexing time issue after upgrading 7.7.1 to 7.10.1](https://discuss.elastic.co/t/indexing-time-issue-after-upgrading-7-7-1-to-7-10-1/261777)

<div class="topic-metadata">

**Author:** [@Evgeny\_Dekhtyarev](https://discuss.elastic.co/u/Evgeny_Dekhtyarev)\
**Replies:** 4\
**Last updated:** [February 12, 2021, 5:22am UTC](https://discuss.elastic.co/t/indexing-time-issue-after-upgrading-7-7-1-to-7-10-1/261777 "2021-02-12T05:22:51Z")

</div>

Hello everyone! Thanks for your product! We have several Elasticsearch clusters and one of them has a problem when upgrading from 7.7.1 to 7.10.1. We needed an update due to a problem with the circuit breaker (https:/…

---

## [Parsing USG Pro Firewall logs using GROK](https://discuss.elastic.co/t/parsing-usg-pro-firewall-logs-using-grok/264078)

<div class="topic-metadata">

**Author:** [@jaysbeekay](https://discuss.elastic.co/u/jaysbeekay)\
**Replies:** 2\
**Last updated:** [February 12, 2021, 4:36am UTC](https://discuss.elastic.co/t/parsing-usg-pro-firewall-logs-using-grok/264078 "2021-02-12T04:36:31Z")

</div>

I have managed to stand up an ELK stack on an Ubuntu host to bring in my NGINX logs, which is all working well. I have now tried to expand this to bring in firewall logs from my USG Pro Firewall and am running into some…

---

## [Elasticsearch.py scanerror](https://discuss.elastic.co/t/elasticsearch-py-scanerror/264074)

<div class="topic-metadata">

**Author:** [@diego.ss](https://discuss.elastic.co/u/diego.ss)\
**Replies:** 0\
**Last updated:** [February 12, 2021, 2:02am UTC](https://discuss.elastic.co/t/elasticsearch-py-scanerror/264074 "2021-02-12T02:02:34Z")

</div>

Hello, I'm having a similar problem with elasticsearch-py as in the discussion below, except for the fact that my problem is with the version 6. https://discuss.elastic.co/t/elasticsearch-dsl-python-scanerror/201980. …

---

## [Logstash kv field\_split regex](https://discuss.elastic.co/t/logstash-kv-field-split-regex/264058)

<div class="topic-metadata">

**Author:** [@newmember](https://discuss.elastic.co/u/newmember)\
**Replies:** 2\
**Last updated:** [February 12, 2021, 1:10am UTC](https://discuss.elastic.co/t/logstash-kv-field-split-regex/264058 "2021-02-12T01:10:26Z")

</div>

I am using logstash 2.4.0 for business reasons. Does the field\_split split on each of these characters: (,\\r,\\n,|,\\n,),\\t OR using regex does the split recognize the OR option in the brackets? (\\r\\n|\\n)\\t kv { …

---

## [Thread waitedTime is more while connecting to elastic](https://discuss.elastic.co/t/thread-waitedtime-is-more-while-connecting-to-elastic/264024)

<div class="topic-metadata">

**Author:** [@Sumaiya](https://discuss.elastic.co/u/Sumaiya)\
**Replies:** 1\
**Last updated:** [February 12, 2021, 12:59am UTC](https://discuss.elastic.co/t/thread-waitedtime-is-more-while-connecting-to-elastic/264024 "2021-02-12T00:59:04Z")

</div>

Hello All , One of our spring boot micro service connecting to elastic has high response time , while the took time itself is 50ms the service response time is high . After taking couple of threaddumps I see there are i…

---

## [SAML Returning 304 Error](https://discuss.elastic.co/t/saml-returning-304-error/264033)

<div class="topic-metadata">

**Author:** [@teej](https://discuss.elastic.co/u/teej)\
**Replies:** 1\
**Last updated:** [February 11, 2021, 11:53pm UTC](https://discuss.elastic.co/t/saml-returning-304-error/264033 "2021-02-11T23:53:52Z")

</div>

Hi, I have a system currently using AD to authenticate users. Recently, they've asked for SAML to be used as a primary realm. Problem is when I try to bring up Kibana I get "Error 403 - Forbidden". The logs show: {"ty…

---

## [Compare a vector to a list of vectors contained in each document](https://discuss.elastic.co/t/compare-a-vector-to-a-list-of-vectors-contained-in-each-document/263905)

<div class="topic-metadata">

**Author:** [@flavienbwk](https://discuss.elastic.co/u/flavienbwk)\
**Replies:** 1\
**Last updated:** [February 11, 2021, 11:04pm UTC](https://discuss.elastic.co/t/compare-a-vector-to-a-list-of-vectors-contained-in-each-document/263905 "2021-02-11T23:04:54Z")

</div>

Hi, Each of my documents contain a list of dense\_vectors inside a nested object : words.vector I try to compare my input vector to all documents' words.vector properties. I currently try with the following but elastic…

---

## [Unsupported version after upgrade to 7.11](https://discuss.elastic.co/t/unsupported-version-after-upgrade-to-7-11/264064)

<div class="topic-metadata">

**Author:** [@gdoctor](https://discuss.elastic.co/u/gdoctor)\
**Replies:** 1\
**Last updated:** [February 11, 2021, 7:31pm UTC](https://discuss.elastic.co/t/unsupported-version-after-upgrade-to-7-11/264064 "2021-02-11T19:31:41Z")

</div>

I had used ECK to install elasticsearch version 7.9 and successfully upgraded to 7.10. I just attempted to upgrade again to 7.11 and am getting the error "unsupported\_distribution". I never setup any licensing, so unless…

---

## [Forced Awareness Setting](https://discuss.elastic.co/t/forced-awareness-setting/264060)

<div class="topic-metadata">

**Author:** [@abdulazizali77](https://discuss.elastic.co/u/abdulazizali77)\
**Replies:** 0\
**Last updated:** [February 11, 2021, 10:27pm UTC](https://discuss.elastic.co/t/forced-awareness-setting/264060 "2021-02-11T22:27:35Z")

</div>

Hi Currently im testing 7.2 from a zip file in a development environment on Windows 10. I apologize if this has been thoroughly explained elsewhere but Ive looked at a few of the old forced awareness topics here and i …

---

## [Grok for time with UUUU](https://discuss.elastic.co/t/grok-for-time-with-uuuu/264040)

<div class="topic-metadata">

**Author:** [@newmember](https://discuss.elastic.co/u/newmember)\
**Replies:** 2\
**Last updated:** [February 11, 2021, 9:57pm UTC](https://discuss.elastic.co/t/grok-for-time-with-uuuu/264040 "2021-02-11T21:57:28Z")

</div>

I am reading this in the grok patterns pages but I dont see a syntax for the time format. # datestamp is YYYY/MM/DD-HH:MM:SS.UUUU (or something like it) Is there a grok pattern for this time format? 10:02:19.9830

---

## [Long and float fields showing up as text fields in Kibana](https://discuss.elastic.co/t/long-and-float-fields-showing-up-as-text-fields-in-kibana/263921)

<div class="topic-metadata">

**Author:** [@asnyameeteen](https://discuss.elastic.co/u/asnyameeteen)\
**Replies:** 0\
**Last updated:** [February 10, 2021, 6:37pm UTC](https://discuss.elastic.co/t/long-and-float-fields-showing-up-as-text-fields-in-kibana/263921 "2021-02-10T18:37:49Z")

</div>

Running Kibana version 5.5.2. My current setup is Logstash is taking the logs from Docker containers, runs grok filters before sending the logs to elasticsearch. The specific logs that I need to show up as long, float a…

---

## [Translate Filter plugin for a real CSV](https://discuss.elastic.co/t/translate-filter-plugin-for-a-real-csv/263940)

<div class="topic-metadata">

**Author:** [@jchaves506](https://discuss.elastic.co/u/jchaves506)\
**Replies:** 3\
**Last updated:** [February 11, 2021, 8:02pm UTC](https://discuss.elastic.co/t/translate-filter-plugin-for-a-real-csv/263940 "2021-02-11T20:02:10Z")

</div>

Hello I have a big CSV file(10 columns, 40Mb) that I want to use as a dictionary using the translate filter. I'm already doing that with a little csv files (2 columns, 4kb) and that is working fine. I'm doing it like th…

---

## [Mysql schema logs push to logstash](https://discuss.elastic.co/t/mysql-schema-logs-push-to-logstash/264016)

<div class="topic-metadata">

**Author:** [@psganeshk](https://discuss.elastic.co/u/psganeshk)\
**Replies:** 2\
**Last updated:** [February 11, 2021, 7:59pm UTC](https://discuss.elastic.co/t/mysql-schema-logs-push-to-logstash/264016 "2021-02-11T19:59:19Z")

</div>

Logstash config file '' input { jdbc { clean\_run =\> true jdbc\_validate\_connection =\> true jdbc\_driver\_library =\> 'C:\\Program Files (x86)\\MySQL\\Connector J 8 0\\mysql-connector-java-8.0.22.jar' jdbc\_driver\_class =\> …

---

## [URGENT.. PLEASE HELP : Not able to execute a procedure from logstash jdbc\_filter](https://discuss.elastic.co/t/urgent-please-help-not-able-to-execute-a-procedure-from-logstash-jdbc-filter/263858)

<div class="topic-metadata">

**Author:** [@Melvin\_Shaju](https://discuss.elastic.co/u/Melvin_Shaju)\
**Replies:** 1\
**Last updated:** [February 11, 2021, 7:56pm UTC](https://discuss.elastic.co/t/urgent-please-help-not-able-to-execute-a-procedure-from-logstash-jdbc-filter/263858 "2021-02-11T19:56:42Z")

</div>

I'm getting this following error when trying to execute a mysql procedure call from logstash. This procedure is getting successfully executed through mysql command line. The error is jdbcstreaming - Exception when exec…

---

## [Anamoly Initialize issues/ Create Trigger give authorization error](https://discuss.elastic.co/t/anamoly-initialize-issues-create-trigger-give-authorization-error/263796)

<div class="topic-metadata">

**Author:** [@Vimal\_Bagmar](https://discuss.elastic.co/u/Vimal_Bagmar)\
**Replies:** 1\
**Last updated:** [February 11, 2021, 7:13pm UTC](https://discuss.elastic.co/t/anamoly-initialize-issues-create-trigger-give-authorization-error/263796 "2021-02-11T19:13:59Z")

</div>

Am using Kibana endpoint from ElasticSearch cluster. Was able to create Visuals. But when I create Anamoly , I have 2 issues Anamoly is still in initialize phase since 24hr. Creating Trigger (Alerting-\>Monitors-\>N…

---

## [Lowercase analyzer filter with nested field and queries](https://discuss.elastic.co/t/lowercase-analyzer-filter-with-nested-field-and-queries/264043)

<div class="topic-metadata">

**Author:** [@kgeographer](https://discuss.elastic.co/u/kgeographer)\
**Replies:** 0\
**Last updated:** [February 11, 2021, 6:31pm UTC](https://discuss.elastic.co/t/lowercase-analyzer-filter-with-nested-field-and-queries/264043 "2021-02-11T18:31:55Z")

</div>

In v6.6 I can't get a nested query to ignore case on a search of a property in the nested object, whether I specify a custom analyzer or not. Case is ignored on non-nested fields as expected. Is this expected? Do I have…

---

## [Tooltip in Vega](https://discuss.elastic.co/t/tooltip-in-vega/263886)

<div class="topic-metadata">

**Author:** [@Pranath](https://discuss.elastic.co/u/Pranath)\
**Replies:** 5\
**Last updated:** [February 11, 2021, 5:27pm UTC](https://discuss.elastic.co/t/tooltip-in-vega/263886 "2021-02-11T17:27:38Z")

</div>

Here I wanted to show distinct 'd' field values for each 'a' field in tooltip. For text it's giving correct but A and B are overlapping and in tooltip it's giving only B. { "$schema": "https://vega.github.io/schema/ve…

---

## [Newly added Field Not available for aggregations](https://discuss.elastic.co/t/newly-added-field-not-available-for-aggregations/261050)

<div class="topic-metadata">

**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\
**Replies:** 7\
**Last updated:** [February 11, 2021, 5:21pm UTC](https://discuss.elastic.co/t/newly-added-field-not-available-for-aggregations/261050 "2021-02-11T17:21:29Z")

</div>

Elasticsearch 7.9.1 Kibana 7.9.1 - 4 docker containers Updated the index mapping to add new field of type keyword. Waited for new index to be created. Refreshed the index pattern in Kibana. Searched for that field i…

---

## [Logstash config for parsing ASA logs](https://discuss.elastic.co/t/logstash-config-for-parsing-asa-logs/262563)

<div class="topic-metadata">

**Author:** [@psycadelicgecko](https://discuss.elastic.co/u/psycadelicgecko)\
**Replies:** 2\
**Last updated:** [February 11, 2021, 5:00pm UTC](https://discuss.elastic.co/t/logstash-config-for-parsing-asa-logs/262563 "2021-02-11T17:00:27Z")

</div>

So I am brand new to ELK/Elastic so I'm sure I'm doing at least a few things wrong. I was able to find a couple examples of Logstash config files for parsing ASA logs. They are similar to what I've seen on this forum. S…

---

## [Scripted field not available in Rest API](https://discuss.elastic.co/t/scripted-field-not-available-in-rest-api/264031)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 5\
**Last updated:** [February 11, 2021, 4:54pm UTC](https://discuss.elastic.co/t/scripted-field-not-available-in-rest-api/264031 "2021-02-11T16:54:26Z")

</div>

Hi All, I'm trying to fetch data from elasticsaerch using rest api, i'm able to get all the documents by running the below query GET perfchk/\_search?size=1000 I have created few scripted fields in this index, those sc…

---

## [Kibana throwing error "{"statusCode":503,"error":"Service Unavailable","message":"Service Unavailable"}"](https://discuss.elastic.co/t/kibana-throwing-error-statuscode-503-error-service-unavailable-message-service-unavailable/263844)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 9\
**Last updated:** [February 11, 2021, 4:22pm UTC](https://discuss.elastic.co/t/kibana-throwing-error-statuscode-503-error-service-unavailable-message-service-unavailable/263844 "2021-02-11T16:22:35Z")

</div>

Hi Team, Im using kibana version 6.4.0 and when ever i try to save or create new index im getting 503 error. All the elasticsearch service are up and running. My setup is 3 Master and 3 Data and 1 coordinate Node. My…

---

## [Unique Count by Bucket](https://discuss.elastic.co/t/unique-count-by-bucket/263978)

<div class="topic-metadata">

**Author:** [@Razvan\_Todea](https://discuss.elastic.co/u/Razvan_Todea)\
**Replies:** 5\
**Last updated:** [February 11, 2021, 4:13pm UTC](https://discuss.elastic.co/t/unique-count-by-bucket/263978 "2021-02-11T16:13:54Z")

</div>

How could we visualize an unique count grouped by bucket? We understand that the counting will only check the uniqueness inside the bucket, but is it another way to achieve this? Example: We want to visualize all the u…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1049)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1051)
