# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1051 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1052 --- ## [Elasticsearch or Kibana servers / APIs as Vector tile server](https://discuss.elastic.co/t/elasticsearch-or-kibana-servers-apis-as-vector-tile-server/264017)
**Author:** [@Florin\_Virdol](https://discuss.elastic.co/u/Florin_Virdol)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 3:58pm UTC](https://discuss.elastic.co/t/elasticsearch-or-kibana-servers-apis-as-vector-tile-server/264017 "2021-02-11T15:58:52Z")
Hello, As a bit of context, for my web app, on the Angular frontend, on top of Google Maps APIs, i'm using Uber's deck.gl library for better rendering geo-spatial data (GeoJson layers and MVT layers). For the deck.gl M… --- ## [ES7.9.1 : match\_phrase\_prefix irregular behaviour](https://discuss.elastic.co/t/es7-9-1-match-phrase-prefix-irregular-behaviour/264022)
**Author:** [@gap736uk](https://discuss.elastic.co/u/gap736uk)\ **Replies:** 3\ **Last updated:** [February 11, 2021, 3:48pm UTC](https://discuss.elastic.co/t/es7-9-1-match-phrase-prefix-irregular-behaviour/264022 "2021-02-11T15:48:34Z")
We have an ES index of the 230 million + files in our archive - each file gets indexed with details such as filename, directory path and file size I've been attempting to construct queries to aggregate information for a… --- ## [Running tasks on a node get terminated when node is shutdown](https://discuss.elastic.co/t/running-tasks-on-a-node-get-terminated-when-node-is-shutdown/263863)
**Author:** [@yabhishek](https://discuss.elastic.co/u/yabhishek)\ **Replies:** 2\ **Last updated:** [February 11, 2021, 3:36pm UTC](https://discuss.elastic.co/t/running-tasks-on-a-node-get-terminated-when-node-is-shutdown/263863 "2021-02-11T15:36:37Z")
I have a cluster with 3 nodes and trying to upgrade it from 6.6.2 to 7.10.2 using rolling upgrade. The documentation says that we shutdown the node and upgrade it to target version and performing this for all the nodes o… --- ## [Kibana Fleet error after upgrading Elastic Cloud to 7.11](https://discuss.elastic.co/t/kibana-fleet-error-after-upgrading-elastic-cloud-to-7-11/263969)
**Author:** [@nugroho-expereo](https://discuss.elastic.co/u/nugroho-expereo)\ **Replies:** 8\ **Last updated:** [February 11, 2021, 3:23pm UTC](https://discuss.elastic.co/t/kibana-fleet-error-after-upgrading-elastic-cloud-to-7-11/263969 "2021-02-11T15:23:50Z")
Hi, We get the following error when opening fleet page after upgrading from 7.10.2 to 7.11: Unable to initialize Fleet \[illegal\_argument\_exception\] updating component template \[logs-endpoint.events.file-mappings\] resu… --- ## [Managing SIEM rules is harder then it should](https://discuss.elastic.co/t/managing-siem-rules-is-harder-then-it-should/263864)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [February 11, 2021, 2:40pm UTC](https://discuss.elastic.co/t/managing-siem-rules-is-harder-then-it-should/263864 "2021-02-11T14:40:44Z")
Hello, I'd like to make some suggestions about the Elastic SIEM rule management. Monday we had a major hardware failure of a network card of on of our hot data nodes. The node in particular was not completely offline a… --- ## [Unable to setup Elasticsearch cluster mode](https://discuss.elastic.co/t/unable-to-setup-elasticsearch-cluster-mode/263987)
**Author:** [@Jose\_Angel\_Morena\_Si](https://discuss.elastic.co/u/Jose_Angel_Morena_Si)\ **Replies:** 5\ **Last updated:** [February 11, 2021, 2:30pm UTC](https://discuss.elastic.co/t/unable-to-setup-elasticsearch-cluster-mode/263987 "2021-02-11T14:30:17Z")
Hello there, I am trying to deploy Elasticsearch 7.10.2 in HA with three nodes, all of which play the roles: master, ingest and data. In order to do so, I am using the following configuration in each of the nodes: NOD… --- ## [\[SOLVED\] I can't use winlogbeat with Kibana](https://discuss.elastic.co/t/solved-i-cant-use-winlogbeat-with-kibana/263908)
**Author:** [@Christian\_SG](https://discuss.elastic.co/u/Christian_SG)\ **Replies:** 4\ **Last updated:** [February 11, 2021, 2:12pm UTC](https://discuss.elastic.co/t/solved-i-cant-use-winlogbeat-with-kibana/263908 "2021-02-11T14:12:41Z")
Hi everyone, I'm running elasticsearch and Kibana in a Debian10 machine, everything was working perfectly. Then I tried intalling winlogbeat in a Windows10 machine and here comes my problem, I've been searching for many … --- ## [Grok by beats agent](https://discuss.elastic.co/t/grok-by-beats-agent/264008)
**Author:** [@hugoboubou](https://discuss.elastic.co/u/hugoboubou)\ **Replies:** 2\ **Last updated:** [February 11, 2021, 2:12pm UTC](https://discuss.elastic.co/t/grok-by-beats-agent/264008 "2021-02-11T14:12:27Z")
Hello :smiley: I have several beats entries on my logstash, but the logs I process are different, so I would like to do a grok by beat. example log lines : 2017/07/27 18:02:37 VCS ERROR V-16-1-54031 Resource XXXXXXXXX… --- ## [Snapshot performance with ES 7.10](https://discuss.elastic.co/t/snapshot-performance-with-es-7-10/260739)
**Author:** [@karunelas](https://discuss.elastic.co/u/karunelas)\ **Replies:** 16\ **Last updated:** [February 11, 2021, 1:34pm UTC](https://discuss.elastic.co/t/snapshot-performance-with-es-7-10/260739 "2021-02-11T13:34:35Z")
Hi all: We have upgraded to ES 7.10 from 6.8. After the upgrade, we are observing that the time taken for the Snapshot on 7.10 is around 3 times slower compared to the snapshots with 6.8. These are snapshots of the ES c… --- ## [Проблемы с ram](https://discuss.elastic.co/t/ram/263593)
**Author:** [@maiklLen](https://discuss.elastic.co/u/maiklLen)\ **Replies:** 34\ **Last updated:** [February 11, 2021, 1:23pm UTC](https://discuss.elastic.co/t/ram/263593 "2021-02-11T13:23:59Z")
Elastic полностью съедает всю оперативную память на 15,5 ГБ После это перестаёт работать программы. Операционная система Windows 7 Пытались уменьшить размер, но все равно рабочий набор памяти постоянно растет и съеда… --- ## [Error migrating after upgrading to 7.11](https://discuss.elastic.co/t/error-migrating-after-upgrading-to-7-11/263928)
**Author:** [@stephan13360](https://discuss.elastic.co/u/stephan13360)\ **Replies:** 6\ **Last updated:** [February 11, 2021, 1:22pm UTC](https://discuss.elastic.co/t/error-migrating-after-upgrading-to-7-11/263928 "2021-02-11T13:22:57Z")
I just upgraded my Elasticsearch / Kibana from 7.10.2 to 7.11 and now Kibana logs the following error when trying to run the migration: { "type": "log", "@timestamp": "2021-02-10T20:11:18+01:00", "tags": \["fatal",… --- ## [Show graph on Number of Lines instead of Number of Bytes](https://discuss.elastic.co/t/show-graph-on-number-of-lines-instead-of-number-of-bytes/263939)
**Author:** [@homius](https://discuss.elastic.co/u/homius)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 1:14pm UTC](https://discuss.elastic.co/t/show-graph-on-number-of-lines-instead-of-number-of-bytes/263939 "2021-02-11T13:14:43Z")
Hi All, I am totally new in Kibana so my question might be dumb. In my Kibana Dashboard I see graph of my http requests/responses (Users, Total Processed, Request Rate,...). It also shows "Processed Prediction Bytes". Ho… --- ## [All shards failed for phase: \[query\]](https://discuss.elastic.co/t/all-shards-failed-for-phase-query/264020)
**Author:** [@Tabriz](https://discuss.elastic.co/u/Tabriz)\ **Replies:** 0\ **Last updated:** [February 11, 2021, 1:09pm UTC](https://discuss.elastic.co/t/all-shards-failed-for-phase-query/264020 "2021-02-11T13:09:19Z")
There is a such problem.What can be reason? --- ## [Elastic cluster upgrading order for nodes](https://discuss.elastic.co/t/elastic-cluster-upgrading-order-for-nodes/263508)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 2\ **Last updated:** [February 11, 2021, 12:38pm UTC](https://discuss.elastic.co/t/elastic-cluster-upgrading-order-for-nodes/263508 "2021-02-11T12:38:30Z")
I have elastic 5 nodes cluster, node1-master only node2-master only node3-data\_ingest node4-data+ingest node5-master+data+ingest Can upgrade node1 before upgrade node5? Thank you! --- ## [Multiple problems with Kibana Dashboards (Metricbeat/Winlogbeat)](https://discuss.elastic.co/t/multiple-problems-with-kibana-dashboards-metricbeat-winlogbeat/263424)
**Author:** [@keyofstarrysky973](https://discuss.elastic.co/u/keyofstarrysky973)\ **Replies:** 5\ **Last updated:** [February 11, 2021, 12:29pm UTC](https://discuss.elastic.co/t/multiple-problems-with-kibana-dashboards-metricbeat-winlogbeat/263424 "2021-02-11T12:29:40Z")
Hey Everyone. I have followed a basic implementation of ELK Stack (version 7.10) on a Windows 10 machine. Now though, I'm having problems with the visualisation of data from two Beats agents (Metricbeat and Winlogbeat). … --- ## [Convert Lucene BooleanQuery to ES BoolQueryBuilder](https://discuss.elastic.co/t/convert-lucene-booleanquery-to-es-boolquerybuilder/263993)
**Author:** [@Mladen\_Rusev](https://discuss.elastic.co/u/Mladen_Rusev)\ **Replies:** 0\ **Last updated:** [February 11, 2021, 10:40am UTC](https://discuss.elastic.co/t/convert-lucene-booleanquery-to-es-boolquerybuilder/263993 "2021-02-11T10:40:48Z")
Hello, I'm porting some indices from lucene to ES. I've managed to use QueryBuilders.queryStringQuery(queryString); to parse old lucene string queries to elastic. However I can't seem to find a way to use Lucene's B… --- ## [Coordination Only node and how does it affect cluster](https://discuss.elastic.co/t/coordination-only-node-and-how-does-it-affect-cluster/263769)
**Author:** [@vatsoo](https://discuss.elastic.co/u/vatsoo)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 10:55am UTC](https://discuss.elastic.co/t/coordination-only-node-and-how-does-it-affect-cluster/263769 "2021-02-11T10:55:00Z")
Hi everyone, I did not find precise information about the topic so asking here. I want to add Coordination only node to the cluster running it on same machine as Kibana is running. Then update Kibana config by setting … --- ## [Starting elasticsearch in kubernetes](https://discuss.elastic.co/t/starting-elasticsearch-in-kubernetes/263996)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 0\ **Last updated:** [February 11, 2021, 10:46am UTC](https://discuss.elastic.co/t/starting-elasticsearch-in-kubernetes/263996 "2021-02-11T10:46:59Z")
I am trying to start elasticsearch in kubernetes. I have used the quick starting guide therefore my manifest file looks like this: kind: Elasticsearch metadata: name: elasticsearch namespace: rcc … --- ## [Not able change type of a field string to date using index template](https://discuss.elastic.co/t/not-able-change-type-of-a-field-string-to-date-using-index-template/263995)
**Author:** [@amp](https://discuss.elastic.co/u/amp)\ **Replies:** 0\ **Last updated:** [February 11, 2021, 10:44am UTC](https://discuss.elastic.co/t/not-able-change-type-of-a-field-string-to-date-using-index-template/263995 "2021-02-11T10:44:49Z")
In elasticsearch 6.3 indexing windows log using Nxlog(3.7). Without any template all the fields indexed as strings. To get a date field we tried to change the Eventdate field as date. But getting parsing error. the be… --- ## [Progress of 7.10.0 to 7.11.0 upgrade status](https://discuss.elastic.co/t/progress-of-7-10-0-to-7-11-0-upgrade-status/263977)
**Author:** [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)\ **Replies:** 2\ **Last updated:** [February 11, 2021, 10:37am UTC](https://discuss.elastic.co/t/progress-of-7-10-0-to-7-11-0-upgrade-status/263977 "2021-02-11T10:37:36Z")
I run single node https://github.com/deviantony/docker-elk dockerized E, L and K. I upgraded the stack with docker-compose build and docker-compose up -d . Now the startup seems to be stuck at: {"type":"log","@timesta… --- ## [Purpose of TSVB Aggregation feature under Options tab for TSVB table](https://discuss.elastic.co/t/purpose-of-tsvb-aggregation-feature-under-options-tab-for-tsvb-table/263854)
**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\ **Replies:** 2\ **Last updated:** [February 11, 2021, 9:56am UTC](https://discuss.elastic.co/t/purpose-of-tsvb-aggregation-feature-under-options-tab-for-tsvb-table/263854 "2021-02-11T09:56:45Z")
Hello All, In the TSVB panel for Table, I can find choices to aggregate under two different places.. Under the metrics tab Under the options tab There is some special reason/ use of having two aggregation choice… --- ## [Share only the dasboard](https://discuss.elastic.co/t/share-only-the-dasboard/263959)
**Author:** [@albie.morken](https://discuss.elastic.co/u/albie.morken)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 9:05am UTC](https://discuss.elastic.co/t/share-only-the-dasboard/263959 "2021-02-11T09:05:22Z")
I am trying to display the kibana dashboard in one of the html page. I use the share option provided in the dashboard But instead of getting only that particular dashboard, with this link, I am able to see whole kiban… --- ## [Not able to install "logstash-filter-environment" in linux server : handshake\_failure](https://discuss.elastic.co/t/not-able-to-install-logstash-filter-environment-in-linux-server-handshake-failure/263968)
**Author:** [@sureshkk252](https://discuss.elastic.co/u/sureshkk252)\ **Replies:** 0\ **Last updated:** [February 11, 2021, 8:49am UTC](https://discuss.elastic.co/t/not-able-to-install-logstash-filter-environment-in-linux-server-handshake-failure/263968 "2021-02-11T08:49:05Z")
Hello, i am trying to install "logstash-filter-environment" plugin in a linux server, where i got this error. "Unable to download data from https://rubygems.org - Received fatal alert: handshake\_failure (https://api.rub… --- ## [How should I configure the number of node, shard and replica?](https://discuss.elastic.co/t/how-should-i-configure-the-number-of-node-shard-and-replica/263840)
**Author:** [@rider9581](https://discuss.elastic.co/u/rider9581)\ **Replies:** 17\ **Last updated:** [February 11, 2021, 8:38am UTC](https://discuss.elastic.co/t/how-should-i-configure-the-number-of-node-shard-and-replica/263840 "2021-02-11T08:38:10Z")
I have one server of the following spec: RAM: 128 GB HDD: 10TB \* 2 SSD: 256 GB CPU: 32 cores and I am going to manage up to 10TB of text data using Elasticsearch 7.9.3. Also, I plan to use Docker for the deployment o… --- ## [Appending Random number in csv file name](https://discuss.elastic.co/t/appending-random-number-in-csv-file-name/263575)
**Author:** [@ritusingh](https://discuss.elastic.co/u/ritusingh)\ **Replies:** 7\ **Last updated:** [February 11, 2021, 8:19am UTC](https://discuss.elastic.co/t/appending-random-number-in-csv-file-name/263575 "2021-02-11T08:19:59Z")
Hi, I want to append random number after the file name. output { stdout { codec =\> rubydebug } csv { # elastic field name fields =\> \["@timestamp","requestid","ngnix.responsebytes","ngnix.cpu.usage"\] #… --- ## [Compare two fields in same document without using script](https://discuss.elastic.co/t/compare-two-fields-in-same-document-without-using-script/263955)
**Author:** [@sardar\_nale](https://discuss.elastic.co/u/sardar_nale)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 7:53am UTC](https://discuss.elastic.co/t/compare-two-fields-in-same-document-without-using-script/263955 "2021-02-11T07:53:14Z")
Hi all, We are using elastic version 7.10.2. I want to compare two fields from a same document.Scripting is disabled in my organization. Kindly help in building below query without using script. Here my query is : nic… --- ## [Correct Index balancing between 2 different datacenter](https://discuss.elastic.co/t/correct-index-balancing-between-2-different-datacenter/263406)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 5\ **Last updated:** [February 11, 2021, 7:41am UTC](https://discuss.elastic.co/t/correct-index-balancing-between-2-different-datacenter/263406 "2021-02-11T07:41:46Z")
hi there, this is my current scenario: 5 nodes (n1-n2-n3-n4-n5) 1 index with 3 shards and 1 replica 2 datacenter (n1 in DC1, n2 in DC2, n3 in DC1, n4 in DC2, n5 in DC1) shard0 is on n1 and n5 (so in DC1) shard1 is … --- ## [Older indices are not getting deleted after rollover](https://discuss.elastic.co/t/older-indices-are-not-getting-deleted-after-rollover/263953)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 5\ **Last updated:** [February 11, 2021, 7:04am UTC](https://discuss.elastic.co/t/older-indices-are-not-getting-deleted-after-rollover/263953 "2021-02-11T07:04:10Z")
i did the following steps created an ilm policy. created an index template and attached the ilm policy to it. finally created an index using create index API. when i checked the index under index management section in… --- ## [Legend in map visualization](https://discuss.elastic.co/t/legend-in-map-visualization/263799)
**Author:** [@Pranath](https://discuss.elastic.co/u/Pranath)\ **Replies:** 4\ **Last updated:** [February 11, 2021, 4:38am UTC](https://discuss.elastic.co/t/legend-in-map-visualization/263799 "2021-02-11T04:38:57Z")
Hello, I have tried to get legend (as above one) for below map but didn't find that option anywhere in 7.9 version. Is there any way to add legend in map ? --- ## [Logstash Data Persistency](https://discuss.elastic.co/t/logstash-data-persistency/263948)
**Author:** [@leventyalcin](https://discuss.elastic.co/u/leventyalcin)\ **Replies:** 0\ **Last updated:** [February 11, 2021, 4:21am UTC](https://discuss.elastic.co/t/logstash-data-persistency/263948 "2021-02-11T04:21:52Z")
Hi, As you might know, in-flight queue is hold in memory by Logstash. I'm trying to enable data persistency with a persistent queue. However, restarting logstash or the instance wipes out the data. When I saw that I t… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1050) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1052)