# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1054

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1055

---

## [Split FQDN](https://discuss.elastic.co/t/split-fqdn/263773)

<div class="topic-metadata">

**Author:** [@Dan\_L](https://discuss.elastic.co/u/Dan_L)\
**Replies:** 2\
**Last updated:** [February 9, 2021, 4:54pm UTC](https://discuss.elastic.co/t/split-fqdn/263773 "2021-02-09T16:54:53Z")

</div>

I'm trying to split an FQDN to get the base server name. Currently, the FQDN is stored in "server", so I'd like to split "server" on "." and get the name. Additionally, sometimes the server may not be the FQDN, so it'd …

---

## [Script query with nested array - is it possible?](https://discuss.elastic.co/t/script-query-with-nested-array-is-it-possible/263772)

<div class="topic-metadata">

**Author:** [@Ofir\_Edi](https://discuss.elastic.co/u/Ofir_Edi)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 4:34pm UTC](https://discuss.elastic.co/t/script-query-with-nested-array-is-it-possible/263772 "2021-02-09T16:34:22Z")

</div>

Hi, i'm having issue filtering by script on a nested array. this is my sample data and mapping: { "id" : "123", "messages" : \[ { "level" : "error",…

---

## [Are replicas just for disaster recovery?](https://discuss.elastic.co/t/are-replicas-just-for-disaster-recovery/263745)

<div class="topic-metadata">

**Author:** [@mahalabobis](https://discuss.elastic.co/u/mahalabobis)\
**Replies:** 5\
**Last updated:** [February 9, 2021, 3:44pm UTC](https://discuss.elastic.co/t/are-replicas-just-for-disaster-recovery/263745 "2021-02-09T15:44:50Z")

</div>

We are using Elasticsearch mainly as cache, for getting fast results. Currently, we have all the default settings which I think is 1 replica per shard. Should I change this setting to 0? Are replicas just for data recov…

---

## [Field change value](https://discuss.elastic.co/t/field-change-value/263738)

<div class="topic-metadata">

**Author:** [@paasi6666](https://discuss.elastic.co/u/paasi6666)\
**Replies:** 3\
**Last updated:** [February 9, 2021, 3:20pm UTC](https://discuss.elastic.co/t/field-change-value/263738 "2021-02-09T15:20:30Z")

</div>

I want to change the value of the field user.id , so that it only shows the username. In this example, I want to remove the "slu" so that the value only shows "AlbissR" and not "slu\\AlbissR"

---

## [Parsing Json object array](https://discuss.elastic.co/t/parsing-json-object-array/262487)

<div class="topic-metadata">

**Author:** [@jolaniya](https://discuss.elastic.co/u/jolaniya)\
**Replies:** 6\
**Last updated:** [February 9, 2021, 3:19pm UTC](https://discuss.elastic.co/t/parsing-json-object-array/262487 "2021-02-09T15:19:31Z")

</div>

Hi, I have trouble with a xml file. I have applied xml filter on that and after that i am getting 2 outputs. message.GeneralInfo message.ReportNode I guess these are json outputs but json filter is not working on th…

---

## [Can I join an elasticsearch index with geojson to form one index to use as point to point map?](https://discuss.elastic.co/t/can-i-join-an-elasticsearch-index-with-geojson-to-form-one-index-to-use-as-point-to-point-map/263073)

<div class="topic-metadata">

**Author:** [@Mahlatse\_Wiwi](https://discuss.elastic.co/u/Mahlatse_Wiwi)\
**Replies:** 3\
**Last updated:** [February 9, 2021, 3:08pm UTC](https://discuss.elastic.co/t/can-i-join-an-elasticsearch-index-with-geojson-to-form-one-index-to-use-as-point-to-point-map/263073 "2021-02-09T15:08:12Z")

</div>

I have an index "index\_travels" which has a field "travel\_from" and "travel\_to". These fields are not geofields. However, I have imported a geojson file "Wards" that has a field "wardID" which is the same as "travel\_fro…

---

## [Elasticsearch 6.8 ignores my field mappings](https://discuss.elastic.co/t/elasticsearch-6-8-ignores-my-field-mappings/262816)

<div class="topic-metadata">

**Author:** [@logben](https://discuss.elastic.co/u/logben)\
**Replies:** 2\
**Last updated:** [February 9, 2021, 3:03pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-ignores-my-field-mappings/262816 "2021-02-09T15:03:57Z")

</div>

Hello! I have field mappings for an index like { "index\_patterns": \["logstash-iis2-\*"\], "version":100, "settings":{ "number\_of\_replicas":0, "number\_of\_shards":1, "index.refresh\_interval":"30s" }, "m…

---

## [java.lang.IllegalStateException: node \[LKTUQfgPSeClvaOfA8oIdg\] is not available](https://discuss.elastic.co/t/java-lang-illegalstateexception-node-lktuqfgpseclvaofa8oidg-is-not-available/263750)

<div class="topic-metadata">

**Author:** [@praffuln](https://discuss.elastic.co/u/praffuln)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 2:37pm UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-node-lktuqfgpseclvaofa8oidg-is-not-available/263750 "2021-02-09T14:37:44Z")

</div>

I am using Scroll API Elastic search (https://www.elastic.co/guide/en/elasticsearch/client/java-rest/master/java-rest-high-search-scroll.html). Java code is exactly same as describe in link. This code is giving below ex…

---

## [Show an Scripted Value in a Visualization](https://discuss.elastic.co/t/show-an-scripted-value-in-a-visualization/263630)

<div class="topic-metadata">

**Author:** [@Juan\_Montoya](https://discuss.elastic.co/u/Juan_Montoya)\
**Replies:** 2\
**Last updated:** [February 9, 2021, 2:32pm UTC](https://discuss.elastic.co/t/show-an-scripted-value-in-a-visualization/263630 "2021-02-09T14:32:52Z")

</div>

Hi, I'm creating a dashboard and now I need to show the unitary value of the products, this value must be dynamical along the time, the unitary value must be calculated adding all the prices and adding all the units to …

---

## [Problem to get xml response with http\_poller plugin](https://discuss.elastic.co/t/problem-to-get-xml-response-with-http-poller-plugin/263749)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 2:32pm UTC](https://discuss.elastic.co/t/problem-to-get-xml-response-with-http-poller-plugin/263749 "2021-02-09T14:32:39Z")

</div>

Hi all, I want to load data from an api rest (response xml) using logstash 7.9.0 this is my config file: input { http\_poller { urls =\> { method =\> get url1 =\> "https://\*\*\*\*\*\*\*/rest/1.0/geography"…

---

## [Date, Scripted Fields](https://discuss.elastic.co/t/date-scripted-fields/263341)

<div class="topic-metadata">

**Author:** [@Rajasekhar\_Muthamset](https://discuss.elastic.co/u/Rajasekhar_Muthamset)\
**Replies:** 3\
**Last updated:** [February 9, 2021, 1:49pm UTC](https://discuss.elastic.co/t/date-scripted-fields/263341 "2021-02-09T13:49:06Z")

</div>

Hello All, I'm getting data as below from my application ....."extraParams":\[{"name":"Item","value":"item1"},{"name":"DateTime","value":"0001519156380000"},.... I would like the data of the field value as Date instead…

---

## [Proximity with intervals query question](https://discuss.elastic.co/t/proximity-with-intervals-query-question/263730)

<div class="topic-metadata">

**Author:** [@Daantie](https://discuss.elastic.co/u/Daantie)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 1:12pm UTC](https://discuss.elastic.co/t/proximity-with-intervals-query-question/263730 "2021-02-09T13:12:28Z")

</div>

Hi all! I'm trying to understand the inner workings of intervals query and I'm confused and hope that anyone can explain this to me a bit. So I have encountered this piece of data (mind the bold words for the query later…

---

## [Logstash - Elastichsearch Output - ILM](https://discuss.elastic.co/t/logstash-elastichsearch-output-ilm/263700)

<div class="topic-metadata">

**Author:** [@Jurilz](https://discuss.elastic.co/u/Jurilz)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 9:15am UTC](https://discuss.elastic.co/t/logstash-elastichsearch-output-ilm/263700 "2021-02-09T09:15:26Z")

</div>

Good day, I'm trying to establish an Index Lifecycle Management for my indices by using the elasticsearch output in Logstash. This is the elasticsearch output plugin config: output { if "tomcat" in \[type\] { elas…

---

## [Filebeat logs not being published to Elastic](https://discuss.elastic.co/t/filebeat-logs-not-being-published-to-elastic/263605)

<div class="topic-metadata">

**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\
**Replies:** 5\
**Last updated:** [February 9, 2021, 1:11pm UTC](https://discuss.elastic.co/t/filebeat-logs-not-being-published-to-elastic/263605 "2021-02-09T13:11:19Z")

</div>

I am sending csv data from filebeat to elastic search following this guide: I have created an ingest pipeline, tested it with the \_simulate api, and everything looks fine. This is my filebeat configuration: fil…

---

## [Moving from daily to weekly indices, advice needed](https://discuss.elastic.co/t/moving-from-daily-to-weekly-indices-advice-needed/263710)

<div class="topic-metadata">

**Author:** [@MichelV](https://discuss.elastic.co/u/MichelV)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 12:52pm UTC](https://discuss.elastic.co/t/moving-from-daily-to-weekly-indices-advice-needed/263710 "2021-02-09T12:52:29Z")

</div>

After running into the 1000/1000 shards issue, I need to reduce the number of shards in use preferably without needing to remove to many old indices. Currently the configuration is set to daily indices, so we decided to …

---

## [Logstash filter with separator " \_"](https://discuss.elastic.co/t/logstash-filter-with-separator/263675)

<div class="topic-metadata">

**Author:** [@vik1](https://discuss.elastic.co/u/vik1)\
**Replies:** 3\
**Last updated:** [February 9, 2021, 12:47pm UTC](https://discuss.elastic.co/t/logstash-filter-with-separator/263675 "2021-02-09T12:47:45Z")

</div>

Hello, I am using logstash to collect data from FortiGate. I have one special field to check the number of connections per day. This "vpn" field looks like sz\_forti, szec\_forti. I need to take the first characters before…

---

## [Kibana services not running in ubuntu 18.04](https://discuss.elastic.co/t/kibana-services-not-running-in-ubuntu-18-04/263680)

<div class="topic-metadata">

**Author:** [@Abhiranjan\_Singh](https://discuss.elastic.co/u/Abhiranjan_Singh)\
**Replies:** 4\
**Last updated:** [February 9, 2021, 12:40pm UTC](https://discuss.elastic.co/t/kibana-services-not-running-in-ubuntu-18-04/263680 "2021-02-09T12:40:42Z")

</div>

Kibana services not running in ubuntu 18.04, earlier it was working fine since i have updated , it is not working now , getting below error at Module.require (internal/modules/cjs/loader.js:637:17)"} {"type":"log","@ti…

---

## [KIbana reporting problem](https://discuss.elastic.co/t/kibana-reporting-problem/263410)

<div class="topic-metadata">

**Author:** [@Ged](https://discuss.elastic.co/u/Ged)\
**Replies:** 3\
**Last updated:** [February 9, 2021, 11:58am UTC](https://discuss.elastic.co/t/kibana-reporting-problem/263410 "2021-02-09T11:58:10Z")

</div>

Hi Team, I've problem when generating CSV report based on search result. I've two Kibanas (7.8.0) connected to one Elasticsearch cluster so I've added the same xpack.reporting.encryptionKey in both instances as describ…

---

## [Not able to change Kibana custom logo in 7.10](https://discuss.elastic.co/t/not-able-to-change-kibana-custom-logo-in-7-10/263374)

<div class="topic-metadata">

**Author:** [@shehzadshaikh](https://discuss.elastic.co/u/shehzadshaikh)\
**Replies:** 2\
**Last updated:** [February 9, 2021, 11:33am UTC](https://discuss.elastic.co/t/not-able-to-change-kibana-custom-logo-in-7-10/263374 "2021-02-09T11:33:13Z")

</div>

I am trying to customize the Kibana UI with custom message and logo, i tried following the guide published here - https://discuss.elastic.co/t/custom-logo-kibana-7-10-0-guide/257686 However, when run the npx command aft…

---

## [PV sizing](https://discuss.elastic.co/t/pv-sizing/263715)

<div class="topic-metadata">

**Author:** [@crazysyops](https://discuss.elastic.co/u/crazysyops)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 10:57am UTC](https://discuss.elastic.co/t/pv-sizing/263715 "2021-02-09T10:57:48Z")

</div>

Hey Guys, I am just starting my journey with ELK. I was trying to do a little bit of research about it however I could not find a clear answer. We say we have 100TB requirement for data storage etc. We have built our cl…

---

## [Line Graphs with Values](https://discuss.elastic.co/t/line-graphs-with-values/263677)

<div class="topic-metadata">

**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 11:20am UTC](https://discuss.elastic.co/t/line-graphs-with-values/263677 "2021-02-09T11:20:18Z")

</div>

I was just wondering if there is any way to display values in line graph. Currently if we hover over the data points, it displays the corresponding values. I'm open to using any extensions as well. Please let me know

---

## [Is it possible to assign shard according to disk space?](https://discuss.elastic.co/t/is-it-possible-to-assign-shard-according-to-disk-space/263720)

<div class="topic-metadata">

**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 11:18am UTC](https://discuss.elastic.co/t/is-it-possible-to-assign-shard-according-to-disk-space/263720 "2021-02-09T11:18:29Z")

</div>

I have a cluster of 3 masters and 13 data nodes. The disk capacity of data-12 and data-13 nodes is 1.5TB, but the disk capacity of other data nodes is 5TB. As shown in the screenshot, data-12 and data-13 disk space are…

---

## [JVM reached above 70% in client node without any request serve](https://discuss.elastic.co/t/jvm-reached-above-70-in-client-node-without-any-request-serve/262305)

<div class="topic-metadata">

**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\
**Replies:** 3\
**Last updated:** [February 9, 2021, 10:58am UTC](https://discuss.elastic.co/t/jvm-reached-above-70-in-client-node-without-any-request-serve/262305 "2021-02-09T10:58:01Z")

</div>

JVM of client node reached above 70% in an ideal state of the cluster. Is there any reason to increase JVM without any request? The number of shards and instance memory is optimal.

---

## [Getting MasterNotDiscoveredException: null in client node](https://discuss.elastic.co/t/getting-masternotdiscoveredexception-null-in-client-node/262317)

<div class="topic-metadata">

**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\
**Replies:** 5\
**Last updated:** [February 9, 2021, 10:57am UTC](https://discuss.elastic.co/t/getting-masternotdiscoveredexception-null-in-client-node/262317 "2021-02-09T10:57:16Z")

</div>

We have 3 master nodes, 2 client nodes, and 8 data nodes. And client nodes ES logs show below mentioned error even though resource usage(JVM and CPU ) looks fine at that time. And cluster went unresponsive mode. ALL node…

---

## [Can not list indices](https://discuss.elastic.co/t/can-not-list-indices/263711)

<div class="topic-metadata">

**Author:** [@Muhammad\_Yasser](https://discuss.elastic.co/u/Muhammad_Yasser)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 10:43am UTC](https://discuss.elastic.co/t/can-not-list-indices/263711 "2021-02-09T10:43:49Z")

</div>

Hello, I'm running ELK cluster on Openshift. I can see the container log for Elasticsearch container and verify that it's storing infra, audit and app indices. Like this: \[2021-02-09T08:10:39,473\]\[INFO \]\[o.e.c.m.Meta…

---

## [Group the data fields from multiple indexes](https://discuss.elastic.co/t/group-the-data-fields-from-multiple-indexes/263712)

<div class="topic-metadata">

**Author:** [@mrunalini](https://discuss.elastic.co/u/mrunalini)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 10:45am UTC](https://discuss.elastic.co/t/group-the-data-fields-from-multiple-indexes/263712 "2021-02-09T10:45:37Z")

</div>

Hi Team, I have 3 different index with one transaction\_id as common in all, i am generation report with fields from all 3 indices at every midnight for transactions of last 3 days. I have different fields in all indic…

---

## [Data stream = real time search?](https://discuss.elastic.co/t/data-stream-real-time-search/263697)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 2\
**Last updated:** [February 9, 2021, 10:36am UTC](https://discuss.elastic.co/t/data-stream-real-time-search/263697 "2021-02-09T10:36:29Z")

</div>

I dont understand what feature Data Stream (https://www.elastic.co/guide/en/elasticsearch/reference/master/data-streams.html) is providing. On first reading, DataStream is dynamic index alias. Is it providing in-memory…

---

## [Error cosine similarity](https://discuss.elastic.co/t/error-cosine-similarity/263699)

<div class="topic-metadata">

**Author:** [@fjac](https://discuss.elastic.co/u/fjac)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 9:11am UTC](https://discuss.elastic.co/t/error-cosine-similarity/263699 "2021-02-09T09:11:30Z")

</div>

Hello, I have created a field der type dense\_vector, I have reindexed the database and when performing a search it gives me an error, as you can only have a single dense\_vector value per document, I have added it as "nes…

---

## [Elasticsearch upgrade strategies](https://discuss.elastic.co/t/elasticsearch-upgrade-strategies/263706)

<div class="topic-metadata">

**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 10:00am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-strategies/263706 "2021-02-09T10:00:54Z")

</div>

Hi, We have a situation where our application breaks when upgraded to a new minor version. I would like to get the community thoughts on how this can better be solved. There are some breaking changes documented and und…

---

## [Using URL query Elasticsearch problem](https://discuss.elastic.co/t/using-url-query-elasticsearch-problem/263366)

<div class="topic-metadata">

**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\
**Replies:** 11\
**Last updated:** [February 9, 2021, 9:32am UTC](https://discuss.elastic.co/t/using-url-query-elasticsearch-problem/263366 "2021-02-09T09:32:09Z")

</div>

Hi, I am trying to use URL to query Elasticsearch using the below URL: https://xxxxxx.xxxx.xxx:9200/xxx-xxxxxx/\_search/scroll?q="+scroll:10m +scroll\_id:DnF1ZXJ5VGhlbkZldGNoBgAAAAAAALjLFjQ1X0c5Q0dkVDB1X215YUFOQ0NIWmcAA…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1053)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1055)
