# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1074 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1075 --- ## [License Expiry issue in Elasticsearch 7.10.2](https://discuss.elastic.co/t/license-expiry-issue-in-elasticsearch-7-10-2/261982)
**Author:** [@Pritheka](https://discuss.elastic.co/u/Pritheka)\ **Replies:** 1\ **Last updated:** [January 23, 2021, 6:11pm UTC](https://discuss.elastic.co/t/license-expiry-issue-in-elasticsearch-7-10-2/261982 "2021-01-23T18:11:16Z")
I installed 'Elasticsearch-7.10.2' recently. When i run it, i get the below error in the logs. \[ERROR\]\[o.e.x.s.a.f.SecurityActionFilter\] \[LAPTOP-05GRP0LP\] blocking \[cluster:monitor/nodes/stats\] operation due to expired … --- ## [Exclure des champs d'une source et de l'indexation](https://discuss.elastic.co/t/exclure-des-champs-dune-source-et-de-lindexation/261986)
**Author:** [@Corben\_Dallas](https://discuss.elastic.co/u/Corben_Dallas)\ **Replies:** 3\ **Last updated:** [January 23, 2021, 2:21pm UTC](https://discuss.elastic.co/t/exclure-des-champs-dune-source-et-de-lindexation/261986 "2021-01-23T14:21:52Z")
Bonjour, Petite question pour confirmer, j'ai un elasticsearch 2.3.1 et 7.9.2, en 2.3.1 j'envoi un json via un PUT /macollection/1 { "a" : "1" , b , : "2", c : "3" d : { "aa" : "1… --- ## [ElasticSearch Stream NEW INCOMING documents to clients](https://discuss.elastic.co/t/elasticsearch-stream-new-incoming-documents-to-clients/261763)
**Author:** [@schubec](https://discuss.elastic.co/u/schubec)\ **Replies:** 6\ **Last updated:** [January 23, 2021, 1:18pm UTC](https://discuss.elastic.co/t/elasticsearch-stream-new-incoming-documents-to-clients/261763 "2021-01-23T13:18:16Z")
Hi! I have this usecase: I receive ca 500 documents of cars (brand, model, color, airbag yes/no, etc.) per second and I am storing these in ElasticSearch. It works perfectly. Then, I have a webclient, which searches f… --- ## [Can you run filebeat as an Deployment/Satefulset/Pod?](https://discuss.elastic.co/t/can-you-run-filebeat-as-an-deployment-satefulset-pod/261895)
**Author:** [@ThePreMan](https://discuss.elastic.co/u/ThePreMan)\ **Replies:** 1\ **Last updated:** [January 23, 2021, 11:05am UTC](https://discuss.elastic.co/t/can-you-run-filebeat-as-an-deployment-satefulset-pod/261895 "2021-01-23T11:05:52Z")
In am currently setting up a workflow that requires a kubernetes filebeat instance that is running as a Deployment, StatefulSet or Pod. Basic idea: copy file to directory -\> filebeat reads file -\> logstash parse -\> etc… --- ## [ECK operator sizing](https://discuss.elastic.co/t/eck-operator-sizing/261868)
**Author:** [@deepak\_deore](https://discuss.elastic.co/u/deepak_deore)\ **Replies:** 1\ **Last updated:** [January 23, 2021, 11:03am UTC](https://discuss.elastic.co/t/eck-operator-sizing/261868 "2021-01-23T11:03:45Z")
elastic-operator pod was in CrashLoopBackOff on an EKS cluster of 125 worker node and 84 namespaces it was OOMKilled after deleting manually to come out of crashloop, default memory request is 128M, making it 256M also … --- ## [How to dump the index and posting list?](https://discuss.elastic.co/t/how-to-dump-the-index-and-posting-list/261977)
**Author:** [@ralgo](https://discuss.elastic.co/u/ralgo)\ **Replies:** 0\ **Last updated:** [January 23, 2021, 7:01am UTC](https://discuss.elastic.co/t/how-to-dump-the-index-and-posting-list/261977 "2021-01-23T07:01:11Z")
I am writing an analysis plugin for elasticsearch, which maps a sentence to a prefix array. e.g. "EVA EGG京" will be mapped to term array \[E, EV, EVA, E, EG, EGG, 京\]. However, when I search one of \[E，EV，EVA，E, EG，EGG\], t… --- ## [Update field Object using UpdateQuery](https://discuss.elastic.co/t/update-field-object-using-updatequery/261973)
**Author:** [@cmcruzata](https://discuss.elastic.co/u/cmcruzata)\ **Replies:** 0\ **Last updated:** [January 23, 2021, 5:09am UTC](https://discuss.elastic.co/t/update-field-object-using-updatequery/261973 "2021-01-23T05:09:42Z")
Hi, I need to create an update query to update the relation inside the index, given the relation ID: @Entity @Document(indexName = "employees", shards = 3) public class Employee { @Id @GeneratedV… --- ## [Setting id field in client request and also using date name processor](https://discuss.elastic.co/t/setting-id-field-in-client-request-and-also-using-date-name-processor/261968)
**Author:** [@smruthip](https://discuss.elastic.co/u/smruthip)\ **Replies:** 0\ **Last updated:** [January 23, 2021, 1:05am UTC](https://discuss.elastic.co/t/setting-id-field-in-client-request-and-also-using-date-name-processor/261968 "2021-01-23T01:05:03Z")
Hi all, I had a question about sending id field in the client request and also using the date name processor to create indices based on a field value. So here is my use case , I want to produce daily indices based on a… --- ## [Download Kibana Report from outside Kibana](https://discuss.elastic.co/t/download-kibana-report-from-outside-kibana/260582)
**Author:** [@ssarnava](https://discuss.elastic.co/u/ssarnava)\ **Replies:** 4\ **Last updated:** [January 22, 2021, 11:00pm UTC](https://discuss.elastic.co/t/download-kibana-report-from-outside-kibana/260582 "2021-01-22T23:00:31Z")
Hi, I am using ELK 7.9.0 version. I am able to generate dashboard report from Kibana and can download that report from inside Kibana. But my requirement is little different. I have to trigger CSV dashboard report genera… --- ## [Mapper\_parsing\_exception](https://discuss.elastic.co/t/mapper-parsing-exception/261871)
**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\ **Replies:** 3\ **Last updated:** [January 22, 2021, 10:05pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception/261871 "2021-01-22T22:05:01Z")
Hello Team, I have been getting this issue no matter what. I have applied mutate (convert,rename) json but still get the following issue. "reason"=\>"Could not dynamically add mapping for field \[app.kubernetes.io/name\].… --- ## [Subset match query](https://discuss.elastic.co/t/subset-match-query/261847)
**Author:** [@Josue-Salas](https://discuss.elastic.co/u/Josue-Salas)\ **Replies:** 3\ **Last updated:** [January 22, 2021, 10:03pm UTC](https://discuss.elastic.co/t/subset-match-query/261847 "2021-01-22T22:03:42Z")
Hi everyone, Thanks for reading. Here's my problem. I have the following documents: "course #1": { "requirements": \[ { "name": "AWS EC2 certification", "type": "certification" … --- ## [Elasticsearch service - Kibana link results in 404](https://discuss.elastic.co/t/elasticsearch-service-kibana-link-results-in-404/261862)
**Author:** [@Mike\_Connor](https://discuss.elastic.co/u/Mike_Connor)\ **Replies:** 5\ **Last updated:** [January 22, 2021, 8:43pm UTC](https://discuss.elastic.co/t/elasticsearch-service-kibana-link-results-in-404/261862 "2021-01-22T20:43:47Z")
A few hours ago, my kibana session expired or I got kicked out. Now when I click the link from the deployment page on clould.elastic.co, I end up with a raw 404. A callback error? I have been having a bunch of problem… --- ## [How to split value in different coloum in data table](https://discuss.elastic.co/t/how-to-split-value-in-different-coloum-in-data-table/261624)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 6\ **Last updated:** [January 22, 2021, 6:32pm UTC](https://discuss.elastic.co/t/how-to-split-value-in-different-coloum-in-data-table/261624 "2021-01-22T18:32:00Z")
Hi, I am using ELK 7.10v. I have a use case where I want to show " Total brokerage amout of clients monthly wise." I have 3 fields :- client\_id, time and brokerage . I want my data table to look like this: Client… --- ## [Logstash ruby filter math on very large numbers](https://discuss.elastic.co/t/logstash-ruby-filter-math-on-very-large-numbers/261950)
**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\ **Replies:** 0\ **Last updated:** [January 22, 2021, 6:26pm UTC](https://discuss.elastic.co/t/logstash-ruby-filter-math-on-very-large-numbers/261950 "2021-01-22T18:26:18Z")
Hello, I am trying to do some math on some very large numbers in logstash and it appears that the .to\_f is not large enough as its giving me very inaccurate information. is there anything larger than a float I can use? … --- ## [Large shards are not moving from old ES version nodes to new ES version nodes](https://discuss.elastic.co/t/large-shards-are-not-moving-from-old-es-version-nodes-to-new-es-version-nodes/261864)
**Author:** [@163satish](https://discuss.elastic.co/u/163satish)\ **Replies:** 7\ **Last updated:** [January 22, 2021, 6:19pm UTC](https://discuss.elastic.co/t/large-shards-are-not-moving-from-old-es-version-nodes-to-new-es-version-nodes/261864 "2021-01-22T18:19:57Z")
I have 6.8 cluster which is being upgraded to 7.6 cluster. Shard relocation on all the shards which are smaller in size is completed which is basically moving from 6.8 to 7.6 data nodes. The large shards for some of the … --- ## [Elasticsearch NEST query not behaving like the equivalent query in Kibana Dev Tools](https://discuss.elastic.co/t/elasticsearch-nest-query-not-behaving-like-the-equivalent-query-in-kibana-dev-tools/261867)
**Author:** [@jonsagara](https://discuss.elastic.co/u/jonsagara)\ **Replies:** 1\ **Last updated:** [January 22, 2021, 5:05pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-query-not-behaving-like-the-equivalent-query-in-kibana-dev-tools/261867 "2021-01-22T17:05:13Z")
I'm trying to construct a query against my index that will use function\_score to boost records where fields have certain values. In Kibana Dev Tools, I have the following query that returns 3 hits as expected: GET /myin… --- ## [Geolocation configuration in logstash](https://discuss.elastic.co/t/geolocation-configuration-in-logstash/261937)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 0\ **Last updated:** [January 22, 2021, 3:56pm UTC](https://discuss.elastic.co/t/geolocation-configuration-in-logstash/261937 "2021-01-22T15:56:33Z")
I configured my logstash to parse the logs. I now want to configure geolocation. Is there a unique configuration for geolocation? If so, I need help. Here is my logstash setup below. How to complete with the geolocati… --- ## [Elastic search raw events | Latest event retrieval](https://discuss.elastic.co/t/elastic-search-raw-events-latest-event-retrieval/261935)
**Author:** [@pkrahul236](https://discuss.elastic.co/u/pkrahul236)\ **Replies:** 0\ **Last updated:** [January 22, 2021, 3:47pm UTC](https://discuss.elastic.co/t/elastic-search-raw-events-latest-event-retrieval/261935 "2021-01-22T15:47:11Z")
Hello Folks, I want to create a dashboard on raw events data from elastic search. In this one particular raw event, I have status types as "In Progress", "Updated", "Completed" So I want to create a dashboard say "Ta… --- ## [Filter query to select only pure alphanumeric value but not numeric value](https://discuss.elastic.co/t/filter-query-to-select-only-pure-alphanumeric-value-but-not-numeric-value/261931)
**Author:** [@Vivek\_Vardhan](https://discuss.elastic.co/u/Vivek_Vardhan)\ **Replies:** 0\ **Last updated:** [January 22, 2021, 3:19pm UTC](https://discuss.elastic.co/t/filter-query-to-select-only-pure-alphanumeric-value-but-not-numeric-value/261931 "2021-01-22T15:19:50Z")
I have a field defined in ES as "fieldName": { "type": "text", "fields": { "keyword": { "type": "keyword" } … --- ## [Change type data](https://discuss.elastic.co/t/change-type-data/261865)
**Author:** [@salma\_widiarti](https://discuss.elastic.co/u/salma_widiarti)\ **Replies:** 1\ **Last updated:** [January 22, 2021, 2:48pm UTC](https://discuss.elastic.co/t/change-type-data/261865 "2021-01-22T14:48:30Z")
Hi all, I want to change type data in labels.money from string to integer And i tried change using button pencil, and dropdown has no option type numeric Anyone can help me? --- ## [How to update Elasticsearch ECS in K8S without data loss](https://discuss.elastic.co/t/how-to-update-elasticsearch-ecs-in-k8s-without-data-loss/261655)
**Author:** [@mchudinov](https://discuss.elastic.co/u/mchudinov)\ **Replies:** 3\ **Last updated:** [January 22, 2021, 2:08pm UTC](https://discuss.elastic.co/t/how-to-update-elasticsearch-ecs-in-k8s-without-data-loss/261655 "2021-01-22T14:08:05Z")
I use ECS (Elastic Cloud on Kubernetes) with Azure Kubernetes service. ECS version 1.3.1 I need to update Elasticsearch version from 7.10.0 to 7.10.1 I have changed the version number in yaml file and run # kubectl ap… --- ## [Dissector mapping, pattern not found error](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found-error/261904)
**Author:** [@Shubha](https://discuss.elastic.co/u/Shubha)\ **Replies:** 1\ **Last updated:** [January 22, 2021, 1:25pm UTC](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found-error/261904 "2021-01-22T13:25:40Z")
Hi All, I am having the ELK version 7.10 on ec2 instances. facing the below error in logstash-plain.log. Can anyone help me on this. \[2021-01-22T10:29:00,423\]\[WARN \]\[org.logstash.dissect.Dissector\]\[main\]\[1cbe1dfc036a2… --- ## [Trouble with query term and è](https://discuss.elastic.co/t/trouble-with-query-term-and-egrave/261916)
**Author:** [@matmout](https://discuss.elastic.co/u/matmout)\ **Replies:** 0\ **Last updated:** [January 22, 2021, 1:04pm UTC](https://discuss.elastic.co/t/trouble-with-query-term-and-egrave/261916 "2021-01-22T13:04:55Z")
Hi Everybody ! I create a topic since I can't find a response anywhere, I have trouble using a query term with a term wich value contains è Here is an expemple, in Kibana console GET index/\_search { "query": { … --- ## [Logstash need server restart](https://discuss.elastic.co/t/logstash-need-server-restart/261913)
**Author:** [@Melvin\_Shaju](https://discuss.elastic.co/u/Melvin_Shaju)\ **Replies:** 1\ **Last updated:** [January 22, 2021, 1:03pm UTC](https://discuss.elastic.co/t/logstash-need-server-restart/261913 "2021-01-22T13:03:26Z")
I'm using logstash feeds to take data from json file then filter it and pass it to elastic search. Each time to run logstash feeds I need to restart the whole server, otherwise logstash is causing errors. Is there any so… --- ## [Subtract variables in Kibana canvas with essql](https://discuss.elastic.co/t/subtract-variables-in-kibana-canvas-with-essql/261803)
**Author:** [@blodstrupmoen](https://discuss.elastic.co/u/blodstrupmoen)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 10:45pm UTC](https://discuss.elastic.co/t/subtract-variables-in-kibana-canvas-with-essql/261803 "2021-01-21T22:45:46Z")
Hi, Im having a real hard time subtracting one query from another. I cant seem to find any good examples on how to use var\_set and var properly. How can I subtract the value (epochtime) of variable "start" from variabl… --- ## [Two nodes, set on the same machine, can't see each other - Dev purposes](https://discuss.elastic.co/t/two-nodes-set-on-the-same-machine-cant-see-each-other-dev-purposes/261787)
**Author:** [@Mateusz\_Koper](https://discuss.elastic.co/u/Mateusz_Koper)\ **Replies:** 4\ **Last updated:** [January 22, 2021, 11:55am UTC](https://discuss.elastic.co/t/two-nodes-set-on-the-same-machine-cant-see-each-other-dev-purposes/261787 "2021-01-22T11:55:02Z")
Hi, We have a problem in our organization. We are trying to add second node, to existing cluster, on the same machine. I know it's not a good solution, but we only do it for development purposes. The version that we are… --- ## [Passing custom regex inside grok filter](https://discuss.elastic.co/t/passing-custom-regex-inside-grok-filter/261907)
**Author:** [@Flavio1](https://discuss.elastic.co/u/Flavio1)\ **Replies:** 1\ **Last updated:** [January 22, 2021, 11:49am UTC](https://discuss.elastic.co/t/passing-custom-regex-inside-grok-filter/261907 "2021-01-22T11:49:24Z")
Hi everybody, During these days i'm trying to implement a custom regex system configuration in order to have a single point, outside pipelines, in which i can make crud operations on regexes. I tried this solution: mut… --- ## [The parent task was cancelled, shouldn't start any child tasks](https://discuss.elastic.co/t/the-parent-task-was-cancelled-shouldnt-start-any-child-tasks/261686)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 6\ **Last updated:** [January 22, 2021, 10:46am UTC](https://discuss.elastic.co/t/the-parent-task-was-cancelled-shouldnt-start-any-child-tasks/261686 "2021-01-22T10:46:07Z")
Total shards 110 Data 3.7gb Indices 99 Problem in kibana monitoring section.The page was showing indices fails. In elasticsearch log file \[2021-01-20T21:27:16,584\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[elastic\] \[gc\]\[3… --- ## [:exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \[A-Za-z0-9\_-\], '\\"', \\"'\\", \[A-Za-z\_\], \\"-\\", \[0-9\], \\"\[\\", \\"{\\", \\"\]\\"](https://discuss.elastic.co/t/exception-logstash-configurationerror-message-expected-one-of-t-r-n-a-za-z0-9-a-za-z-0-9/261903)
**Author:** [@ashishkpal](https://discuss.elastic.co/u/ashishkpal)\ **Replies:** 0\ **Last updated:** [January 22, 2021, 10:44am UTC](https://discuss.elastic.co/t/exception-logstash-configurationerror-message-expected-one-of-t-r-n-a-za-z0-9-a-za-z-0-9/261903 "2021-01-22T10:44:23Z")
hi, i want to push the ELB logs from s3 to ELK for the same have i have written the logstash.conf file like this input { s3 { access\_key\_id =\> "..." secret\_access\_key =\> "..." bucket =\> "..." region =\> "eu-central… --- ## [Elasticsearch 7.6.2 service not starting on CentOS 7.x with cPanel installed on it](https://discuss.elastic.co/t/elasticsearch-7-6-2-service-not-starting-on-centos-7-x-with-cpanel-installed-on-it/261886)
**Author:** [@Herrick\_P](https://discuss.elastic.co/u/Herrick_P)\ **Replies:** 1\ **Last updated:** [January 22, 2021, 10:24am UTC](https://discuss.elastic.co/t/elasticsearch-7-6-2-service-not-starting-on-centos-7-x-with-cpanel-installed-on-it/261886 "2021-01-22T10:24:43Z")
I have installed elasticsearch version 7.2.6 on CentOS 7.x with cPanel on it. However, after installing it, elasticsearch service is not running. Here is the screen capture of the error. I have already tried. https://sup… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1073) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1075)