# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1093

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1094

---

## [Markdown hyperlink changes when I click on it](https://discuss.elastic.co/t/markdown-hyperlink-changes-when-i-click-on-it/260199)

<div class="topic-metadata">

**Author:** [@Fahimeh\_Kh](https://discuss.elastic.co/u/Fahimeh_Kh)\
**Replies:** 5\
**Last updated:** [January 6, 2021, 2:24pm UTC](https://discuss.elastic.co/t/markdown-hyperlink-changes-when-i-click-on-it/260199 "2021-01-06T14:24:10Z")

</div>

Hi community I'm having the following issue. I made a markdown widget to use it as tabs in various kibana dashboards. I inserted each dashboard's url as a separate hyperlink. the problem is no matter which dashboard url …

---

## [Getting exceptions : search.SearchPhaseExecutionException: all shards failed and ClusterBlockException: blocked by: \[SERVICE\_UNAVAILABLE/2/no master](https://discuss.elastic.co/t/getting-exceptions-search-searchphaseexecutionexception-all-shards-failed-and-clusterblockexception-blocked-by-service-unavailable-2-no-master/260347)

<div class="topic-metadata">

**Author:** [@umen](https://discuss.elastic.co/u/umen)\
**Replies:** 0\
**Last updated:** [January 6, 2021, 1:41pm UTC](https://discuss.elastic.co/t/getting-exceptions-search-searchphaseexecutionexception-all-shards-failed-and-clusterblockexception-blocked-by-service-unavailable-2-no-master/260347 "2021-01-06T13:41:28Z")

</div>

i followed the quickstart tutorial both elasticsearch and filebeat installation on Kubernetes the app working for few minutes but then the kibana doesn't respond and when i look at the elasticsearch logs i can see those…

---

## [Getting Hash value in sort response, ES json response is invalid](https://discuss.elastic.co/t/getting-hash-value-in-sort-response-es-json-response-is-invalid/260346)

<div class="topic-metadata">

**Author:** [@Sravanti](https://discuss.elastic.co/u/Sravanti)\
**Replies:** 0\
**Last updated:** [January 6, 2021, 1:20pm UTC](https://discuss.elastic.co/t/getting-hash-value-in-sort-response-es-json-response-is-invalid/260346 "2021-01-06T13:20:08Z")

</div>

I'm using icu\_collation for phonebook sort, but getting a hash value in sort response in below search query GET testindex1/\_search { "sort": \[ { "id.sort\_en": { "order": "ASC", "unmapped\_type…

---

## [“\[geo\_distance\] malformed query, expected \[END\_OBJECT\] but found \[FIELD\_NAME\]”](https://discuss.elastic.co/t/geo-distance-malformed-query-expected-end-object-but-found-field-name/260341)

<div class="topic-metadata">

**Author:** [@learn\_and\_try](https://discuss.elastic.co/u/learn_and_try)\
**Replies:** 1\
**Last updated:** [January 6, 2021, 1:28pm UTC](https://discuss.elastic.co/t/geo-distance-malformed-query-expected-end-object-but-found-field-name/260341 "2021-01-06T13:28:05Z")

</div>

I am tried to create search queary with a values in 15m radios and between 3 weeks. I tried to execute this query: \> "query": { \> "bool": { \> "must": { \> "match\_all": {} \> } \> , "filter": \[ \> { \> "geo…

---

## [Boolean parameters in token filters are stringified, breaking elasticsearch\_dsl analysis comparison](https://discuss.elastic.co/t/boolean-parameters-in-token-filters-are-stringified-breaking-elasticsearch-dsl-analysis-comparison/260342)

<div class="topic-metadata">

**Author:** [@LeoMcA](https://discuss.elastic.co/u/LeoMcA)\
**Replies:** 0\
**Last updated:** [January 6, 2021, 12:59pm UTC](https://discuss.elastic.co/t/boolean-parameters-in-token-filters-are-stringified-breaking-elasticsearch-dsl-analysis-comparison/260342 "2021-01-06T12:59:50Z")

</div>

Heya, I'm not sure if this is a bug with elastic itself or with the elasticsearch\_dsl python library, so posting here before filing an issue on github. If you set up a token filter with a boolean parameter, that paramet…

---

## [So many variables in logstash filters](https://discuss.elastic.co/t/so-many-variables-in-logstash-filters/260325)

<div class="topic-metadata">

**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\
**Replies:** 0\
**Last updated:** [January 6, 2021, 10:35am UTC](https://discuss.elastic.co/t/so-many-variables-in-logstash-filters/260325 "2021-01-06T10:35:57Z")

</div>

Hi, I'm planning to convert to a new logstash config to remodel my indexing and i added an if/if else/else filter to logstash. Right now the cluster has around 85 active indices which roll daily. Almost half of it will b…

---

## [Enrichment file for threat feeds in logstash](https://discuss.elastic.co/t/enrichment-file-for-threat-feeds-in-logstash/260258)

<div class="topic-metadata">

**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\
**Replies:** 2\
**Last updated:** [January 6, 2021, 10:07am UTC](https://discuss.elastic.co/t/enrichment-file-for-threat-feeds-in-logstash/260258 "2021-01-06T10:07:36Z")

</div>

Hello, I'm sending threat feeds to elasticsearch from a linux machine. I created a patern feeds index in kibana. Logstash receives Fortinet logs continuously. I created a patern fortinet index in kibana. My goal is …

---

## [Negative epoch\_millis sometimes throw error while indexing](https://discuss.elastic.co/t/negative-epoch-millis-sometimes-throw-error-while-indexing/260239)

<div class="topic-metadata">

**Author:** [@JulienNemo](https://discuss.elastic.co/u/JulienNemo)\
**Replies:** 3\
**Last updated:** [January 6, 2021, 9:15am UTC](https://discuss.elastic.co/t/negative-epoch-millis-sometimes-throw-error-while-indexing/260239 "2021-01-06T09:15:43Z")

</div>

Hi, version: 7.10.1 Have a"dateOfBirth": { "type": "date" } field. I can't index the document with the dateOfBirth:-1555200000 error : “reason”:“date\_time\_exception: Invalid value for Year (vali…

---

## [S3 Repository Plugin - curl: (52) Empty reply from server](https://discuss.elastic.co/t/s3-repository-plugin-curl-52-empty-reply-from-server/259447)

<div class="topic-metadata">

**Author:** [@bigbansal](https://discuss.elastic.co/u/bigbansal)\
**Replies:** 5\
**Last updated:** [January 6, 2021, 8:34am UTC](https://discuss.elastic.co/t/s3-repository-plugin-curl-52-empty-reply-from-server/259447 "2021-01-06T08:34:59Z")

</div>

Hi All, I am struggling to put data node's data to S3 Bucket and getting empty response from server. can u please suggest what could be the reason ? --elasticsearch.yml has path.repo: $s3\_Bucket/$s3\_Prefix/docroot --…

---

## [Cross-field atleast functionality (return documents where a term has x occurrences)](https://discuss.elastic.co/t/cross-field-atleast-functionality-return-documents-where-a-term-has-x-occurrences/260294)

<div class="topic-metadata">

**Author:** [@Daantie](https://discuss.elastic.co/u/Daantie)\
**Replies:** 0\
**Last updated:** [January 6, 2021, 8:23am UTC](https://discuss.elastic.co/t/cross-field-atleast-functionality-return-documents-where-a-term-has-x-occurrences/260294 "2021-01-06T08:23:22Z")

</div>

Hello! I'm working for a client in the patent domain. We have a feature called atleast that returns all documents where a term has a minimum of x occurrences. In the past a plugin was written for this (also mentioned he…

---

## [Dec 16th, 2020: \[FR\] Monitorer les tâches et pipelines Tekton avec Elastic Observability](https://discuss.elastic.co/t/dec-16th-2020-fr-monitorer-les-taches-et-pipelines-tekton-avec-elastic-observability/258847)

<div class="topic-metadata">

**Author:** [@mgreau](https://discuss.elastic.co/u/mgreau)\
**Replies:** 0\
**Last updated:** [January 6, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-16th-2020-fr-monitorer-les-taches-et-pipelines-tekton-avec-elastic-observability/258847 "2021-01-06T08:00:04Z")

</div>

English Version Savez-vous que Elastic a delivre 21 releases en 2020? Chaque fois qu'une version est delivree, ce sont 500+ artifacts publiés dans multiplies emplacements publics (bucket, registres Docker, Maven Centra…

---

## [Elasticsearch Cardinality aggregation with condition](https://discuss.elastic.co/t/elasticsearch-cardinality-aggregation-with-condition/260275)

<div class="topic-metadata">

**Author:** [@rohitc.11](https://discuss.elastic.co/u/rohitc.11)\
**Replies:** 0\
**Last updated:** [January 6, 2021, 6:35am UTC](https://discuss.elastic.co/t/elasticsearch-cardinality-aggregation-with-condition/260275 "2021-01-06T06:35:04Z")

</div>

I want to do cardinality aggregation with condition. I want to count all the unique sellers whose sell sum should be greater than 100 for product list. Is there any way to do this using cardinality or anything else? I…

---

## [Universal search across all Indices on Kibana?](https://discuss.elastic.co/t/universal-search-across-all-indices-on-kibana/260176)

<div class="topic-metadata">

**Author:** [@mohamed.farhan](https://discuss.elastic.co/u/mohamed.farhan)\
**Replies:** 2\
**Last updated:** [January 6, 2021, 4:59am UTC](https://discuss.elastic.co/t/universal-search-across-all-indices-on-kibana/260176 "2021-01-06T04:59:41Z")

</div>

Hello, I am trying to search/query to make sure I get the results regardless of indices. How can I do universal search ( across multiple indices ) in Kibana? Is it even possible?

---

## [Elastic Endpoint not showing up error](https://discuss.elastic.co/t/elastic-endpoint-not-showing-up-error/259327)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 5\
**Last updated:** [January 6, 2021, 3:53am UTC](https://discuss.elastic.co/t/elastic-endpoint-not-showing-up-error/259327 "2021-01-06T03:53:06Z")

</div>

Hi all I have been trying out the elastic endpoint security since yesterday and i have been having some issue with it. So there are a few question i have to address in order to work this out: How to set the ssl to sen…

---

## [Question regarding ES distribution of incoming requests](https://discuss.elastic.co/t/question-regarding-es-distribution-of-incoming-requests/260268)

<div class="topic-metadata">

**Author:** [@Amlan\_Kumar\_Rath](https://discuss.elastic.co/u/Amlan_Kumar_Rath)\
**Replies:** 0\
**Last updated:** [January 6, 2021, 3:19am UTC](https://discuss.elastic.co/t/question-regarding-es-distribution-of-incoming-requests/260268 "2021-01-06T03:19:53Z")

</div>

I have a 3 node cluster with 6 indices of 1 shard each and 2 replicas, in short the full copy of an index on each node. Now I know that when I make a search call by calling a particular node of the cluster with a query, …

---

## [Elasticsearch complaining about Shard limit](https://discuss.elastic.co/t/elasticsearch-complaining-about-shard-limit/260266)

<div class="topic-metadata">

**Author:** [@SteveHodges](https://discuss.elastic.co/u/SteveHodges)\
**Replies:** 4\
**Last updated:** [January 6, 2021, 2:59am UTC](https://discuss.elastic.co/t/elasticsearch-complaining-about-shard-limit/260266 "2021-01-06T02:59:44Z")

</div>

I have had this problem every other month. I just go in and close the oldest 2 months of indexes. That has been solving the problem up until this week. Even though the Elasticsearch stats pages tells me that I only h…

---

## [\[ERROR\]\[logstash.config.sourceloader\] No configuration found in the configured sources](https://discuss.elastic.co/t/error-logstash-config-sourceloader-no-configuration-found-in-the-configured-sources/260238)

<div class="topic-metadata">

**Author:** [@aandrewsllp](https://discuss.elastic.co/u/aandrewsllp)\
**Replies:** 2\
**Last updated:** [January 6, 2021, 2:35am UTC](https://discuss.elastic.co/t/error-logstash-config-sourceloader-no-configuration-found-in-the-configured-sources/260238 "2021-01-06T02:35:34Z")

</div>

help me!!!!

---

## [Take input from elk index and need to send notification over email against invalid inputs](https://discuss.elastic.co/t/take-input-from-elk-index-and-need-to-send-notification-over-email-against-invalid-inputs/260223)

<div class="topic-metadata">

**Author:** [@Maahi\_Gupta](https://discuss.elastic.co/u/Maahi_Gupta)\
**Replies:** 3\
**Last updated:** [January 6, 2021, 2:25am UTC](https://discuss.elastic.co/t/take-input-from-elk-index-and-need-to-send-notification-over-email-against-invalid-inputs/260223 "2021-01-06T02:25:56Z")

</div>

Hi, I m a newbie in elk and i have been trying the below code from quite sometime. This is the configuration file i have input { elasticsearch { hosts =\> 'localhost' index =\> 'filebeat-\*' } } output…

---

## [Send a notification mail for invalid inputs made to the index (filebeat)](https://discuss.elastic.co/t/send-a-notification-mail-for-invalid-inputs-made-to-the-index-filebeat/260227)

<div class="topic-metadata">

**Author:** [@nottyheadedboss](https://discuss.elastic.co/u/nottyheadedboss)\
**Replies:** 1\
**Last updated:** [January 6, 2021, 2:22am UTC](https://discuss.elastic.co/t/send-a-notification-mail-for-invalid-inputs-made-to-the-index-filebeat/260227 "2021-01-06T02:22:58Z")

</div>

HI, I have been trying to work on the code to send an email to the support team for any invalid inputs such as (Invalid Credentials) into the system. A case being, when I try to use Putty and invalid credentials are ent…

---

## [Stopping Elastic Endpoint service](https://discuss.elastic.co/t/stopping-elastic-endpoint-service/260027)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 3\
**Last updated:** [January 6, 2021, 12:19am UTC](https://discuss.elastic.co/t/stopping-elastic-endpoint-service/260027 "2021-01-06T00:19:58Z")

</div>

Hello, While testing with Elastic Endpoint on my home Windows 10, I noticed I can stop the service with no issue at all. Service Name: ElasticEndpoint What would stop a bad actor from stopping the service? if I rememb…

---

## [Elasticsearch-py support for search after](https://discuss.elastic.co/t/elasticsearch-py-support-for-search-after/260222)

<div class="topic-metadata">

**Author:** [@zuanni](https://discuss.elastic.co/u/zuanni)\
**Replies:** 1\
**Last updated:** [January 5, 2021, 10:40pm UTC](https://discuss.elastic.co/t/elasticsearch-py-support-for-search-after/260222 "2021-01-05T22:40:20Z")

</div>

Hi All, First time here, I apologize in case I post in the wrong way or area. I'm searching news about the support for https://www.elastic.co/guide/en/elasticsearch/reference/current/paginate-search-results.html#search…

---

## [Cannot do command to debug in logstash](https://discuss.elastic.co/t/cannot-do-command-to-debug-in-logstash/260259)

<div class="topic-metadata">

**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\
**Replies:** 0\
**Last updated:** [January 5, 2021, 9:39pm UTC](https://discuss.elastic.co/t/cannot-do-command-to-debug-in-logstash/260259 "2021-01-05T21:39:39Z")

</div>

I can no longer make the following command: tail -f /var/log/logstash/logstash-plain.log I checked in / var / log / logstash / logstash-plain.log file no longer exists How can I fix this problem?

---

## [Handling high task count on daily index rollover](https://discuss.elastic.co/t/handling-high-task-count-on-daily-index-rollover/260214)

<div class="topic-metadata">

**Author:** [@OranShuster](https://discuss.elastic.co/u/OranShuster)\
**Replies:** 3\
**Last updated:** [January 5, 2021, 9:21pm UTC](https://discuss.elastic.co/t/handling-high-task-count-on-daily-index-rollover/260214 "2021-01-05T21:21:19Z")

</div>

Some stats about the cluster Version 6.5.0 3 master nodes 12 hot data+ingest nodes 16 vCPU 32GB mem (16GB heap) each 12 warm data+ingest nodes 8 vCPU 32GB mem (16GB heap) each 1 ingest node (added recently for tes…

---

## [Add Geopoint based off of parsed value to logstash config](https://discuss.elastic.co/t/add-geopoint-based-off-of-parsed-value-to-logstash-config/26580)

<div class="topic-metadata">

**Author:** [@russK](https://discuss.elastic.co/u/russK)\
**Replies:** 13\
**Last updated:** [January 5, 2021, 9:03pm UTC](https://discuss.elastic.co/t/add-geopoint-based-off-of-parsed-value-to-logstash-config/26580 "2021-01-05T21:03:45Z")

</div>

Hello, Part of my matched message returns the fields %{NUMBER:XCent} %{NUMBER:YCent} which are lat, long points. I'm attempting to add a location pin but keep getting a config failure when i use the --debug flag on…

---

## [Dynamic add/remove indexes alias](https://discuss.elastic.co/t/dynamic-add-remove-indexes-alias/260099)

<div class="topic-metadata">

**Author:** [@Cris.Oporto](https://discuss.elastic.co/u/Cris.Oporto)\
**Replies:** 3\
**Last updated:** [January 5, 2021, 8:55pm UTC](https://discuss.elastic.co/t/dynamic-add-remove-indexes-alias/260099 "2021-01-05T20:55:54Z")

</div>

Hi! Currently we are working with a ILP to manage indexes in hot/warm depending on their age. We have noticed retrieving documents from warm indexes is less performant than needed, so, we are thinking in a two steps dat…

---

## [Adding a node from an existing cluster to another cluster](https://discuss.elastic.co/t/adding-a-node-from-an-existing-cluster-to-another-cluster/260252)

<div class="topic-metadata">

**Author:** [@Ryan\_Clark](https://discuss.elastic.co/u/Ryan_Clark)\
**Replies:** 6\
**Last updated:** [January 5, 2021, 8:16pm UTC](https://discuss.elastic.co/t/adding-a-node-from-an-existing-cluster-to-another-cluster/260252 "2021-01-05T20:16:18Z")

</div>

I have a single elasticsearch node in it's own cluster (one node cluster) and I have different cluster that has 3 nodes. Both have their own set of data. I want to take the single node and add it to the 3 node cluster t…

---

## [Checking shards creation](https://discuss.elastic.co/t/checking-shards-creation/260192)

<div class="topic-metadata">

**Author:** [@kirillmandrygin](https://discuss.elastic.co/u/kirillmandrygin)\
**Replies:** 1\
**Last updated:** [January 5, 2021, 7:54pm UTC](https://discuss.elastic.co/t/checking-shards-creation/260192 "2021-01-05T19:54:13Z")

</div>

When a node hits cluster.max\_shards\_per\_node limit, the cluster status remains green. Logs from elasticsearch: "Caused by: org.elasticsearch.common.ValidationException: Validation Failed: 1: this action would add \[…

---

## [Restore from S3 to multiple ES clusters in parallel](https://discuss.elastic.co/t/restore-from-s3-to-multiple-es-clusters-in-parallel/260250)

<div class="topic-metadata">

**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\
**Replies:** 4\
**Last updated:** [January 5, 2021, 7:48pm UTC](https://discuss.elastic.co/t/restore-from-s3-to-multiple-es-clusters-in-parallel/260250 "2021-01-05T19:48:18Z")

</div>

Hello, Would there be any issues with restoring to multiple ES clusters from a single snapshot in parallel from an S3 backup? Will be looking to restore specific indexes into different clusters. Or should this be done…

---

## [Морфология с Hunspell не работает при поиске](https://discuss.elastic.co/t/hunspell/260189)

<div class="topic-metadata">

**Author:** [@DimanG](https://discuss.elastic.co/u/DimanG)\
**Replies:** 6\
**Last updated:** [January 5, 2021, 5:58pm UTC](https://discuss.elastic.co/t/hunspell/260189 "2021-01-05T17:58:34Z")

</div>

Всем доброго дня! В эластике новичок. Остался один шаг до начала использования - побороть морфологию. Проблема схожа с описанной в этой теме, но у меня само не заработало: https://discuss.elastic.co/t/topic/182967/2 По…

---

## [Terms query with large number of items increase latency by number of shards](https://discuss.elastic.co/t/terms-query-with-large-number-of-items-increase-latency-by-number-of-shards/259769)

<div class="topic-metadata">

**Author:** [@nickcanz](https://discuss.elastic.co/u/nickcanz)\
**Replies:** 3\
**Last updated:** [January 5, 2021, 5:57pm UTC](https://discuss.elastic.co/t/terms-query-with-large-number-of-items-increase-latency-by-number-of-shards/259769 "2021-01-05T17:57:48Z")

</div>

For requests with a very high terms count, Elasticsearch is taking multiple seconds to return an HTTP 400 error. We had an issue with a production system that produced a query that had 250K items in a terms query and thi…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1092)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1094)
