# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1112

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1113

---

## [Frozen indices and shard limitation](https://discuss.elastic.co/t/frozen-indices-and-shard-limitation/258702)

<div class="topic-metadata">

**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\
**Replies:** 4\
**Last updated:** [December 15, 2020, 10:29pm UTC](https://discuss.elastic.co/t/frozen-indices-and-shard-limitation/258702 "2020-12-15T22:29:53Z")

</div>

Hello all ! I know the number of shards is limited by the amount of heap. For example, on my hot node, I have 30GB of heap so limit is 600 shards on this node (20 shards par GB of heap) But what about the limit for col…

---

## [Monitoring hot threads and tasks](https://discuss.elastic.co/t/monitoring-hot-threads-and-tasks/258782)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 0\
**Last updated:** [December 15, 2020, 9:48pm UTC](https://discuss.elastic.co/t/monitoring-hot-threads-and-tasks/258782 "2020-12-15T21:48:20Z")

</div>

Hello, I was wondering what is the best way to monitor tasks and hot threads, and maybe event to create a dashboard with their data

---

## [ElasticSearch didn't start at first try](https://discuss.elastic.co/t/elasticsearch-didnt-start-at-first-try/258747)

<div class="topic-metadata">

**Author:** [@kae](https://discuss.elastic.co/u/kae)\
**Replies:** 2\
**Last updated:** [December 15, 2020, 9:01pm UTC](https://discuss.elastic.co/t/elasticsearch-didnt-start-at-first-try/258747 "2020-12-15T21:01:10Z")

</div>

Hello Everyone, during deployment of my VM in my POD, ElasticSearch didn't start. issue on Journalctl is following : Dec 15 17:33:05 systemd\[1\]: Starting Elasticsearch... -- Subject: Unit elasticsearch.service has be…

---

## [Elasticsearch 7.10.1 - Indexing term\_vector for search\_as\_you\_type field issue](https://discuss.elastic.co/t/elasticsearch-7-10-1-indexing-term-vector-for-search-as-you-type-field-issue/258456)

<div class="topic-metadata">

**Author:** [@chandra2037](https://discuss.elastic.co/u/chandra2037)\
**Replies:** 4\
**Last updated:** [December 15, 2020, 8:20pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-1-indexing-term-vector-for-search-as-you-type-field-issue/258456 "2020-12-15T20:20:47Z")

</div>

Hi, Elasticsearch Version: 7.10.1 Getting the following error when trying to index a document {"\_index":"test1","\_type":"\_doc","\_id":"1000370980","status":400,"error":{"type":"illegal\_argument\_exception","reason":"can…

---

## [Error in start of elasticsearch on ubuntu \[first installation\]](https://discuss.elastic.co/t/error-in-start-of-elasticsearch-on-ubuntu-first-installation/258528)

<div class="topic-metadata">

**Author:** [@vlsireddy](https://discuss.elastic.co/u/vlsireddy)\
**Replies:** 3\
**Last updated:** [December 15, 2020, 7:55pm UTC](https://discuss.elastic.co/t/error-in-start-of-elasticsearch-on-ubuntu-first-installation/258528 "2020-12-15T19:55:33Z")

</div>

HI, \[1\] I Installed elastic search and tried starting it and i see this error. kryogen@Ubuntu:~/Documents/elastic/elasticsearch-7.10.1$ ./bin/elasticsearch Exception in thread "main" SettingsException\[Failed to load s…

---

## [Visualize Dynamic Series in line chart](https://discuss.elastic.co/t/visualize-dynamic-series-in-line-chart/258753)

<div class="topic-metadata">

**Author:** [@benjamin.watson](https://discuss.elastic.co/u/benjamin.watson)\
**Replies:** 2\
**Last updated:** [December 15, 2020, 7:53pm UTC](https://discuss.elastic.co/t/visualize-dynamic-series-in-line-chart/258753 "2020-12-15T19:53:55Z")

</div>

I've got some JSON documents flowing into my ES cluster. They look kind of like this: { "stats": { "Series 1": { "count": 134, "registered": 0 }, "Series 2": { …

---

## [Kibana dashboard Maps?](https://discuss.elastic.co/t/kibana-dashboard-maps/258429)

<div class="topic-metadata">

**Author:** [@GetYourSh1tTogether](https://discuss.elastic.co/u/GetYourSh1tTogether)\
**Replies:** 2\
**Last updated:** [December 15, 2020, 7:09pm UTC](https://discuss.elastic.co/t/kibana-dashboard-maps/258429 "2020-12-15T19:09:04Z")

</div>

I recently stumbled upon this filter and it seems like a great tool to use. Is anyone using this to display all AWS regions and display heat zones on how many resources are where? In my index its already pulling in the A…

---

## [Correctly map converted timestamps in watcher payload](https://discuss.elastic.co/t/correctly-map-converted-timestamps-in-watcher-payload/258748)

<div class="topic-metadata">

**Author:** [@esguy](https://discuss.elastic.co/u/esguy)\
**Replies:** 0\
**Last updated:** [December 15, 2020, 6:46pm UTC](https://discuss.elastic.co/t/correctly-map-converted-timestamps-in-watcher-payload/258748 "2020-12-15T18:46:31Z")

</div>

I am running into an issue where I can correctly convert document timestamps within a watcher payload and store into a list but I am unsure how to correctly map this to the returned payload. Hopefully some code will hel…

---

## [Date parse error](https://discuss.elastic.co/t/date-parse-error/258106)

<div class="topic-metadata">

**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\
**Replies:** 4\
**Last updated:** [December 15, 2020, 6:37pm UTC](https://discuss.elastic.co/t/date-parse-error/258106 "2020-12-15T18:37:13Z")

</div>

hi guys, can you assist why below does not parse input data coming as Wed Dec 02 11:11:03 Asia/Riyadh 2020 date { match =\> \[ "Timestamp", "EEE MMM dd HH:mm:ss ZZZ yyyy"\] target =\> "@timestamp" }

---

## [How to collect information using remote script and visualise them in. dedicated Kibana visualization?](https://discuss.elastic.co/t/how-to-collect-information-using-remote-script-and-visualise-them-in-dedicated-kibana-visualization/258564)

<div class="topic-metadata">

**Author:** [@Mauro\_Tridici](https://discuss.elastic.co/u/Mauro_Tridici)\
**Replies:** 6\
**Last updated:** [December 15, 2020, 6:15pm UTC](https://discuss.elastic.co/t/how-to-collect-information-using-remote-script-and-visualise-them-in-dedicated-kibana-visualization/258564 "2020-12-15T18:15:40Z")

</div>

Dear Users, I started using ELK stack from a few days, so I'm not an expert. After a very basic ELK stack deploy, everything seems to be running as expected. Now, I would like to: execute a script on a remote server,…

---

## [Can't connect to cluster when master node is off](https://discuss.elastic.co/t/cant-connect-to-cluster-when-master-node-is-off/258634)

<div class="topic-metadata">

**Author:** [@hamidreza\_ghadir](https://discuss.elastic.co/u/hamidreza_ghadir)\
**Replies:** 6\
**Last updated:** [December 15, 2020, 5:30pm UTC](https://discuss.elastic.co/t/cant-connect-to-cluster-when-master-node-is-off/258634 "2020-12-15T17:30:27Z")

</div>

Hi, I have a cluster with three node. When master node is turned off , I can't connect to any of nodes with their addresses. MasterNode: 0.0.0.0:9200, Node2: 0.0.0.0:9201, Node3: 0.0.0.0:9202 with this configuration: …

---

## [Importing dashboard and index pattern id](https://discuss.elastic.co/t/importing-dashboard-and-index-pattern-id/255688)

<div class="topic-metadata">

**Author:** [@Maria20](https://discuss.elastic.co/u/Maria20)\
**Replies:** 16\
**Last updated:** [December 15, 2020, 4:47pm UTC](https://discuss.elastic.co/t/importing-dashboard-and-index-pattern-id/255688 "2020-12-15T16:47:35Z")

</div>

Hi, I have an issue related to importing Kibana dashboard. My dashboard contains visualizations from different indices. When I import & export the dashboard using UI everything works fine. But when I export and then i…

---

## [Issue with loading AWS dashboard in Kibana](https://discuss.elastic.co/t/issue-with-loading-aws-dashboard-in-kibana/258629)

<div class="topic-metadata">

**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\
**Replies:** 5\
**Last updated:** [December 15, 2020, 4:12pm UTC](https://discuss.elastic.co/t/issue-with-loading-aws-dashboard-in-kibana/258629 "2020-12-15T16:12:36Z")

</div>

I am having an issue with displaying the AWS Dashboard in Kibana. I have followed the steps detailed in the instructions for enabling & configuring the AWS module in Metricbeat. When running the setup.exe command there …

---

## [Logstash aggregate function](https://discuss.elastic.co/t/logstash-aggregate-function/258738)

<div class="topic-metadata">

**Author:** [@errupeshmca](https://discuss.elastic.co/u/errupeshmca)\
**Replies:** 0\
**Last updated:** [December 15, 2020, 4:09pm UTC](https://discuss.elastic.co/t/logstash-aggregate-function/258738 "2020-12-15T16:09:54Z")

</div>

I am looking for aggregate function to get sum of field(TotalOrderReceivedToday) in a new field (sum). but i think it's aggregating everything based on TotalOrderReceivedToday field, I need sum of one field only to { …

---

## [Elastic Stack on Raspberry Pi](https://discuss.elastic.co/t/elastic-stack-on-raspberry-pi/256261)

<div class="topic-metadata">

**Author:** [@jamesgarside](https://discuss.elastic.co/u/jamesgarside)\
**Replies:** 1\
**Last updated:** [December 15, 2020, 3:42pm UTC](https://discuss.elastic.co/t/elastic-stack-on-raspberry-pi/256261 "2020-12-15T15:42:09Z")

</div>

Hi All, I have been working on a project to make it possible for people to deploy an Elastic Stack on a Raspberry Pi. Current versions 7.10.0 7.9.3 At current I have made this Docker Swarm based. This has various ad…

---

## [Map string value of an ID to a custom String using JSON input](https://discuss.elastic.co/t/map-string-value-of-an-id-to-a-custom-string-using-json-input/258491)

<div class="topic-metadata">

**Author:** [@officer\_snickers](https://discuss.elastic.co/u/officer_snickers)\
**Replies:** 1\
**Last updated:** [December 15, 2020, 3:18pm UTC](https://discuss.elastic.co/t/map-string-value-of-an-id-to-a-custom-string-using-json-input/258491 "2020-12-15T15:18:57Z")

</div>

I'm totally new to kibana. I have the current problem, I created a visualisation chart which is splitting rows based on the UUID. In this Index, I unfortunately don't have the related organisation name to the UUID. My …

---

## [Detect PII Personal Identifiable Information in Kibana](https://discuss.elastic.co/t/detect-pii-personal-identifiable-information-in-kibana/258710)

<div class="topic-metadata">

**Author:** [@gregbk](https://discuss.elastic.co/u/gregbk)\
**Replies:** 1\
**Last updated:** [December 15, 2020, 3:14pm UTC](https://discuss.elastic.co/t/detect-pii-personal-identifiable-information-in-kibana/258710 "2020-12-15T15:14:28Z")

</div>

Hello Elastic community! I was researching if there was any tool to detect from Kibana (or ES, logstash) any PPI Personal Identifiable Information (name, phone number, account number, address) in Elasticsearch. So our t…

---

## [Cannot use scripted field in a date range bucket aggregation](https://discuss.elastic.co/t/cannot-use-scripted-field-in-a-date-range-bucket-aggregation/258711)

<div class="topic-metadata">

**Author:** [@kspe](https://discuss.elastic.co/u/kspe)\
**Replies:** 2\
**Last updated:** [December 15, 2020, 3:13pm UTC](https://discuss.elastic.co/t/cannot-use-scripted-field-in-a-date-range-bucket-aggregation/258711 "2020-12-15T15:13:28Z")

</div>

Hey, I have a time field in my document which is a timestamp number. It is not set as a date type field so cannot use it in the date range bucket aggregation directly (Kibana complains that the index does not contain an…

---

## [Unable to visualise long text field in Kibana](https://discuss.elastic.co/t/unable-to-visualise-long-text-field-in-kibana/258597)

<div class="topic-metadata">

**Author:** [@tarund](https://discuss.elastic.co/u/tarund)\
**Replies:** 3\
**Last updated:** [December 15, 2020, 2:43pm UTC](https://discuss.elastic.co/t/unable-to-visualise-long-text-field-in-kibana/258597 "2020-12-15T14:43:15Z")

</div>

Hi , I have an index in Elasticsearch in which one of the text fields(qtext) has values like below - { delete: "UsDetails", ordered: true, txnNumber: 381, $db: "apt", $clusterTime: { clusterTime: Timestamp(1607955967, …

---

## [Kibana functions missing in X-axis configurations of visualization](https://discuss.elastic.co/t/kibana-functions-missing-in-x-axis-configurations-of-visualization/258536)

<div class="topic-metadata">

**Author:** [@zhirong\_tong](https://discuss.elastic.co/u/zhirong_tong)\
**Replies:** 3\
**Last updated:** [December 15, 2020, 2:43pm UTC](https://discuss.elastic.co/t/kibana-functions-missing-in-x-axis-configurations-of-visualization/258536 "2020-12-15T14:43:02Z")

</div>

When creating Lens in visualization, I expect to see "Top Values", Interval" and "Filter" three functions in X-axis configuration, however, there are "Top values"," Date Histogram" now, is it because of miss cofigurati…

---

## [Logstash is still using old code](https://discuss.elastic.co/t/logstash-is-still-using-old-code/258494)

<div class="topic-metadata">

**Author:** [@Ferdous\_Khan](https://discuss.elastic.co/u/Ferdous_Khan)\
**Replies:** 5\
**Last updated:** [December 15, 2020, 2:27pm UTC](https://discuss.elastic.co/t/logstash-is-still-using-old-code/258494 "2020-12-15T14:27:05Z")

</div>

Hello, I was previously using elapsed filter in my logstash config to calculate time difference of start and end event. Recently I have replaced elapsed filter's code with elasticsearch output filter and painless script…

---

## [On x Axis show biggest 20 Values, but in Ascending Order](https://discuss.elastic.co/t/on-x-axis-show-biggest-20-values-but-in-ascending-order/258616)

<div class="topic-metadata">

**Author:** [@grra](https://discuss.elastic.co/u/grra)\
**Replies:** 3\
**Last updated:** [December 15, 2020, 1:33pm UTC](https://discuss.elastic.co/t/on-x-axis-show-biggest-20-values-but-in-ascending-order/258616 "2020-12-15T13:33:00Z")

</div>

Hi, I want to visualize the RAM usage of some builds. As fields I have: "metrics": { "ram": ram\_value } // on the y - Axis, and "buildnumber": num // on the x - Axis. The maximum y - Value is the …

---

## [Validation Failed: 1: this action would add \[2\] total shards, but this cluster currently has \[2000\]/\[2000\] maximum shards open](https://discuss.elastic.co/t/validation-failed-1-this-action-would-add-2-total-shards-but-this-cluster-currently-has-2000-2000-maximum-shards-open/257064)

<div class="topic-metadata">

**Author:** [@rneema1](https://discuss.elastic.co/u/rneema1)\
**Replies:** 5\
**Last updated:** [December 15, 2020, 1:21pm UTC](https://discuss.elastic.co/t/validation-failed-1-this-action-would-add-2-total-shards-but-this-cluster-currently-has-2000-2000-maximum-shards-open/257064 "2020-12-15T13:21:02Z")

</div>

I'm using Elastic 7.6.2 I'm creating an index using a pipeline, Reading and sending text file through the filebeat and sending to a pipeline. I'm getting this error : Validation Failed: 1: this action would add \[2\] …

---

## [How to link/stitch-together events in an efficient way?](https://discuss.elastic.co/t/how-to-link-stitch-together-events-in-an-efficient-way/258611)

<div class="topic-metadata">

**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\
**Replies:** 2\
**Last updated:** [December 15, 2020, 1:07pm UTC](https://discuss.elastic.co/t/how-to-link-stitch-together-events-in-an-efficient-way/258611 "2020-12-15T13:07:41Z")

</div>

We have following data from auditD type=SYSCALL msg=audit(1607953823.861:1184699): arch=c000003e syscall=263 success=yes exit=0 a0=ffffffffffffff9c a1=17780c0 a2=0 a3=7ffe280a6ae0 items=2 ppid=45207 pid=45248 auid=1002 …

---

## [Field Name length more than 255](https://discuss.elastic.co/t/field-name-length-more-than-255/258592)

<div class="topic-metadata">

**Author:** [@srikanthkadem](https://discuss.elastic.co/u/srikanthkadem)\
**Replies:** 2\
**Last updated:** [December 15, 2020, 1:03pm UTC](https://discuss.elastic.co/t/field-name-length-more-than-255/258592 "2020-12-15T13:03:11Z")

</div>

Hi Team, I am facing issue in Syncing data into Elastic , upon investigatation I found that few of my fields name is more than 255. I trimmed it 250 to see if Sync working fine, it worked. Can you please help me in incr…

---

## [Two specific nodes with 100% CPU](https://discuss.elastic.co/t/two-specific-nodes-with-100-cpu/258591)

<div class="topic-metadata">

**Author:** [@Lior\_Yakobov](https://discuss.elastic.co/u/Lior_Yakobov)\
**Replies:** 3\
**Last updated:** [December 15, 2020, 11:49am UTC](https://discuss.elastic.co/t/two-specific-nodes-with-100-cpu/258591 "2020-12-15T11:49:25Z")

</div>

Hello, We are experiencing for a few days now a scenario which 2 nodes are at 100% CPU usage. I can tell that these are searches as the search pool and search queue are filled, but I cannot figure out from where they a…

---

## [Dec 15th, 2020: \[EN\] Preparing for an Elasticsearch Interview](https://discuss.elastic.co/t/dec-15th-2020-en-preparing-for-an-elasticsearch-interview/258087)

<div class="topic-metadata">

**Author:** [@aravindputrevu](https://discuss.elastic.co/u/aravindputrevu)\
**Replies:** 0\
**Last updated:** [December 15, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-15th-2020-en-preparing-for-an-elasticsearch-interview/258087 "2020-12-15T08:00:07Z")

</div>

Elasticsearch is the most popularly used data store for building a Search Engine, Centralized Logging, Observability, or Threat Hunting use cases. That also means Elasticsearch is omnipresent in many organizations. In …

---

## [I can not run elasticsearch command](https://discuss.elastic.co/t/i-can-not-run-elasticsearch-command/258652)

<div class="topic-metadata">

**Author:** [@Vlad\_Dumitru](https://discuss.elastic.co/u/Vlad_Dumitru)\
**Replies:** 3\
**Last updated:** [December 15, 2020, 10:36am UTC](https://discuss.elastic.co/t/i-can-not-run-elasticsearch-command/258652 "2020-12-15T10:36:08Z")

</div>

OS: Manjaro STEPS: I was following this tutorial in order to install elasticsearch If I'm trying to run elasticsearch I will get this error: /usr/bin/elasticsearch-env: line 128: cd: /usr/share/elasticsearch/conf…

---

## [Select distinct value from multiple indexes](https://discuss.elastic.co/t/select-distinct-value-from-multiple-indexes/258696)

<div class="topic-metadata">

**Author:** [@ahmedbrandver](https://discuss.elastic.co/u/ahmedbrandver)\
**Replies:** 0\
**Last updated:** [December 15, 2020, 10:17am UTC](https://discuss.elastic.co/t/select-distinct-value-from-multiple-indexes/258696 "2020-12-15T10:17:59Z")

</div>

Hello, how can I add a aggregation to get data based on unique field of multiple indexes. Let's say I have three different indexes in which they have a unique code but one unique code can be exists in different field of …

---

## [Elastic thinks that it uses all RAM](https://discuss.elastic.co/t/elastic-thinks-that-it-uses-all-ram/258688)

<div class="topic-metadata">

**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\
**Replies:** 0\
**Last updated:** [December 15, 2020, 9:37am UTC](https://discuss.elastic.co/t/elastic-thinks-that-it-uses-all-ram/258688 "2020-12-15T09:37:22Z")

</div>

Hello, I noticed one thing about our cluster. When I made curl request (curl -XGET 'http://h1-es01:9200/\_nodes/stats/os?pretty') I saw this: h1-es01 "mem" : { "total\_in\_bytes" : 134885113856, …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1111)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1113)
