# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1128 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1129 --- ## [Optimizing Aggregation Performance](https://discuss.elastic.co/t/optimizing-aggregation-performance/257477)
**Author:** [@muhammad\_ayoub](https://discuss.elastic.co/u/muhammad_ayoub)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 9:34am UTC](https://discuss.elastic.co/t/optimizing-aggregation-performance/257477 "2020-12-03T09:34:25Z")
Hi all, firstly, please excuse me if my questione is not very well formed as I am new to elasticsearch and not very familiar with what details I should list. We have an elasticearch cluster with three nodes where all o… --- ## [java.lang.StackOverflowError: null](https://discuss.elastic.co/t/java-lang-stackoverflowerror-null/257295)
**Author:** [@yc1024](https://discuss.elastic.co/u/yc1024)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 8:35am UTC](https://discuss.elastic.co/t/java-lang-stackoverflowerror-null/257295 "2020-12-03T08:35:37Z")
elasticsearch version : 6.7.1 \[search\]\[T#65\]\], exiting java.lang.StackOverflowError: null at java.util.stream.StreamOpFlag.fromCharacteristics(StreamOpFlag.java:733) ~\[?:1.8.0\_201\] at java.util.stream.StreamSupport.st… --- ## [Weights for synonyms](https://discuss.elastic.co/t/weights-for-synonyms/257467)
**Author:** [@TatianaParshina](https://discuss.elastic.co/u/TatianaParshina)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 8:31am UTC](https://discuss.elastic.co/t/weights-for-synonyms/257467 "2020-12-03T08:31:58Z")
Hi, Is there a way to provide weight/boost for synonyms? For example, I have synonyms: \["laptop", "notebook"\]. I want that score of "laptop" should be more then score of "notebook" and I want to specify this score. I h… --- ## [I want to see only outbound traffic of VPC Flow log in kibana](https://discuss.elastic.co/t/i-want-to-see-only-outbound-traffic-of-vpc-flow-log-in-kibana/257458)
**Author:** [@sujeetjha](https://discuss.elastic.co/u/sujeetjha)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 6:55am UTC](https://discuss.elastic.co/t/i-want-to-see-only-outbound-traffic-of-vpc-flow-log-in-kibana/257458 "2020-12-03T06:55:43Z")
I want to see only outbound traffic of VPC FLow Log in kibana. Currently getting all inbound and outbound and I only want to see outbound traffic in kibana. this is a long pattern of VPC, I am not able to figure out how… --- ## [Logstash got error message "no implicit conversion of nil into String"](https://discuss.elastic.co/t/logstash-got-error-message-no-implicit-conversion-of-nil-into-string/257440)
**Author:** [@algo\_msh](https://discuss.elastic.co/u/algo_msh)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 3:11am UTC](https://discuss.elastic.co/t/logstash-got-error-message-no-implicit-conversion-of-nil-into-string/257440 "2020-12-03T03:11:21Z")
\[2020-12-03T01:22:03,474\]\[ERROR\]\[logstash.outputs.elasticsearch\] An unknown error occurred sending a bulk request to Elasticsearch. We will retry indefinitely {:error\_message=\>"no implicit conversion of nil into String",… --- ## [Too many scroll error](https://discuss.elastic.co/t/too-many-scroll-error/255919)
**Author:** [@Amy\_Jonson](https://discuss.elastic.co/u/Amy_Jonson)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 2:48am UTC](https://discuss.elastic.co/t/too-many-scroll-error/255919 "2020-12-03T02:48:28Z")
Hi, We encountered an error "Trying to create too many scroll context". What is the possible trigger of this error and how should we avoid it. We only resolve this issue when we restarted the ES. Thanks --- ## [Elasticsearch Head - Find and Remove Duplicate Documents](https://discuss.elastic.co/t/elasticsearch-head-find-and-remove-duplicate-documents/257438)
**Author:** [@test\_tester](https://discuss.elastic.co/u/test_tester)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 2:39am UTC](https://discuss.elastic.co/t/elasticsearch-head-find-and-remove-duplicate-documents/257438 "2020-12-03T02:39:29Z")
Hi All, Background: Inside my application, users noticed duplicate transactions -\> investigating deeper, we noticed that we have duplicates in our elasticsearch database, likely because we did not restart our logstash/… --- ## [Security Solution Plugins & @timestamp](https://discuss.elastic.co/t/security-solution-plugins-timestamp/257217)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 1:31am UTC](https://discuss.elastic.co/t/security-solution-plugins-timestamp/257217 "2020-12-03T01:31:36Z")
Good Day, Just updated to 7.10 and while examining the kibana logs I find: {"type":"log","@timestamp":"2020-11-25T20:37:07Z","tags":\["error","plugins","securitySolution","plugins","securitySolution"\],"pid":22460,"messa… --- ## [SIEM - troubleshooting various error](https://discuss.elastic.co/t/siem-troubleshooting-various-error/257358)
**Author:** [@Colby99](https://discuss.elastic.co/u/Colby99)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 1:27am UTC](https://discuss.elastic.co/t/siem-troubleshooting-various-error/257358 "2020-12-03T01:27:25Z")
Hello i have various error in the "Security" section. Starting by: The tab Overview: In the tab Hosts i got this 3 errors I'm using winlogbeat 7.10 and stack ELK 7.10 thank you for the help ! --- ## [Logstash date format - Converting timestamp without timezone to timetamp with timezone](https://discuss.elastic.co/t/logstash-date-format-converting-timestamp-without-timezone-to-timetamp-with-timezone/257426)
**Author:** [@jasoninmel](https://discuss.elastic.co/u/jasoninmel)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 12:32am UTC](https://discuss.elastic.co/t/logstash-date-format-converting-timestamp-without-timezone-to-timetamp-with-timezone/257426 "2020-12-03T00:32:24Z")
I got an event timestamp field without timezone stored in Elasticsearch as follows; "open-date": "2016-05-28T00:00:00" This time is in Australia/Melbourne timezone (AEDT/AEST). I used the following filter to covert … --- ## [Setting hostname for specific log files being shipped with filebeat](https://discuss.elastic.co/t/setting-hostname-for-specific-log-files-being-shipped-with-filebeat/257431)
**Author:** [@afc](https://discuss.elastic.co/u/afc)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 12:04am UTC](https://discuss.elastic.co/t/setting-hostname-for-specific-log-files-being-shipped-with-filebeat/257431 "2020-12-03T00:04:24Z")
Greetings! I've been setting up a centralized log server to collect data from our servers, switches, access points etc. I have a folder on the log server that contains apache log files from a remote machine (/var/log/pr… --- ## [Logstash Java filter plugin example "./gradlew gem" error](https://discuss.elastic.co/t/logstash-java-filter-plugin-example-gradlew-gem-error/257110)
**Author:** [@lakechat](https://discuss.elastic.co/u/lakechat)\ **Replies:** 4\ **Last updated:** [December 3, 2020, 12:18am UTC](https://discuss.elastic.co/t/logstash-java-filter-plugin-example-gradlew-gem-error/257110 "2020-12-03T00:18:57Z")
I was following Elasticsearch document (https://www.elastic.co/guide/en/logstash/current/java-filter-plugin.html) to write a Java filter plugin for Logtash. Somehow, I could not even get the provided example work. I stuc… --- ## [Penalize multiple fuzzy matches from one word](https://discuss.elastic.co/t/penalize-multiple-fuzzy-matches-from-one-word/257430)
**Author:** [@Tianyi\_Mao](https://discuss.elastic.co/u/Tianyi_Mao)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 11:25pm UTC](https://discuss.elastic.co/t/penalize-multiple-fuzzy-matches-from-one-word/257430 "2020-12-02T23:25:57Z")
Suppose I am doing a multi\_match query with "good brain", on the following documents: a good brain is so fun some rain on grain and brain drain brain brain brain brain By adjusting the k1 value of BM25 scoring, one can… --- ## [Error: Cannot allocate memory](https://discuss.elastic.co/t/error-cannot-allocate-memory/257423)
**Author:** [@manunc](https://discuss.elastic.co/u/manunc)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 11:06pm UTC](https://discuss.elastic.co/t/error-cannot-allocate-memory/257423 "2020-12-02T23:06:23Z")
Hello, I am faced to an issue since a long time without finding the solution. I have a dedicated server with 12 Gb RAM but I can only allocate to Logstash 2Gb otherwise the process fall into an error. It seems linked t… --- ## [Elasticsearch service suddenly stop after few minutes started](https://discuss.elastic.co/t/elasticsearch-service-suddenly-stop-after-few-minutes-started/257146)
**Author:** [@Junedi\_Rajagukguk](https://discuss.elastic.co/u/Junedi_Rajagukguk)\ **Replies:** 10\ **Last updated:** [December 2, 2020, 10:10pm UTC](https://discuss.elastic.co/t/elasticsearch-service-suddenly-stop-after-few-minutes-started/257146 "2020-12-02T22:10:38Z")
HI, i built cluster elasticserach which is 1 master, 1 logstash, 1 elastic i found this error when i start elasticservice in logstash server. and actualy i have another problem, my index always reset every 2 days(some… --- ## [Show top 100 most occured errors from log](https://discuss.elastic.co/t/show-top-100-most-occured-errors-from-log/257339)
**Author:** [@5JrA2ngS8Snub](https://discuss.elastic.co/u/5JrA2ngS8Snub)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 7:18pm UTC](https://discuss.elastic.co/t/show-top-100-most-occured-errors-from-log/257339 "2020-12-02T19:18:50Z")
FYI: I'm new to using the ELK stack. I want to have more (easier) insight into the apache error log data my servers are producing. My plan is to create dashboards that will show me the information I need. One of the mo… --- ## [Cannot connect locally run Logstash to influxdb in docker container](https://discuss.elastic.co/t/cannot-connect-locally-run-logstash-to-influxdb-in-docker-container/257280)
**Author:** [@naveenrt23](https://discuss.elastic.co/u/naveenrt23)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 9:52pm UTC](https://discuss.elastic.co/t/cannot-connect-locally-run-logstash-to-influxdb-in-docker-container/257280 "2020-12-01T21:52:05Z")
Hello, I'm running Influxdb in docker container and trying to connect from logstash which is running locally. I've enabled the influxdb-logstash plugin to connect to influxdb output { stdout { codec =\> rubydebug … --- ## [How to reindex data after 7.10 update](https://discuss.elastic.co/t/how-to-reindex-data-after-7-10-update/257101)
**Author:** [@rgeisman](https://discuss.elastic.co/u/rgeisman)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 6:15pm UTC](https://discuss.elastic.co/t/how-to-reindex-data-after-7-10-update/257101 "2020-12-02T18:15:41Z")
Hello all. We just completed our nice 7.10 update and I have read in the docs that it is necessary for us to reindex the data on ES after an upgrade. We are using 5 ES boxes and Logstash. Could someone point me to/pro… --- ## [Can I do an OR logic Filter?](https://discuss.elastic.co/t/can-i-do-an-or-logic-filter/257395)
**Author:** [@spyderman4g63](https://discuss.elastic.co/u/spyderman4g63)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 5:03pm UTC](https://discuss.elastic.co/t/can-i-do-an-or-logic-filter/257395 "2020-12-02T17:03:49Z")
I'm trying to build an OR logic facet (aggregation). From what I understand the best way to filter a query for an aggregation value is to use the filter clause. That is because a filter limits the results without having … --- ## [How to sort by distance in aggregation?](https://discuss.elastic.co/t/how-to-sort-by-distance-in-aggregation/257391)
**Author:** [@isma-el](https://discuss.elastic.co/u/isma-el)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 4:47pm UTC](https://discuss.elastic.co/t/how-to-sort-by-distance-in-aggregation/257391 "2020-12-02T16:47:34Z")
Hello, is it possible to sort by geodistance in an aggregation ? I can't find a way to achieve this. I need aggregations to remove duplicates according to multiple terms, bu I need to sort the results by geodistance. … --- ## [How to extract data from filename using logstash?](https://discuss.elastic.co/t/how-to-extract-data-from-filename-using-logstash/257371)
**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 4:46pm UTC](https://discuss.elastic.co/t/how-to-extract-data-from-filename-using-logstash/257371 "2020-12-02T16:46:30Z")
I am using filebeat to monitor a directory for new files that get dropped in every hour. The files are then sent to logstash to be parsed before being sent to ES. The filenames are in this format aldb-E6-20201015232941.… --- ## [Use rank feature query as multiplier to the relevance score](https://discuss.elastic.co/t/use-rank-feature-query-as-multiplier-to-the-relevance-score/257388)
**Author:** [@praveshjain1991](https://discuss.elastic.co/u/praveshjain1991)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 4:32pm UTC](https://discuss.elastic.co/t/use-rank-feature-query-as-multiplier-to-the-relevance-score/257388 "2020-12-02T16:32:51Z")
As per the documentation, the rank feature query score is added to the overall query score. Since the relevance score itself is not bounded - the actual store depends on the data in your indices - how do I make the rank… --- ## [Kibana Rest API redirects to login](https://discuss.elastic.co/t/kibana-rest-api-redirects-to-login/256799)
**Author:** [@Ludo\_Vic](https://discuss.elastic.co/u/Ludo_Vic)\ **Replies:** 3\ **Last updated:** [December 2, 2020, 3:37pm UTC](https://discuss.elastic.co/t/kibana-rest-api-redirects-to-login/256799 "2020-12-02T15:37:54Z")
Hi, I'm new to ElasticSearch and Kibana. I'm trying to use Kibana's REST API, but the response i get are redirections to /login whatever the request i try. For example : $ curl -v -u user:passwd -X GET "127.0.0.1:5601… --- ## [DSL query works with search but not update\_by\_query](https://discuss.elastic.co/t/dsl-query-works-with-search-but-not-update-by-query/257378)
**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 3:36pm UTC](https://discuss.elastic.co/t/dsl-query-works-with-search-but-not-update-by-query/257378 "2020-12-02T15:36:59Z")
Hi, If i run the following search query i get back the documents i expect, def get\_results(): search = es.search( index = "logs-\*", body = { "from": 0, "size": 10000, "query"… --- ## [AWS Cloudfront](https://discuss.elastic.co/t/aws-cloudfront/257165)
**Author:** [@Roxbip](https://discuss.elastic.co/u/Roxbip)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 3:32pm UTC](https://discuss.elastic.co/t/aws-cloudfront/257165 "2020-12-02T15:32:36Z")
Hi all, I'm new to elasticsearch and all this world. I installed EFK stack with some helm charts. my version is 6.8.13 for my stack and its on Kubernetes. All is working fine for now. I want to take my logs from AWS… --- ## [Weird validation behaviour with allow\_leading\_wildcard](https://discuss.elastic.co/t/weird-validation-behaviour-with-allow-leading-wildcard/257374)
**Author:** [@barakm](https://discuss.elastic.co/u/barakm)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 3:09pm UTC](https://discuss.elastic.co/t/weird-validation-behaviour-with-allow-leading-wildcard/257374 "2020-12-02T15:09:38Z")
The following query: { "query": { "bool": { "must": \[ { "query\_string": { "query": "\*Created", "allow\_leading\_w… --- ## [NoNodeAvailableException](https://discuss.elastic.co/t/nonodeavailableexception/257081)
**Author:** [@andy4195](https://discuss.elastic.co/u/andy4195)\ **Replies:** 12\ **Last updated:** [December 2, 2020, 3:07pm UTC](https://discuss.elastic.co/t/nonodeavailableexception/257081 "2020-12-02T15:07:34Z")
Добрый день. Проблема следующая. Есть кластер, в котором три ноды и мастер. Есть три автомата которые настроены каждый на свою ноду. Переодически валится ошибка NoNodeAvailableException ... При этом сам кластер не сообща… --- ## [Login problem after embeddding our Kibana Dashboard to an external site](https://discuss.elastic.co/t/login-problem-after-embeddding-our-kibana-dashboard-to-an-external-site/256878)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 2:31pm UTC](https://discuss.elastic.co/t/login-problem-after-embeddding-our-kibana-dashboard-to-an-external-site/256878 "2020-12-02T14:31:34Z")
We have a login problem after embeddding our Kibana Dashboard to an external site. After copying the iFrame code of a dashboard and embeddding it, when we try to login into Kibana the login page just gets reloaded and i… --- ## [Logstash pipelines - 2 simple questions](https://discuss.elastic.co/t/logstash-pipelines-2-simple-questions/257306)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 1:12pm UTC](https://discuss.elastic.co/t/logstash-pipelines-2-simple-questions/257306 "2020-12-02T13:12:25Z")
Hi there, I have 2 simple questions regarding logstash pipelines: Is it possible in a pipeline - if I made a change and need this change a filter e.g. to take effect - to restart only this single pipeline.id? Or can I… --- ## [Postgresql queries in ELK](https://discuss.elastic.co/t/postgresql-queries-in-elk/256371)
**Author:** [@Charakterny](https://discuss.elastic.co/u/Charakterny)\ **Replies:** 7\ **Last updated:** [December 2, 2020, 12:43pm UTC](https://discuss.elastic.co/t/postgresql-queries-in-elk/256371 "2020-12-02T12:43:23Z")
Hi, I installed metricbeat to provide metrics from postgresql and it works, but main goal was to analize queries in elastic and build dashboard for custom queries. As I started to configure, any statements from databas… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1127) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1129)