# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1164 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1165 --- ## [Lucene Documents](https://discuss.elastic.co/t/lucene-documents/254378)
**Author:** [@tsp](https://discuss.elastic.co/u/tsp)\ **Replies:** 2\ **Last updated:** [November 6, 2020, 8:00am UTC](https://discuss.elastic.co/t/lucene-documents/254378 "2020-11-06T08:00:05Z")
Hi all, I am not too sure that this is the right place. But we are new to build our own full-text engine. We are planning to index files on the fly using the Lucence Java API. That would be an easy requirement as such,… --- ## [Visualize a value calculated from the per-bucket sum of one field divided by the per-bucket sum of another?](https://discuss.elastic.co/t/visualize-a-value-calculated-from-the-per-bucket-sum-of-one-field-divided-by-the-per-bucket-sum-of-another/254359)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 3\ **Last updated:** [November 6, 2020, 4:17am UTC](https://discuss.elastic.co/t/visualize-a-value-calculated-from-the-per-bucket-sum-of-one-field-divided-by-the-per-bucket-sum-of-another/254359 "2020-11-06T04:17:49Z")
I have data in JSON Lines format that contains statistics about the tasks performed by a system over an interval of time. (The specific definition of "task" here is not important.) Each line of JSON Lines contains, amon… --- ## [Cancel a forcemerge operation](https://discuss.elastic.co/t/cancel-a-forcemerge-operation/254481)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 1\ **Last updated:** [November 6, 2020, 4:32am UTC](https://discuss.elastic.co/t/cancel-a-forcemerge-operation/254481 "2020-11-06T04:32:24Z")
Is there a way to cancel and on-going \[\_forcemerge\](https://www.elastic.co/guide/en/elasticsearch/reference/6.8/indices-forcemerge.html#indices-forcemerge) operation? ES Version 6.8.6. --- ## [Add new fields](https://discuss.elastic.co/t/add-new-fields/254017)
**Author:** [@Sakthivanan](https://discuss.elastic.co/u/Sakthivanan)\ **Replies:** 1\ **Last updated:** [November 6, 2020, 4:27am UTC](https://discuss.elastic.co/t/add-new-fields/254017 "2020-11-06T04:27:58Z")
\*\*I'm trying to add new hardcoded field in logstash filter:\*\* My logstash config: input { elasticsearch { hosts =\> "http://localhost:9200" index =\> "ccee\_mathematics\_academic\_indicator\_2018"… --- ## [Can't delete a document using the API Documentation](https://discuss.elastic.co/t/cant-delete-a-document-using-the-api-documentation/253876)
**Author:** [@fabricioisma](https://discuss.elastic.co/u/fabricioisma)\ **Replies:** 2\ **Last updated:** [November 6, 2020, 2:22am UTC](https://discuss.elastic.co/t/cant-delete-a-document-using-the-api-documentation/253876 "2020-11-06T02:22:59Z")
I want to delete a document using the API, I used post and patch methods and work very well, but I got a problem deleting any document. I'm following this documentation: When I make the request I got this response: … --- ## [Logstash: manipulate json data](https://discuss.elastic.co/t/logstash-manipulate-json-data/254198)
**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\ **Replies:** 7\ **Last updated:** [November 6, 2020, 1:50am UTC](https://discuss.elastic.co/t/logstash-manipulate-json-data/254198 "2020-11-06T01:50:36Z")
Hi, i retrieved data from ES and would like to add/modify the json data before index it. My json data looks like below: { "john" : { "enabled" : true, "roles" : \[ "developer" \], "rules" : { … --- ## [Cron in http\_poller still triggering after changing the pipeline configuration](https://discuss.elastic.co/t/cron-in-http-poller-still-triggering-after-changing-the-pipeline-configuration/254367)
**Author:** [@fbenaven](https://discuss.elastic.co/u/fbenaven)\ **Replies:** 5\ **Last updated:** [November 5, 2020, 10:34pm UTC](https://discuss.elastic.co/t/cron-in-http-poller-still-triggering-after-changing-the-pipeline-configuration/254367 "2020-11-05T22:34:46Z")
Hi, We have a pipeline configuration using some http\_poller as inputs. After changing the config from "cron" format (at '15 of all hours) to "every" (hourly basis), we see that the poller triggers hourly as intended bu… --- ## [Convert Gauge to and from Celsius/Fahrenheit](https://discuss.elastic.co/t/convert-gauge-to-and-from-celsius-fahrenheit/254464)
**Author:** [@JeffSmith](https://discuss.elastic.co/u/JeffSmith)\ **Replies:** 1\ **Last updated:** [November 5, 2020, 10:20pm UTC](https://discuss.elastic.co/t/convert-gauge-to-and-from-celsius-fahrenheit/254464 "2020-11-05T22:20:41Z")
One thing that has always stumped me is converting a value in a visualization. I would like to have a gauge that display the current temperature. The data source is in fahrenheit but a lot of people seeing the gauge a… --- ## [Kibana Discover generates Error Loading data but data shows up in Devtool](https://discuss.elastic.co/t/kibana-discover-generates-error-loading-data-but-data-shows-up-in-devtool/253609)
**Author:** [@RayS](https://discuss.elastic.co/u/RayS)\ **Replies:** 5\ **Last updated:** [November 5, 2020, 10:09pm UTC](https://discuss.elastic.co/t/kibana-discover-generates-error-loading-data-but-data-shows-up-in-devtool/253609 "2020-11-05T22:09:31Z")
I have heartbeat logging to one single index. When I go to Discover and set it for any time frame (I usually use list 60 minutes) I get Error loading data display on the screen. When I click on See Full Error this is… --- ## [Alternative for CentOS 5 machines](https://discuss.elastic.co/t/alternative-for-centos-5-machines/254396)
**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\ **Replies:** 2\ **Last updated:** [November 5, 2020, 9:58pm UTC](https://discuss.elastic.co/t/alternative-for-centos-5-machines/254396 "2020-11-05T21:58:18Z")
I've deployed beats on most servers and it works really well. The only problem is that there are about 10 machines left that still run CentOS 5.4 and cannot be updated. I've tried installing filebeat but it said the ker… --- ## [Why Elastic search doesn't support storing encrypted data](https://discuss.elastic.co/t/why-elastic-search-doesnt-support-storing-encrypted-data/254375)
**Author:** [@Vivek\_Sagar](https://discuss.elastic.co/u/Vivek_Sagar)\ **Replies:** 1\ **Last updated:** [November 5, 2020, 9:57pm UTC](https://discuss.elastic.co/t/why-elastic-search-doesnt-support-storing-encrypted-data/254375 "2020-11-05T21:57:16Z")
As in previous discussion, ES works on encrypted volumes(dm-crypt). Is there any specific reason why it does not support storing and searching on encrypted data? --- ## [Logstash could not index event to Elasticsearch](https://discuss.elastic.co/t/logstash-could-not-index-event-to-elasticsearch/254234)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 3\ **Last updated:** [November 5, 2020, 9:44pm UTC](https://discuss.elastic.co/t/logstash-could-not-index-event-to-elasticsearch/254234 "2020-11-05T21:44:31Z")
Hello eveybody, I am using Logstash to parse my firewall logs, and in some logs I am getting that errors: \[2020-11-03T16:07:22,361\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[f05eea78ee20871f68357cbab5919471405decdd5… --- ## [Unable to start elasticsearch on centos 7 server](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-centos-7-server/254276)
**Author:** [@valsaraj\_pv](https://discuss.elastic.co/u/valsaraj_pv)\ **Replies:** 3\ **Last updated:** [November 5, 2020, 9:41pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-centos-7-server/254276 "2020-11-05T21:41:58Z")
After installation, we got following error when started the service: \[2020-11-04T07:20:12,233\]\[WARN \]\[o.e.b.Natives \] \[test\] unable to load JNA native support library, native methods will be disabled. java.lang.Unsati… --- ## [How to get Elastic Webinar and blog updates to official email address?](https://discuss.elastic.co/t/how-to-get-elastic-webinar-and-blog-updates-to-official-email-address/254336)
**Author:** [@InfiniteDreamer](https://discuss.elastic.co/u/InfiniteDreamer)\ **Replies:** 3\ **Last updated:** [November 5, 2020, 9:22pm UTC](https://discuss.elastic.co/t/how-to-get-elastic-webinar-and-blog-updates-to-official-email-address/254336 "2020-11-05T21:22:14Z")
Hi Guys, I want to know how to get upcoming webinars and updates of elastic products to my official email address. I have registered for newsletter subscription bottom of Elastic.co webpage, but not getting emails regar… --- ## [Elasticsearch time to as in via python (timezone)](https://discuss.elastic.co/t/elasticsearch-time-to-as-in-via-python-timezone/254340)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 5\ **Last updated:** [November 5, 2020, 8:38pm UTC](https://discuss.elastic.co/t/elasticsearch-time-to-as-in-via-python-timezone/254340 "2020-11-05T20:38:34Z")
I have a wrote small python script where I am reading certain information from Elasticsearch and pushing that back in to ELK. what I want it to keep what ever date-time I get from ELK. I want to push same as is back in … --- ## [Compare if hosts/feeds are missing from last week](https://discuss.elastic.co/t/compare-if-hosts-feeds-are-missing-from-last-week/254412)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 3\ **Last updated:** [November 5, 2020, 8:25pm UTC](https://discuss.elastic.co/t/compare-if-hosts-feeds-are-missing-from-last-week/254412 "2020-11-05T20:25:46Z")
We have 1000's of hosts (windows/linux/solaris/network devices) coming to ELK cluster. We wanted to understand if there the hosts/devices missed sending the data. I could think of below options Get list of hosts comin… --- ## [Force replication](https://discuss.elastic.co/t/force-replication/254429)
**Author:** [@vincent2mots](https://discuss.elastic.co/u/vincent2mots)\ **Replies:** 4\ **Last updated:** [November 5, 2020, 8:10pm UTC](https://discuss.elastic.co/t/force-replication/254429 "2020-11-05T20:10:50Z")
Hi there! I started a new fresh Elasticsearch (7.9) cluster with sample flights data. If I look up for the "number\_of\_replicas" setting of this index, I get 1. And, if I try to use the cat/shards API, I see one primary… --- ## [Index openxml structured documents with Elasticsearch](https://discuss.elastic.co/t/index-openxml-structured-documents-with-elasticsearch/254445)
**Author:** [@vhd.afr](https://discuss.elastic.co/u/vhd.afr)\ **Replies:** 0\ **Last updated:** [November 5, 2020, 5:53pm UTC](https://discuss.elastic.co/t/index-openxml-structured-documents-with-elasticsearch/254445 "2020-11-05T17:53:00Z")
We have a set of structured documents. The structure is extremely inspired by openxml data model. Briefly speaking, documents are made up of an ordered set of paragraphs, each paragraph itself has id and an ordered set o… --- ## [How to add up values from list and send only that value to elasticserach](https://discuss.elastic.co/t/how-to-add-up-values-from-list-and-send-only-that-value-to-elasticserach/254441)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 1\ **Last updated:** [November 5, 2020, 6:22pm UTC](https://discuss.elastic.co/t/how-to-add-up-values-from-list-and-send-only-that-value-to-elasticserach/254441 "2020-11-05T18:22:38Z")
Hello, I want to write logstash script that use snmpwalk to get cpu values form network devices average them and send one field to elasticsearch. I guess I can do this in ruby plugin but I have so fare only expiernce in… --- ## [Rendering several fields aggregations in one visualisation](https://discuss.elastic.co/t/rendering-several-fields-aggregations-in-one-visualisation/254066)
**Author:** [@Eugene\_Korepanov](https://discuss.elastic.co/u/Eugene_Korepanov)\ **Replies:** 3\ **Last updated:** [November 5, 2020, 5:28pm UTC](https://discuss.elastic.co/t/rendering-several-fields-aggregations-in-one-visualisation/254066 "2020-11-05T17:28:20Z")
Hello, dear Elastians and Kibanians. I'm looking for a decent way to build a table of several fields. In my data I have huge objects with multiple boolean properties: Doc1 Obj.Property1 = 1 Obj.Property2 = 0 ... Ob… --- ## [Random number of messages dropping on logstash import](https://discuss.elastic.co/t/random-number-of-messages-dropping-on-logstash-import/251658)
**Author:** [@Paul\_Shriner](https://discuss.elastic.co/u/Paul_Shriner)\ **Replies:** 16\ **Last updated:** [November 5, 2020, 5:18pm UTC](https://discuss.elastic.co/t/random-number-of-messages-dropping-on-logstash-import/251658 "2020-11-05T17:18:57Z")
I have Logstash 7.6 running on Ubuntu 20.04. I am importing a pretty simple CSV file. The data in the file is separated by commas. See below: email,send\_time,engaged,last\_touch\_utc,score,frequency,open\_count,click\_… --- ## [Context Suggester: measures to limit memory usage](https://discuss.elastic.co/t/context-suggester-measures-to-limit-memory-usage/254372)
**Author:** [@Bhavik92](https://discuss.elastic.co/u/Bhavik92)\ **Replies:** 0\ **Last updated:** [November 5, 2020, 8:23am UTC](https://discuss.elastic.co/t/context-suggester-measures-to-limit-memory-usage/254372 "2020-11-05T08:23:12Z")
We're using elasticsearch for our search use-case and have an index that serves both regular queries as well as autocompletion. For autocompletion, I've enabled completion suggester on it. However, there is growing con… --- ## [GROKPARSE Failure and after Successful debug](https://discuss.elastic.co/t/grokparse-failure-and-after-successful-debug/254324)
**Author:** [@Vinay\_Kumar2](https://discuss.elastic.co/u/Vinay_Kumar2)\ **Replies:** 2\ **Last updated:** [November 5, 2020, 4:19pm UTC](https://discuss.elastic.co/t/grokparse-failure-and-after-successful-debug/254324 "2020-11-05T16:19:10Z")
Hi, i have used https://grokdebug.herokuapp.com/ to create grok match patterns and which are worked fine. However when checking with logstash, some of fields are not extracted and getting grokparse failure error. Samp… --- ## [Imported Indexes are not showing logs](https://discuss.elastic.co/t/imported-indexes-are-not-showing-logs/254391)
**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\ **Replies:** 5\ **Last updated:** [November 5, 2020, 3:34pm UTC](https://discuss.elastic.co/t/imported-indexes-are-not-showing-logs/254391 "2020-11-05T15:34:40Z")
Hi, I tried importing an index to another elk stack and had no issues with it. The problem is that the index shows no logs on the discover tab. I think i need to do something else to import the logs but can't seem to fi… --- ## [Validating that documents conform to strict mappings](https://discuss.elastic.co/t/validating-that-documents-conform-to-strict-mappings/254421)
**Author:** [@mjuric](https://discuss.elastic.co/u/mjuric)\ **Replies:** 2\ **Last updated:** [November 5, 2020, 2:59pm UTC](https://discuss.elastic.co/t/validating-that-documents-conform-to-strict-mappings/254421 "2020-11-05T14:59:01Z")
We need to validate that documents delivered to us conform to strict mappings in ElastiSearch before they are indexed. Is there a way to use the strict mapping validation component of ElasticSearch as a library outside t… --- ## [Json template format logstash 7.6.2](https://discuss.elastic.co/t/json-template-format-logstash-7-6-2/254328)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 8:30pm UTC](https://discuss.elastic.co/t/json-template-format-logstash-7-6-2/254328 "2020-11-04T20:30:28Z")
Hi All, I am new to applying json templates. I have ELK Stack 7.6.2 My template looks like below: { "mappings": { "\_doc": { "\_all": { "enabled": true, "norms": { "enabled": fals… --- ## [Syntax changes](https://discuss.elastic.co/t/syntax-changes/254418)
**Author:** [@somethingcool](https://discuss.elastic.co/u/somethingcool)\ **Replies:** 1\ **Last updated:** [November 5, 2020, 2:31pm UTC](https://discuss.elastic.co/t/syntax-changes/254418 "2020-11-05T14:31:24Z")
Currently we are using Elastic 2.3.x and migrating to 6.8.x and noticed that one of our queries is no longer returning data. The data between the environment versions is 100% the same. We have a job that writes the same … --- ## [How to remove part of name in multiple fields with Ruby in logstash?](https://discuss.elastic.co/t/how-to-remove-part-of-name-in-multiple-fields-with-ruby-in-logstash/254263)
**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\ **Replies:** 9\ **Last updated:** [November 5, 2020, 1:57pm UTC](https://discuss.elastic.co/t/how-to-remove-part-of-name-in-multiple-fields-with-ruby-in-logstash/254263 "2020-11-05T13:57:47Z")
I have a source of metrics, which are received by logstash and sent out to Elastic later. There are multiple fields starting with "prometheus.metrics.ems". Can someone help with the ruby code or some other method to cut… --- ## [For length parameter in scripted fields its returning length of unique values in a doc](https://discuss.elastic.co/t/for-length-parameter-in-scripted-fields-its-returning-length-of-unique-values-in-a-doc/254393)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 3\ **Last updated:** [November 5, 2020, 1:38pm UTC](https://discuss.elastic.co/t/for-length-parameter-in-scripted-fields-its-returning-length-of-unique-values-in-a-doc/254393 "2020-11-05T13:38:16Z")
Hello, Length of string is 5 , but why is it returning 3 by counting only unique characters ? Same with words in a string --- ## [Cloned/Split Indexes Take Double Disk Space When Increasing Shards](https://discuss.elastic.co/t/cloned-split-indexes-take-double-disk-space-when-increasing-shards/254342)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 4\ **Last updated:** [November 5, 2020, 1:32pm UTC](https://discuss.elastic.co/t/cloned-split-indexes-take-double-disk-space-when-increasing-shards/254342 "2020-11-05T13:32:43Z")
Currently I have some large index's (100GB - 500GB) that have been allocated 5 shards. I would like to increase these to 10 - 20 shards each. If I use the Split API or Clone API it takes 1-2 minutes for the new index t… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1163) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1165)