# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1189 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1190 --- ## [GET /\_cluster/settings empty](https://discuss.elastic.co/t/get-cluster-settings-empty/252471)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 5:42am UTC](https://discuss.elastic.co/t/get-cluster-settings-empty/252471 "2020-10-19T05:42:40Z")
Hi there, I have a 7.5.1 production cluster of 3 nodes running. I am wondering: doing this GET /\_cluster/settings empty just gives me: I would expect more. Background: I have reached on all 3 nodes the disk waterma… --- ## [Kibana not giving results when checking using \*, Also need help in Scripted field](https://discuss.elastic.co/t/kibana-not-giving-results-when-checking-using-also-need-help-in-scripted-field/252455)
**Author:** [@naveen\_wilson](https://discuss.elastic.co/u/naveen_wilson)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 5:22am UTC](https://discuss.elastic.co/t/kibana-not-giving-results-when-checking-using-also-need-help-in-scripted-field/252455 "2020-10-19T05:22:47Z")
Hi All, I want to search for a sentence in Kibana. Please see below an Example. Actual Log : Product 134563 is blocked in SAP When i search with "Product \* is blocked in SAP" in Kibana, Its not showing any result. I … --- ## [Restarting a cluster node](https://discuss.elastic.co/t/restarting-a-cluster-node/252468)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 4:30am UTC](https://discuss.elastic.co/t/restarting-a-cluster-node/252468 "2020-10-19T04:30:12Z")
Update with info I should have included! ES version 6.8.12. Three nodes in the cluster running on Linux. Two nodes have SSDs and one has rotating disks -- this was added for resilience -- all api calls go to the two w… --- ## [How to query - sort multiple nested fields in elasticsearch](https://discuss.elastic.co/t/how-to-query-sort-multiple-nested-fields-in-elasticsearch/252470)
**Author:** [@unnikr](https://discuss.elastic.co/u/unnikr)\ **Replies:** 0\ **Last updated:** [October 19, 2020, 4:18am UTC](https://discuss.elastic.co/t/how-to-query-sort-multiple-nested-fields-in-elasticsearch/252470 "2020-10-19T04:18:21Z")
I required multiple sorting in nested fields. I tried below code but it's not working. how can I do a multiple sorting in nested fields? data is stored like this. indent preformatted text by 4 spaces\[ { "\_index": "tes… --- ## [Is my systemctl restart logstash not working?](https://discuss.elastic.co/t/is-my-systemctl-restart-logstash-not-working/252464)
**Author:** [@yulaika](https://discuss.elastic.co/u/yulaika)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 3:51am UTC](https://discuss.elastic.co/t/is-my-systemctl-restart-logstash-not-working/252464 "2020-10-19T03:51:22Z")
the messages stopped halfway. it’s not even completed. when i systemctl restart logstash, it didn’t even get restarted for some reason. --- ## [Using Leaflet with Elasticsearch](https://discuss.elastic.co/t/using-leaflet-with-elasticsearch/252433)
**Author:** [@morescratch](https://discuss.elastic.co/u/morescratch)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 1:20am UTC](https://discuss.elastic.co/t/using-leaflet-with-elasticsearch/252433 "2020-10-19T01:20:22Z")
Hi all, I’ve been looking for examples on how to use Elasticsearch as a data source for a Leaflet map. I understand that Kibana uses leaflet so I am hoping there some code snippets out there that I can reuse. Anyone know… --- ## [Launch logstash conf files automatically without "logstash -f" command](https://discuss.elastic.co/t/launch-logstash-conf-files-automatically-without-logstash-f-command/252462)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 0\ **Last updated:** [October 19, 2020, 12:03am UTC](https://discuss.elastic.co/t/launch-logstash-conf-files-automatically-without-logstash-f-command/252462 "2020-10-19T00:03:47Z")
hello my friends, I have .conf files in my directory, and I have to use the logtsash -f command to start reading, is it possible to start them automatically without using the command and also at OS boot thank you --- ## [Elasticsearch-to-csv made easy with Python](https://discuss.elastic.co/t/elasticsearch-to-csv-made-easy-with-python/252461)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 0\ **Last updated:** [October 18, 2020, 10:38pm UTC](https://discuss.elastic.co/t/elasticsearch-to-csv-made-easy-with-python/252461 "2020-10-18T22:38:22Z")
Hi guys! This time I'm posting here not to ask for help but advice. I've developed a tool to make extremely easy data export from Elasticsearch to a CSV file, both raw and in a aggregated format. You can find much mor… --- ## [Metricbeat mapper error in 7.9.2](https://discuss.elastic.co/t/metricbeat-mapper-error-in-7-9-2/252428)
**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\ **Replies:** 2\ **Last updated:** [October 18, 2020, 9:58pm UTC](https://discuss.elastic.co/t/metricbeat-mapper-error-in-7-9-2/252428 "2020-10-18T21:58:21Z")
I have a metricbeat pipeline that works fine sending data to my on premis cluster but getting this error sending to ES cloud: "mapper \[index\_recovery.shards.index.size.reused\_in\_bytes\] cannot be changed from type \[long\]… --- ## [Elastic Community and Ecosystem - Elastic Training](https://discuss.elastic.co/t/elastic-community-and-ecosystem-elastic-training/252459)
**Author:** [@imaneg](https://discuss.elastic.co/u/imaneg)\ **Replies:** 4\ **Last updated:** [October 18, 2020, 8:18pm UTC](https://discuss.elastic.co/t/elastic-community-and-ecosystem-elastic-training/252459 "2020-10-18T20:18:52Z")
Hi All, I am preparing for the exam and I am wondering about the answer of this question: Secure a cluster using Elasticsearch Security Would the configurations proposed in this tutorial be sufficient? Or need I to c… --- ## [Documentation terminology](https://discuss.elastic.co/t/documentation-terminology/252385)
**Author:** [@Jonathan\_Ambriz](https://discuss.elastic.co/u/Jonathan_Ambriz)\ **Replies:** 2\ **Last updated:** [October 18, 2020, 6:32pm UTC](https://discuss.elastic.co/t/documentation-terminology/252385 "2020-10-18T18:32:39Z")
How do I lookup parameters in elastic documentation? Take the following code for example: GET logs\_server\*/\_search { "size": 0, "aggs": { "status\_code\_buckets": { "terms": { "field": "status\_code" … --- ## [Logstash grep and grok](https://discuss.elastic.co/t/logstash-grep-and-grok/252441)
**Author:** [@tarunmendon](https://discuss.elastic.co/u/tarunmendon)\ **Replies:** 3\ **Last updated:** [October 18, 2020, 3:16pm UTC](https://discuss.elastic.co/t/logstash-grep-and-grok/252441 "2020-10-18T15:16:24Z")
I am new to Elasticstack. I am trying to implement a logstash pipeline in which the a file would be processed and it would filter(grep) and output if the line of file contains following keyword - java.lang.Exception - … --- ## [ElasticSearch: Mapping not applied to AWS ELK](https://discuss.elastic.co/t/elasticsearch-mapping-not-applied-to-aws-elk/252326)
**Author:** [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\ **Replies:** 12\ **Last updated:** [October 18, 2020, 5:38am UTC](https://discuss.elastic.co/t/elasticsearch-mapping-not-applied-to-aws-elk/252326 "2020-10-18T05:38:00Z")
While applying below mapping to my local ElasticSearch 7.4.1 private static void addIndexMapping(RestHighLevelClient client, String indexName) throws IOException { PutMappingRequest request = new PutMappingReque… --- ## [Setting bind and publish IPs](https://discuss.elastic.co/t/setting-bind-and-publish-ips/252437)
**Author:** [@PeterC](https://discuss.elastic.co/u/PeterC)\ **Replies:** 0\ **Last updated:** [October 17, 2020, 11:07pm UTC](https://discuss.elastic.co/t/setting-bind-and-publish-ips/252437 "2020-10-17T23:07:58Z")
Hi There.. I know this is covered elsewhere... but I still seem to be having issues. Elasticsearch version 7.9.2 I have a cluster.. with 2 ,masters (I know.. its development), and 2 data nodes. All good. Set up to use … --- ## [Not able to setup enterprise search 7.9.0](https://discuss.elastic.co/t/not-able-to-setup-enterprise-search-7-9-0/251695)
**Author:** [@Harshil\_Narielwala](https://discuss.elastic.co/u/Harshil_Narielwala)\ **Replies:** 3\ **Last updated:** [October 17, 2020, 4:09pm UTC](https://discuss.elastic.co/t/not-able-to-setup-enterprise-search-7-9-0/251695 "2020-10-17T16:09:16Z")
Error: Certificate for \<...\> doesn't match any of the subject alternative names: \[\*.aaaaaaaa.com, aaaaaaaa.com\] at /u01/ELK/ELK7.9/enterprise-search-7.9.0/lib/war/gems/gems/manticore-0.6.4-java/lib/faraday/adapter/mantic… --- ## [Elastic SQL: How to get length of a field?](https://discuss.elastic.co/t/elastic-sql-how-to-get-length-of-a-field/252417)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 5\ **Last updated:** [October 17, 2020, 4:06pm UTC](https://discuss.elastic.co/t/elastic-sql-how-to-get-length-of-a-field/252417 "2020-10-17T16:06:27Z")
SQL query fails when I do a String function The original data is SELECT "message" FROM ".kibana-event-log-7.9.1-000001" message ----------------- eventLog starting eventLog starting When I do a length POS… --- ## [Rollover error](https://discuss.elastic.co/t/rollover-error/252278)
**Author:** [@venku](https://discuss.elastic.co/u/venku)\ **Replies:** 10\ **Last updated:** [October 17, 2020, 2:28pm UTC](https://discuss.elastic.co/t/rollover-error/252278 "2020-10-17T14:28:11Z")
I am totally lost on how Rollover works. I keep ending up with an error. I deleted my indexes and started fresh but still the same error everytime. I am having following error and could not figure why this is happening.… --- ## [Unable remote debug my plugin installed in Elasticsearch in remote VM](https://discuss.elastic.co/t/unable-remote-debug-my-plugin-installed-in-elasticsearch-in-remote-vm/252411)
**Author:** [@ccnoufal](https://discuss.elastic.co/u/ccnoufal)\ **Replies:** 1\ **Last updated:** [October 17, 2020, 10:43am UTC](https://discuss.elastic.co/t/unable-remote-debug-my-plugin-installed-in-elasticsearch-in-remote-vm/252411 "2020-10-17T10:43:50Z")
I unable remote debug my plugin installed in Elasticsearch in remote VM in eclipse I am getting following error message in popup I have added following line in jvm.options file. -agentlib:jdwp=transport=dt\_socket,se… --- ## [EQL to query DSL: how to Convert EQL to SQL or DSL?](https://discuss.elastic.co/t/eql-to-query-dsl-how-to-convert-eql-to-sql-or-dsl/252415)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 0\ **Last updated:** [October 17, 2020, 10:05am UTC](https://discuss.elastic.co/t/eql-to-query-dsl-how-to-convert-eql-to-sql-or-dsl/252415 "2020-10-17T10:05:15Z")
hi in similar lines of question "KQL to DSL" any libraries/options to convert EQL used for siem into Elastic query DSL? Looking for something like the SQL Translate api equivalent for EQL --- ## [Precision-Recall plot](https://discuss.elastic.co/t/precision-recall-plot/251232)
**Author:** [@Eugene\_Dobrovolskyi](https://discuss.elastic.co/u/Eugene_Dobrovolskyi)\ **Replies:** 2\ **Last updated:** [October 17, 2020, 8:21am UTC](https://discuss.elastic.co/t/precision-recall-plot/251232 "2020-10-17T08:21:58Z")
Hi all, I would like to build a Precision-Recall plot (for detection data of machine learning domain ). I have the next data in my ElasticSearch index: detection result ("true positive", "true negative", "false positi… --- ## [Aggregation with OR filter](https://discuss.elastic.co/t/aggregation-with-or-filter/252390)
**Author:** [@alex-t0](https://discuss.elastic.co/u/alex-t0)\ **Replies:** 1\ **Last updated:** [October 17, 2020, 8:14am UTC](https://discuss.elastic.co/t/aggregation-with-or-filter/252390 "2020-10-17T08:14:01Z")
I have an index of jBPM usertasks. Each usertask has id, actualOwner and actualOwner.keyword, potentialOwners and potentialOwners.keyword, and processId fields. I need this aggregation: count of usertasks per process fo… --- ## [Elasticsearch Service Keeps shutting down](https://discuss.elastic.co/t/elasticsearch-service-keeps-shutting-down/252398)
**Author:** [@Jason\_Crews](https://discuss.elastic.co/u/Jason_Crews)\ **Replies:** 1\ **Last updated:** [October 17, 2020, 7:41am UTC](https://discuss.elastic.co/t/elasticsearch-service-keeps-shutting-down/252398 "2020-10-17T07:41:05Z")
When it's running Curl gives me { "name" : "llcjg9h", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "dIg2d9-LRt-DIRP1\_P6MPg", "version" : { "number" : "6.8.12", "build\_flavor… --- ## [Can I store the json without creating a mapping](https://discuss.elastic.co/t/can-i-store-the-json-without-creating-a-mapping/251746)
**Author:** [@pkwenda](https://discuss.elastic.co/u/pkwenda)\ **Replies:** 1\ **Last updated:** [October 17, 2020, 1:16am UTC](https://discuss.elastic.co/t/can-i-store-the-json-without-creating-a-mapping/251746 "2020-10-17T01:16:54Z")
now , I save json use nested type , but create many mapping , I'm not going to use the json data for searching, is there a way to store the json without creating a mapping? The json I'm depositing is changing, so it's c… --- ## [Commercial Elastic: Powerful 3-nodes cluster vs weak 30-nodes cluster](https://discuss.elastic.co/t/commercial-elastic-powerful-3-nodes-cluster-vs-weak-30-nodes-cluster/252244)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 6\ **Last updated:** [October 17, 2020, 12:47am UTC](https://discuss.elastic.co/t/commercial-elastic-powerful-3-nodes-cluster-vs-weak-30-nodes-cluster/252244 "2020-10-17T00:47:47Z")
I am wondering what is the difference between the cost of a powerful 3-nodes cluster (let's say, 320gb of RAM, tons of CPUs), vs a 30-nodes cluster but each node as 2gb RAM and 2 CPUs. It seems that the 3-nodes cluster … --- ## [Kibana for arm64](https://discuss.elastic.co/t/kibana-for-arm64/252391)
**Author:** [@elaair](https://discuss.elastic.co/u/elaair)\ **Replies:** 2\ **Last updated:** [October 16, 2020, 10:59pm UTC](https://discuss.elastic.co/t/kibana-for-arm64/252391 "2020-10-16T22:59:09Z")
I just installed Elasticsearch on a pi4 and then I found that Kibana won't install because there isn't a package for arm64. Whats up with that? --- ## [Space Restriction - Seeing Other Spaces](https://discuss.elastic.co/t/space-restriction-seeing-other-spaces/252376)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 5\ **Last updated:** [October 16, 2020, 10:16pm UTC](https://discuss.elastic.co/t/space-restriction-seeing-other-spaces/252376 "2020-10-16T22:16:27Z")
Hi, I am trying to restrict users from seeing each others spaces when they log in via their own account. When They log in, they should only see their own account. When I look at the restriction features I see; Discove… --- ## [Making Logstash and/or Filebeats process one entry at a time](https://discuss.elastic.co/t/making-logstash-and-or-filebeats-process-one-entry-at-a-time/251822)
**Author:** [@jonVR](https://discuss.elastic.co/u/jonVR)\ **Replies:** 9\ **Last updated:** [October 16, 2020, 10:04pm UTC](https://discuss.elastic.co/t/making-logstash-and-or-filebeats-process-one-entry-at-a-time/251822 "2020-10-16T22:04:18Z")
I currently have a setup where Filebeats is tracking a folder (in which there is only 1 file), and sends entries to Logstash. In my logstash.yml, I have pipeline.workers set to 1. Here is a snippet of my logstash.conf, f… --- ## [TSVB - Series Agg - remove or don't display 0 value](https://discuss.elastic.co/t/tsvb-series-agg-remove-or-dont-display-0-value/252329)
**Author:** [@Nibeckj](https://discuss.elastic.co/u/Nibeckj)\ **Replies:** 1\ **Last updated:** [October 16, 2020, 9:58pm UTC](https://discuss.elastic.co/t/tsvb-series-agg-remove-or-dont-display-0-value/252329 "2020-10-16T21:58:23Z")
Hello, I have TSVB time series graf. I have series Agg with filter of range day and range hours by scriplet there are no value for saturday and sunday. All are OK expected, I view some zero value in series agg be… --- ## [Have multiple search hits on one line](https://discuss.elastic.co/t/have-multiple-search-hits-on-one-line/252394)
**Author:** [@Mike\_Benz](https://discuss.elastic.co/u/Mike_Benz)\ **Replies:** 0\ **Last updated:** [October 16, 2020, 9:04pm UTC](https://discuss.elastic.co/t/have-multiple-search-hits-on-one-line/252394 "2020-10-16T21:04:39Z")
Hello! Let me start with: I am VERY new to Elastic Search and Kabana. I have multiple indexes imported into ES and one Index Pattern between them all using a wild card so i can grab multiple fields across all indexes t… --- ## [Ошибка "obtaining shard lock timed out after 5000ms"](https://discuss.elastic.co/t/obtaining-shard-lock-timed-out-after-5000ms/252175)
**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\ **Replies:** 3\ **Last updated:** [October 16, 2020, 7:50pm UTC](https://discuss.elastic.co/t/obtaining-shard-lock-timed-out-after-5000ms/252175 "2020-10-16T19:50:00Z")
Добрый день! Сегодня обнаружил кластер в состоянии "yellow", один шард у системного .kibana\_task\_manager\_1 индекса был Unassigned. посмотрев через GET /\_cluster/allocation/explain обнаружил ошибку: obtaining shard l… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1188) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1190)