# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1219

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1220

---

## [Archive Elasticsearch indices to Azure blob storage](https://discuss.elastic.co/t/archive-elasticsearch-indices-to-azure-blob-storage/250134)

<div class="topic-metadata">

**Author:** [@Dubru](https://discuss.elastic.co/u/Dubru)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 9:31am UTC](https://discuss.elastic.co/t/archive-elasticsearch-indices-to-azure-blob-storage/250134 "2020-09-28T09:31:14Z")

</div>

I am using ElasticSearch and Kibana 7x version, I've a requirement to archive the ElasticSearch indices which are older than 10 days, How to we configure it from kibana dashboard/how do we automate the process?

---

## [Convert Date String Into Date Format](https://discuss.elastic.co/t/convert-date-string-into-date-format/249124)

<div class="topic-metadata">

**Author:** [@wahzix](https://discuss.elastic.co/u/wahzix)\
**Replies:** 2\
**Last updated:** [September 28, 2020, 9:28am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/249124 "2020-09-28T09:28:26Z")

</div>

Hi, I want to convert a date which is like this : 2020-09-18 15:42:41.5721 To do so, I have tried to use date plugin but it seems that the number of milliseconds is limited ( according to the doc ) date { match…

---

## [Range query input type string vs numeric](https://discuss.elastic.co/t/range-query-input-type-string-vs-numeric/249211)

<div class="topic-metadata">

**Author:** [@bnarang](https://discuss.elastic.co/u/bnarang)\
**Replies:** 4\
**Last updated:** [September 28, 2020, 9:15am UTC](https://discuss.elastic.co/t/range-query-input-type-string-vs-numeric/249211 "2020-09-28T09:15:06Z")

</div>

Is there a negative impact on using a string input type vs numeric input type on the search query? For e.g. below in second example, quoted 10 { "query": { "range": { "age": { "gte": 10 } …

---

## [Async query not returning results + search context failures](https://discuss.elastic.co/t/async-query-not-returning-results-search-context-failures/248746)

<div class="topic-metadata">

**Author:** [@csewack\_asym](https://discuss.elastic.co/u/csewack_asym)\
**Replies:** 13\
**Last updated:** [September 28, 2020, 9:08am UTC](https://discuss.elastic.co/t/async-query-not-returning-results-search-context-failures/248746 "2020-09-28T09:08:15Z")

</div>

We recently added many frozen indices to our cluster. We have been having trouble querying them using the regular search api, with a frequent error that there is no search context found. We believe this is because some s…

---

## [Max Agg on lowest value inside a list property of the document](https://discuss.elastic.co/t/max-agg-on-lowest-value-inside-a-list-property-of-the-document/249875)

<div class="topic-metadata">

**Author:** [@thevu](https://discuss.elastic.co/u/thevu)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 9:07am UTC](https://discuss.elastic.co/t/max-agg-on-lowest-value-inside-a-list-property-of-the-document/249875 "2020-09-28T09:07:06Z")

</div>

I'm looking to do a Max aggregation on a value of the property under my document, the property is a list of complex object (key and value). Here's my data: \[{ "id" : "1", "listItems" : \[ { …

---

## [Field Collapsing & Pagination](https://discuss.elastic.co/t/field-collapsing-pagination/249936)

<div class="topic-metadata">

**Author:** [@Prahalad\_Rathod](https://discuss.elastic.co/u/Prahalad_Rathod)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 9:00am UTC](https://discuss.elastic.co/t/field-collapsing-pagination/249936 "2020-09-28T09:00:18Z")

</div>

I just want to know how pagination works with collapsing. I have below index data: {'departmentNo': 1, 'departmentName': 'Food', 'departmentLoc': "I1", "departmentScore": "5", "employeeid" : 1, "employeeName": "vij…

---

## [Pass Data to Elasticsearch from a Remote Server](https://discuss.elastic.co/t/pass-data-to-elasticsearch-from-a-remote-server/249945)

<div class="topic-metadata">

**Author:** [@Amantha](https://discuss.elastic.co/u/Amantha)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 8:58am UTC](https://discuss.elastic.co/t/pass-data-to-elasticsearch-from-a-remote-server/249945 "2020-09-28T08:58:10Z")

</div>

I have two PCs. Assueme that they are Server1 and Server2. Logstash is installed in Server2 and Elasticsearch is configured in Server1. I want to send filtered logstash data from Server2 to Server1. Which configuration…

---

## ["Unable to connect to Elasticsearch. Error: \[resource\_already\_exists\_exception\]" after upgrade ELK](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-error-resource-already-exists-exception-after-upgrade-elk/249998)

<div class="topic-metadata">

**Author:** [@bognad](https://discuss.elastic.co/u/bognad)\
**Replies:** 3\
**Last updated:** [September 28, 2020, 8:50am UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-error-resource-already-exists-exception-after-upgrade-elk/249998 "2020-09-28T08:50:18Z")

</div>

Hi! I am upgrade ELK from 7.2 to 7.9.1. Kibana is unable to connect to ES After upgrade kibana had two indexes: curl https://localhost:9200/\_cat/indices/\*?v&s=index health status index …

---

## [Calculating Percentage](https://discuss.elastic.co/t/calculating-percentage/250141)

<div class="topic-metadata">

**Author:** [@rcganesh](https://discuss.elastic.co/u/rcganesh)\
**Replies:** 0\
**Last updated:** [September 28, 2020, 7:56am UTC](https://discuss.elastic.co/t/calculating-percentage/250141 "2020-09-28T07:56:50Z")

</div>

Hello Experts, I am trying to find a way to calculate percentage of certain events in Elasticsearch using Logstash. Here is what I am trying to do. Injecting IIB data into Elasticsearch. Below is the sample json of th…

---

## [Heavy queuing on logstash nodes](https://discuss.elastic.co/t/heavy-queuing-on-logstash-nodes/250050)

<div class="topic-metadata">

**Author:** [@suyog1](https://discuss.elastic.co/u/suyog1)\
**Replies:** 5\
**Last updated:** [September 28, 2020, 7:20am UTC](https://discuss.elastic.co/t/heavy-queuing-on-logstash-nodes/250050 "2020-09-28T07:20:47Z")

</div>

Hello Team, I have below architecture in place. 400-800 EC2 ---\> AWS NLB ---\> 10 Logstash EC2s ---\> 14 EC2 of data node with filebeat …

---

## [ECK Operator Disable Swap and mlockall:true](https://discuss.elastic.co/t/eck-operator-disable-swap-and-mlockall-true/249645)

<div class="topic-metadata">

**Author:** [@Fikrat\_Karimli](https://discuss.elastic.co/u/Fikrat_Karimli)\
**Replies:** 6\
**Last updated:** [September 28, 2020, 7:14am UTC](https://discuss.elastic.co/t/eck-operator-disable-swap-and-mlockall-true/249645 "2020-09-28T07:14:07Z")

</div>

Hi, I want to disable swapiness and bootstrap.memory\_lock: true but node is failing. Here is my script: apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: prod spec: secureSettings: -…

---

## [Logstash beats input cant start with ssl enabled](https://discuss.elastic.co/t/logstash-beats-input-cant-start-with-ssl-enabled/249633)

<div class="topic-metadata">

**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\
**Replies:** 3\
**Last updated:** [September 28, 2020, 7:10am UTC](https://discuss.elastic.co/t/logstash-beats-input-cant-start-with-ssl-enabled/249633 "2020-09-28T07:10:50Z")

</div>

I would like to make secure connection between fielbeat and logstash. Both version 7.8.1. input { beats { port =\> 5000 ssl =\> true ssl\_certificate =\> "/ssl/instance.crt" ssl\_key =\> "/ssl/instance.key" …

---

## [Rufus scheduler error when using timestamp with time zone](https://discuss.elastic.co/t/rufus-scheduler-error-when-using-timestamp-with-time-zone/250135)

<div class="topic-metadata">

**Author:** [@PinballWizard](https://discuss.elastic.co/u/PinballWizard)\
**Replies:** 0\
**Last updated:** [September 28, 2020, 6:59am UTC](https://discuss.elastic.co/t/rufus-scheduler-error-when-using-timestamp-with-time-zone/250135 "2020-09-28T06:59:59Z")

</div>

I'm using Logstash jdbc plugin with DB2 on z/OS. Timestamp column is set to timestamp with time zone type. After initial execution of SQL statement I'm getting following error in Logstash log: logstash\[21949\]: { 2082 r…

---

## [How to search when there are 2 fields with dense vectors](https://discuss.elastic.co/t/how-to-search-when-there-are-2-fields-with-dense-vectors/248630)

<div class="topic-metadata">

**Author:** [@Chetan\_Ambi](https://discuss.elastic.co/u/Chetan_Ambi)\
**Replies:** 2\
**Last updated:** [September 28, 2020, 6:23am UTC](https://discuss.elastic.co/t/how-to-search-when-there-are-2-fields-with-dense-vectors/248630 "2020-09-28T06:23:08Z")

</div>

I am working on implementing semantic search. I was able to implement where there is only one text field for which we can create dense vector. Can anyone please suggest how to achieve when there are more than one text fi…

---

## [How to increase replicas for .kibana index](https://discuss.elastic.co/t/how-to-increase-replicas-for-kibana-index/250124)

<div class="topic-metadata">

**Author:** [@shubhamblackstratus](https://discuss.elastic.co/u/shubhamblackstratus)\
**Replies:** 7\
**Last updated:** [September 28, 2020, 5:28am UTC](https://discuss.elastic.co/t/how-to-increase-replicas-for-kibana-index/250124 "2020-09-28T05:28:48Z")

</div>

Hi Team, In my cluster, I've found that by default every new index created with 1 shard and 1 replica; So I also changed default settings with 2 primary and 2 replica successfully for every new indices, which was found …

---

## [Workload Profile](https://discuss.elastic.co/t/workload-profile/249858)

<div class="topic-metadata">

**Author:** [@cdale](https://discuss.elastic.co/u/cdale)\
**Replies:** 2\
**Last updated:** [September 28, 2020, 5:20am UTC](https://discuss.elastic.co/t/workload-profile/249858 "2020-09-28T05:20:16Z")

</div>

What are typical read/write ratio% for Elasticsearch solution for log analytics? 80% read and 20% write for Elasticsearch, Logstash, Machine Learning and Kibana? Thank you.

---

## [Metricbeat is unable to send data to elastic search(011Attempting to reconnect to backoff(elasticsearch(http://x.x.x.x:9200)) with 441 reconnect attempt(s))](https://discuss.elastic.co/t/metricbeat-is-unable-to-send-data-to-elastic-search-011attempting-to-reconnect-to-backoff-elasticsearch-http-x-x-x-x-9200-with-441-reconnect-attempt-s/250102)

<div class="topic-metadata">

**Author:** [@NiranjanMurali](https://discuss.elastic.co/u/NiranjanMurali)\
**Replies:** 10\
**Last updated:** [September 28, 2020, 4:56am UTC](https://discuss.elastic.co/t/metricbeat-is-unable-to-send-data-to-elastic-search-011attempting-to-reconnect-to-backoff-elasticsearch-http-x-x-x-x-9200-with-441-reconnect-attempt-s/250102 "2020-09-28T04:56:25Z")

</div>

I have recently updated ES, Kibana, Logstash, All the services are running but the data is not getting collected. and UI is also loading. Please help me to resolve this. Kibana Log: {"type":"log","@timestamp":"2020-09-…

---

## [Safe way to downgrade 7.8.1 index to 7.7.1](https://discuss.elastic.co/t/safe-way-to-downgrade-7-8-1-index-to-7-7-1/250117)

<div class="topic-metadata">

**Author:** [@chakradarraju](https://discuss.elastic.co/u/chakradarraju)\
**Replies:** 2\
**Last updated:** [September 28, 2020, 4:56am UTC](https://discuss.elastic.co/t/safe-way-to-downgrade-7-8-1-index-to-7-7-1/250117 "2020-09-28T04:56:07Z")

</div>

I have ES installed using helm in kubernetes v7.8.1, we're migrating to EKS and latest supported version in Amazon Elasticsearch service is 7.7. Trying to restore 7.8.1 snapshot in 7.7 is failing and I tried to delete a…

---

## [Elastic search gives exception '"too\_many\_buckets\_exception" not able to catch it in high level rest client](https://discuss.elastic.co/t/elastic-search-gives-exception-too-many-buckets-exception-not-able-to-catch-it-in-high-level-rest-client/250120)

<div class="topic-metadata">

**Author:** [@charvi23](https://discuss.elastic.co/u/charvi23)\
**Replies:** 0\
**Last updated:** [September 28, 2020, 4:29am UTC](https://discuss.elastic.co/t/elastic-search-gives-exception-too-many-buckets-exception-not-able-to-catch-it-in-high-level-rest-client/250120 "2020-09-28T04:29:13Z")

</div>

I am trying to create a table using elastic search, but I get the following exception at times when the count of my bucket increases the limit. I am fine to have this exception as long I am able to send it to user that t…

---

## [At least one primary shard for the index \[.security-7\] is unavailable](https://discuss.elastic.co/t/at-least-one-primary-shard-for-the-index-security-7-is-unavailable/249508)

<div class="topic-metadata">

**Author:** [@naveenj](https://discuss.elastic.co/u/naveenj)\
**Replies:** 4\
**Last updated:** [September 28, 2020, 4:28am UTC](https://discuss.elastic.co/t/at-least-one-primary-shard-for-the-index-security-7-is-unavailable/249508 "2020-09-28T04:28:25Z")

</div>

Getting bellow error but elastic and kibana both working fine. Let me know the issue? org.elasticsearch.action.UnavailableShardsException: at least one primary shard for the index \[.security-7\] is unavailable at org.el…

---

## [Authen to elastic with ldap config on which nodes?](https://discuss.elastic.co/t/authen-to-elastic-with-ldap-config-on-which-nodes/249894)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 3\
**Last updated:** [September 28, 2020, 3:55am UTC](https://discuss.elastic.co/t/authen-to-elastic-with-ldap-config-on-which-nodes/249894 "2020-09-28T03:55:53Z")

</div>

Hi all I have been testing for the feature to authen mine elastic server with ldap with one of my testing server, now i want to deploy it on the whole cluster, so which nodes do i have to config to get the feature worki…

---

## [Unable to install and start the elasticsearch in RHEL 7 due to polkit error](https://discuss.elastic.co/t/unable-to-install-and-start-the-elasticsearch-in-rhel-7-due-to-polkit-error/249847)

<div class="topic-metadata">

**Author:** [@aknraj](https://discuss.elastic.co/u/aknraj)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 3:51am UTC](https://discuss.elastic.co/t/unable-to-install-and-start-the-elasticsearch-in-rhel-7-due-to-polkit-error/249847 "2020-09-28T03:51:15Z")

</div>

I am unable to start hte elasticsearch after the installation due to the below error. I have tried multiple options as recommended in other topics like reinstalling, enusing right java\_home, giving full permissions, but …

---

## [Elasticsearch cluster and 2 servers went down](https://discuss.elastic.co/t/elasticsearch-cluster-and-2-servers-went-down/249898)

<div class="topic-metadata">

**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 3:46am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-and-2-servers-went-down/249898 "2020-09-28T03:46:06Z")

</div>

Hi Team, I have 6 server cluster with 5 data node and 1 coordinating node , 2 of the server went completely down because of the heavy load. On one server even telnet is not working on 22 port and on the other sever whe…

---

## [How to increase disk size for Elastic search](https://discuss.elastic.co/t/how-to-increase-disk-size-for-elastic-search/249925)

<div class="topic-metadata">

**Author:** [@pnamburi](https://discuss.elastic.co/u/pnamburi)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 3:44am UTC](https://discuss.elastic.co/t/how-to-increase-disk-size-for-elastic-search/249925 "2020-09-28T03:44:25Z")

</div>

I just executed the below command which returned the elastic search disk space GET \_cat/nodes?v&h=id,diskTotal,diskUsed,diskAvail,diskUsedPercent Output: id diskTotal diskUsed diskAvail diskUsedPercent qzxs 9.6gb 8.7…

---

## [If i try to Add search search.max\_buckets then getting below error CURL -XGET "http://localhost:9200/\_cluster/settings {"persistent":{},"transient":{"search.max\_buckets": 200000}} curl: (3) \[globbing\] nested brace in column 53](https://discuss.elastic.co/t/if-i-try-to-add-search-search-max-buckets-then-getting-below-error-curl-xget-http-localhost-9200-cluster-settings-persistent-transient-search-max-buckets-200000-curl-3-globbing-nested-brace-in-column-53/250004)

<div class="topic-metadata">

**Author:** [@Suparna\_Shankar](https://discuss.elastic.co/u/Suparna_Shankar)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 3:38am UTC](https://discuss.elastic.co/t/if-i-try-to-add-search-search-max-buckets-then-getting-below-error-curl-xget-http-localhost-9200-cluster-settings-persistent-transient-search-max-buckets-200000-curl-3-globbing-nested-brace-in-column-53/250004 "2020-09-28T03:38:06Z")

</div>

if i try to Add search search.max\_buckets then getting below error CURL -XGET "http://localhost:9200/\_cluster/settings {"persistent":{},"transient":{"search.max\_buckets": 200000}} curl: (3) \[globbing\] nested brace in col…

---

## [Failed to parse the field](https://discuss.elastic.co/t/failed-to-parse-the-field/250026)

<div class="topic-metadata">

**Author:** [@Ramalakshmi](https://discuss.elastic.co/u/Ramalakshmi)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 3:35am UTC](https://discuss.elastic.co/t/failed-to-parse-the-field/250026 "2020-09-28T03:35:55Z")

</div>

Hi I am sending logs to kibana using filebeat ,and I am facing below error while sending logs .Some of the events doesn't have host in raw data facing error for that events. \[2020-09-24T09:20:40,591\]\[WARN \]\[logstash.ou…

---

## [Get histogram of documents per hour per term](https://discuss.elastic.co/t/get-histogram-of-documents-per-hour-per-term/250106)

<div class="topic-metadata">

**Author:** [@pocorschi](https://discuss.elastic.co/u/pocorschi)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 3:28am UTC](https://discuss.elastic.co/t/get-histogram-of-documents-per-hour-per-term/250106 "2020-09-28T03:28:40Z")

</div>

Hi everybody. Been looking around for a while trying to come up with an answer to this but no luck so far. My documents are simple. One timestamp and one device\_id. Given a start and end date, I would want to get a hist…

---

## [Not able to start elasticsearch](https://discuss.elastic.co/t/not-able-to-start-elasticsearch/250018)

<div class="topic-metadata">

**Author:** [@pradnya\_05](https://discuss.elastic.co/u/pradnya_05)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 3:23am UTC](https://discuss.elastic.co/t/not-able-to-start-elasticsearch/250018 "2020-09-28T03:23:44Z")

</div>

I have just started reading about elasticsearch concept so I am new in this concept. I have downloaded zip file of elasticseach as I am using windows. But after running batch file from cmd with admin access, getting exce…

---

## [How to test malware protection?](https://discuss.elastic.co/t/how-to-test-malware-protection/249850)

<div class="topic-metadata">

**Author:** [@0xDECAFBAD](https://discuss.elastic.co/u/0xDECAFBAD)\
**Replies:** 2\
**Last updated:** [September 28, 2020, 2:20am UTC](https://discuss.elastic.co/t/how-to-test-malware-protection/249850 "2020-09-28T02:20:01Z")

</div>

From what I read it sounds like Endgame malware protection is definition-less? Is that correct? Is it based solely on behavioral analysis? I'm testing out Elastic Security, just pushed my first Elastic Endpoint deploymen…

---

## [Licensing DEV and CONS Nodes](https://discuss.elastic.co/t/licensing-dev-and-cons-nodes/249999)

<div class="topic-metadata">

**Author:** [@northwine](https://discuss.elastic.co/u/northwine)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 1:30am UTC](https://discuss.elastic.co/t/licensing-dev-and-cons-nodes/249999 "2020-09-28T01:30:29Z")

</div>

Hi, i have found a note in this post regarding the licensing of dev environments (in addition to allready licensed prod nodes). Where can I find a reference that there is no need for additional licenses for DEV / CONS n…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1218)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1220)
