# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1298 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1299 --- ## [Aggregating relevance \_score with nested text fields](https://discuss.elastic.co/t/aggregating-relevance-score-with-nested-text-fields/243892)
**Author:** [@zp230](https://discuss.elastic.co/u/zp230)\ **Replies:** 0\ **Last updated:** [August 5, 2020, 3:31pm UTC](https://discuss.elastic.co/t/aggregating-relevance-score-with-nested-text-fields/243892 "2020-08-05T15:31:58Z")
I am having difficulties finding documentation or discussions about how to aggregate the \_score field for nested text fields. The structure of my index includes one nested field. The structure of a single document is a l… --- ## [Version conflict on update\_by\_query](https://discuss.elastic.co/t/version-conflict-on-update-by-query/243762)
**Author:** [@redec](https://discuss.elastic.co/u/redec)\ **Replies:** 1\ **Last updated:** [August 5, 2020, 4:00pm UTC](https://discuss.elastic.co/t/version-conflict-on-update-by-query/243762 "2020-08-05T16:00:49Z")
I'm seeing some behavior that I can't explain...and all the googling I've done indicates it should not be possible. I have a single client application, issuing an update\_by\_query which updates a few thousand documents..… --- ## [Retrieve synonyms list from database](https://discuss.elastic.co/t/retrieve-synonyms-list-from-database/243897)
**Author:** [@gitterhh](https://discuss.elastic.co/u/gitterhh)\ **Replies:** 1\ **Last updated:** [August 5, 2020, 3:55pm UTC](https://discuss.elastic.co/t/retrieve-synonyms-list-from-database/243897 "2020-08-05T15:55:26Z")
Is it possible to configure Elasticsearch to retrieve synonyms list from database instead of file? --- ## [GROK pattern and Debugger](https://discuss.elastic.co/t/grok-pattern-and-debugger/242905)
**Author:** [@dmalchikov](https://discuss.elastic.co/u/dmalchikov)\ **Replies:** 2\ **Last updated:** [August 5, 2020, 3:34pm UTC](https://discuss.elastic.co/t/grok-pattern-and-debugger/242905 "2020-08-05T15:34:22Z")
Hi there! Could not find a problem and supported index I have pattern which pass test in Grok Debugger but shows "The input is not valid." in Processor field while Create pipeline Grok pattern: ^%{TIMESTAMP\_ISO8601:t… --- ## [Pipeline remove processor not removing all fields](https://discuss.elastic.co/t/pipeline-remove-processor-not-removing-all-fields/243879)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 3\ **Last updated:** [August 5, 2020, 3:16pm UTC](https://discuss.elastic.co/t/pipeline-remove-processor-not-removing-all-fields/243879 "2020-08-05T15:16:35Z")
I have an ingest pipeline to remove some fields for a reindex. However, the pipeline is not removing the last field. I have changed the order and it always leaves the last field in line. I am Version: 6.4.2 { "reindex… --- ## [Index mapping shows key as "object", Kibana Management as "string"](https://discuss.elastic.co/t/index-mapping-shows-key-as-object-kibana-management-as-string/243595)
**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\ **Replies:** 4\ **Last updated:** [August 5, 2020, 3:05pm UTC](https://discuss.elastic.co/t/index-mapping-shows-key-as-object-kibana-management-as-string/243595 "2020-08-05T15:05:49Z")
Hello all, I'm trying to understand why Kibana \> Management \> Index Patterns shows me one thing and using Dev Tools to query API shows me another. Some of our logs have the key json.user\_agent. In Kibana \> Management \>… --- ## [Logstash docker container growing](https://discuss.elastic.co/t/logstash-docker-container-growing/243886)
**Author:** [@MartiM](https://discuss.elastic.co/u/MartiM)\ **Replies:** 0\ **Last updated:** [August 5, 2020, 3:02pm UTC](https://discuss.elastic.co/t/logstash-docker-container-growing/243886 "2020-08-05T15:02:04Z")
We are having an issue with Logstash docker container . The container grows up to 1 TB in 2 or 5 days and when we explore the inside the container in the filesystem there are not folders containing near this space usage … --- ## [Application of grok pattern to the actual YAML](https://discuss.elastic.co/t/application-of-grok-pattern-to-the-actual-yaml/243877)
**Author:** [@eyts](https://discuss.elastic.co/u/eyts)\ **Replies:** 3\ **Last updated:** [August 5, 2020, 2:52pm UTC](https://discuss.elastic.co/t/application-of-grok-pattern-to-the-actual-yaml/243877 "2020-08-05T14:52:25Z")
This is related to topic https://discuss.elastic.co/t/capturing-all-messages-in-a-log/243261. I was able to parse the messages inside the log with (\[%{QS:user\_msg1},)(?:|%{QS:user\_msg2},)(?:|%{QS:user\_msg3},).....(?:|%{… --- ## [Logstash path.data](https://discuss.elastic.co/t/logstash-path-data/243844)
**Author:** [@a11an](https://discuss.elastic.co/u/a11an)\ **Replies:** 2\ **Last updated:** [August 5, 2020, 10:48am UTC](https://discuss.elastic.co/t/logstash-path-data/243844 "2020-08-05T10:48:37Z")
Hi, I am wondering what the path.data compared to path.settings. I was deploying a couple of .conf files under /etc/logstash/conf.d/ directory via cmd line and it complained that it cannot find the --path.settings and s… --- ## [ES Cluster Perf is lower than single node ES](https://discuss.elastic.co/t/es-cluster-perf-is-lower-than-single-node-es/243424)
**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\ **Replies:** 8\ **Last updated:** [August 5, 2020, 1:59pm UTC](https://discuss.elastic.co/t/es-cluster-perf-is-lower-than-single-node-es/243424 "2020-08-05T13:59:56Z")
Hi I am using ES veriosn 6.6.0 I use es for heavy load index, almost 20MBPS, ~80K rps HW deatails, each node is 88CPUc(44 core), 32GB(ES)+32GB(lucen) RAM, 5 SSDs RAID 10. each index is of size 60GB primary, total 120… --- ## [Deploying ELK three nodes cluster with Ansible](https://discuss.elastic.co/t/deploying-elk-three-nodes-cluster-with-ansible/243878)
**Author:** [@BlessingEzeama](https://discuss.elastic.co/u/BlessingEzeama)\ **Replies:** 0\ **Last updated:** [August 5, 2020, 1:54pm UTC](https://discuss.elastic.co/t/deploying-elk-three-nodes-cluster-with-ansible/243878 "2020-08-05T13:54:46Z")
I am trying to deploy ELK three node cluster with Ansible but i cannot find my way around it. I followed a guide but it was not helpful. How do i go about it please? --- ## [Cannot see my created saved\_object when creating it thru POST API](https://discuss.elastic.co/t/cannot-see-my-created-saved-object-when-creating-it-thru-post-api/243011)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 16\ **Last updated:** [August 5, 2020, 1:07pm UTC](https://discuss.elastic.co/t/cannot-see-my-created-saved-object-when-creating-it-thru-post-api/243011 "2020-08-05T13:07:39Z")
I have created a space test and I want to fill it with the saved\_object API. I create a visualization (ID:nff) with the POST endpoint ( POST https://mykibana.flightwatching.com/bigdata/s/test/api/saved\_objects/visualiza… --- ## [Unable to view Security option under Management option in Kibana](https://discuss.elastic.co/t/unable-to-view-security-option-under-management-option-in-kibana/243017)
**Author:** [@chinmoy\_padhi](https://discuss.elastic.co/u/chinmoy_padhi)\ **Replies:** 3\ **Last updated:** [August 5, 2020, 11:48am UTC](https://discuss.elastic.co/t/unable-to-view-security-option-under-management-option-in-kibana/243017 "2020-08-05T11:48:02Z")
Hi, I want to restrict user using Role Based Access Control(RBAC) I have a Kibana Basic license version on 7.3.0, when I checked the Management Option there is no Security option available. But as per https://www.elast… --- ## [How to add buttons on kibana visualization similar to dropdown in Controls](https://discuss.elastic.co/t/how-to-add-buttons-on-kibana-visualization-similar-to-dropdown-in-controls/243672)
**Author:** [@HariniGajendran](https://discuss.elastic.co/u/HariniGajendran)\ **Replies:** 3\ **Last updated:** [August 5, 2020, 11:45am UTC](https://discuss.elastic.co/t/how-to-add-buttons-on-kibana-visualization-similar-to-dropdown-in-controls/243672 "2020-08-05T11:45:37Z")
Hi, I have a dashboard with dropdown, listing the logs and upon selection it would display the dashboard based on the selection. But instead of dropdown i would want a display button clicking on which should display the… --- ## [Timezone issue in ingesting a document](https://discuss.elastic.co/t/timezone-issue-in-ingesting-a-document/243843)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 0\ **Last updated:** [August 5, 2020, 9:53am UTC](https://discuss.elastic.co/t/timezone-issue-in-ingesting-a-document/243843 "2020-08-05T09:53:30Z")
Hi All, I am ingesting documents into ELK using logstash http\_poller plugin, there is a static field i have added as "default\_date" and the value for this date field i had mentioned as "01-01-1970 00:00:00" default\_da… --- ## [Logstash Grok JSON error - mapper of different type](https://discuss.elastic.co/t/logstash-grok-json-error-mapper-of-different-type/243840)
**Author:** [@nnikolay](https://discuss.elastic.co/u/nnikolay)\ **Replies:** 3\ **Last updated:** [August 5, 2020, 11:08am UTC](https://discuss.elastic.co/t/logstash-grok-json-error-mapper-of-different-type/243840 "2020-08-05T11:08:55Z")
I have this log file: \`2020-08-05 09:11:19 INFO-flask.model-{"version": "1.2.1", "time": 0.651745080947876, "output": {...}}\` This is my logstash filter setting \`grok{ match =\> { "message… --- ## [Competitive Filebeat access on local disk](https://discuss.elastic.co/t/competitive-filebeat-access-on-local-disk/243708)
**Author:** [@LomigFR](https://discuss.elastic.co/u/LomigFR)\ **Replies:** 3\ **Last updated:** [August 5, 2020, 9:43am UTC](https://discuss.elastic.co/t/competitive-filebeat-access-on-local-disk/243708 "2020-08-05T09:43:03Z")
Hello, Following my previous posts, I'm coming to the end of my project. To finalize all this, I would have liked this time to pass the logs from 2 Nginx (located in different namespaces) to ES then Kibana (both located… --- ## [Vertical Bar - Combine 'Normal' and 'Stacked' view](https://discuss.elastic.co/t/vertical-bar-combine-normal-and-stacked-view/241137)
**Author:** [@Barabossa](https://discuss.elastic.co/u/Barabossa)\ **Replies:** 3\ **Last updated:** [August 5, 2020, 9:36am UTC](https://discuss.elastic.co/t/vertical-bar-combine-normal-and-stacked-view/241137 "2020-08-05T09:36:51Z")
Hi, I'm working for a company that has a lot of mail servers. These mailservers send mail in packages (which we call 'slots'). Each single email gets logged as a record, and has a slot value. In addition, each email re… --- ## [Plugin to modify "get" and "search" action results](https://discuss.elastic.co/t/plugin-to-modify-get-and-search-action-results/243837)
**Author:** [@zyx\_0312](https://discuss.elastic.co/u/zyx_0312)\ **Replies:** 0\ **Last updated:** [August 5, 2020, 9:33am UTC](https://discuss.elastic.co/t/plugin-to-modify-get-and-search-action-results/243837 "2020-08-05T09:33:28Z")
I want to implement a elasticsearch plugin, which could modify the get and search action results, such as modify the field's value of docs, then return the modified docs result to users. I want to know which kind of plu… --- ## [Logstash dosen't support avro date type?](https://discuss.elastic.co/t/logstash-dosent-support-avro-date-type/243836)
**Author:** [@hwi](https://discuss.elastic.co/u/hwi)\ **Replies:** 0\ **Last updated:** [August 5, 2020, 9:30am UTC](https://discuss.elastic.co/t/logstash-dosent-support-avro-date-type/243836 "2020-08-05T09:30:57Z")
I use logstash to stream data from kafka topic to elasticsearch index. (Input plugin kafka, output plugin elasticsearch) logstash version is 7.8 kafka topic schema include date type. example) name startDate type int… --- ## [Issue with strating Elastic Search on Ples Onyx with CentOS 7](https://discuss.elastic.co/t/issue-with-strating-elastic-search-on-ples-onyx-with-centos-7/243761)
**Author:** [@kootjoo](https://discuss.elastic.co/u/kootjoo)\ **Replies:** 2\ **Last updated:** [August 5, 2020, 8:43am UTC](https://discuss.elastic.co/t/issue-with-strating-elastic-search-on-ples-onyx-with-centos-7/243761 "2020-08-05T08:43:22Z")
Hi, I am struggling to get things working on my Plesk server. I have succesfully installed Elasticsearch and see this error in te log: \[2020-08-04T19:38:31,728\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[www.… --- ## [Kibana server is not ready yet 에러가 뜹니다.](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/243524)
**Author:** [@111372](https://discuss.elastic.co/u/111372)\ **Replies:** 1\ **Last updated:** [August 5, 2020, 8:39am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/243524 "2020-08-05T08:39:49Z")
설정은 아래와 같습니다. etc/elasticsearch/elasticsearch.yml cluster.name: test1 node.name: ${HOSTNAME} path.data: /var/lib/elasticsearch path.logs: /var/log/elasticsearch network.host : 0.0.0.0 http.port: 9200 cluster.init… --- ## [Why can't the mapping field be deleted](https://discuss.elastic.co/t/why-cant-the-mapping-field-be-deleted/243685)
**Author:** [@RunAsOnehhb](https://discuss.elastic.co/u/RunAsOnehhb)\ **Replies:** 3\ **Last updated:** [August 5, 2020, 7:54am UTC](https://discuss.elastic.co/t/why-cant-the-mapping-field-be-deleted/243685 "2020-08-05T07:54:25Z")
Why can't the mapping field be deleted？ --- ## [Performance problem in Percolator fetch phase classes](https://discuss.elastic.co/t/performance-problem-in-percolator-fetch-phase-classes/243748)
**Author:** [@apeteri](https://discuss.elastic.co/u/apeteri)\ **Replies:** 1\ **Last updated:** [August 5, 2020, 7:46am UTC](https://discuss.elastic.co/t/performance-problem-in-percolator-fetch-phase-classes/243748 "2020-08-05T07:46:49Z")
Hi, We are using Elasticsearch 7.8.0 and seem to be encountering a performance issue that we traced back to the method PercolatorHighlightSubFetchPhase#locatePercolatorQuery. Lucene 8.6 introduced a change to QueryVisit… --- ## [Cat shards API param "local" does not apply](https://discuss.elastic.co/t/cat-shards-api-param-local-does-not-apply/243679)
**Author:** [@CHU\_XU](https://discuss.elastic.co/u/CHU_XU)\ **Replies:** 3\ **Last updated:** [August 5, 2020, 7:44am UTC](https://discuss.elastic.co/t/cat-shards-api-param-local-does-not-apply/243679 "2020-08-05T07:44:25Z")
Hi there, I'm using the api \_cat/shards to monitor my shards' info. Since I may have a large cluster and many shards, I would like to collect the info from each node instead of collecting them by one call. As described… --- ## [Specifies the date format](https://discuss.elastic.co/t/specifies-the-date-format/243178)
**Author:** [@Champion\_Xie](https://discuss.elastic.co/u/Champion_Xie)\ **Replies:** 9\ **Last updated:** [August 5, 2020, 7:33am UTC](https://discuss.elastic.co/t/specifies-the-date-format/243178 "2020-08-05T07:33:07Z")
A timestamp that specifies the format 07/20/20 00:00:08 match =\> \["timestamp","mm/dd/yy HH:mm:ss"\] after test result grokparsefailure how to slove? --- ## [Change color of axis from grey to black](https://discuss.elastic.co/t/change-color-of-axis-from-grey-to-black/243729)
**Author:** [@MariemHAMDI](https://discuss.elastic.co/u/MariemHAMDI)\ **Replies:** 2\ **Last updated:** [August 5, 2020, 7:20am UTC](https://discuss.elastic.co/t/change-color-of-axis-from-grey-to-black/243729 "2020-08-05T07:20:34Z")
How can i change the color of vertical and horizontal axis from grey to black in a visualization . --- ## [ECK vas Elastic HELM Charts](https://discuss.elastic.co/t/eck-vas-elastic-helm-charts/243632)
**Author:** [@jinkim59](https://discuss.elastic.co/u/jinkim59)\ **Replies:** 2\ **Last updated:** [August 5, 2020, 6:43am UTC](https://discuss.elastic.co/t/eck-vas-elastic-helm-charts/243632 "2020-08-05T06:43:22Z")
We are building an SaaS application that integrates Elastic Observability with others software on Kubernetes. We currently use Elastic Stack Kubernetes HELM charts (https://github.com/elastic/helm-charts) to deploy and … --- ## [Unable to send logs to remote Logstash server. working fine in localhost](https://discuss.elastic.co/t/unable-to-send-logs-to-remote-logstash-server-working-fine-in-localhost/243628)
**Author:** [@mycloud2040](https://discuss.elastic.co/u/mycloud2040)\ **Replies:** 2\ **Last updated:** [August 5, 2020, 6:42am UTC](https://discuss.elastic.co/t/unable-to-send-logs-to-remote-logstash-server-working-fine-in-localhost/243628 "2020-08-05T06:42:23Z")
Hi, i am new to Elasticstack i configure filebeat in client machine, to send logs to logstash- it is not sending logs to logstash server. Here when I locally send logs to logstash server using filebeat its working fin… --- ## [7.0 Upgrade Assistant buggy? reindex button in Kibana does nothing](https://discuss.elastic.co/t/7-0-upgrade-assistant-buggy-reindex-button-in-kibana-does-nothing/243805)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [August 5, 2020, 6:35am UTC](https://discuss.elastic.co/t/7-0-upgrade-assistant-buggy-reindex-button-in-kibana-does-nothing/243805 "2020-08-05T06:35:53Z")
Hi there, I am on version 6.8.6 and doing my first reindex of a non system index. It is a small one (150MB) and version 5.6.11. After pushing the reindex button (I know it works in the background) nothing happens afterw… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1297) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1299)