# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1419 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1420 --- ## [Possible 7.7.0 bug with searching idle shards](https://discuss.elastic.co/t/possible-7-7-0-bug-with-searching-idle-shards/233168)
**Author:** [@Andy\_Wick](https://discuss.elastic.co/u/Andy_Wick)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 12:02pm UTC](https://discuss.elastic.co/t/possible-7-7-0-bug-with-searching-idle-shards/233168 "2020-05-29T12:02:32Z")
I'm having an issue with 7.7.0 where when I search an index that does NOT have refresh\_interval set, I don't get all the results back I'm expecting. If I do the query over and over by the 6th time it will work and have … --- ## [Using script\_score with Suggests](https://discuss.elastic.co/t/using-script-score-with-suggests/234209)
**Author:** [@chapelle](https://discuss.elastic.co/u/chapelle)\ **Replies:** 3\ **Last updated:** [May 29, 2020, 12:01pm UTC](https://discuss.elastic.co/t/using-script-score-with-suggests/234209 "2020-05-29T12:01:12Z")
Hello, I'm working on an autocomplete input similar to what twitter uses. I need to have the matching users I follow at the top of the list (see yellow highlight on the screenshot) For now I have a query like this : … --- ## [Parsing multiline log: correct output in Logstash and error in kibana](https://discuss.elastic.co/t/parsing-multiline-log-correct-output-in-logstash-and-error-in-kibana/234411)
**Author:** [@guas5](https://discuss.elastic.co/u/guas5)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 11:28am UTC](https://discuss.elastic.co/t/parsing-multiline-log-correct-output-in-logstash-and-error-in-kibana/234411 "2020-05-29T11:28:07Z")
Hi everyone, would be really gratefull for any ideas how to solve the following issue. I have defined a regex pattern for a multiline log and checked its output in Logstash, everything looks correct. But once I send dat… --- ## [How to change time zone in Kibana for the Index date field](https://discuss.elastic.co/t/how-to-change-time-zone-in-kibana-for-the-index-date-field/234770)
**Author:** [@manjunathpb](https://discuss.elastic.co/u/manjunathpb)\ **Replies:** 4\ **Last updated:** [May 29, 2020, 11:06am UTC](https://discuss.elastic.co/t/how-to-change-time-zone-in-kibana-for-the-index-date-field/234770 "2020-05-29T11:06:53Z")
We have 3 Date fields which is getting converted to UTC time zone by default, I would like to change the UTC time Zone to America/New\_York timezone. Could you please let me know how to change it. Awaiting your reply, T… --- ## [Kibana SIEM app performance](https://discuss.elastic.co/t/kibana-siem-app-performance/234358)
**Author:** [@j91321](https://discuss.elastic.co/u/j91321)\ **Replies:** 10\ **Last updated:** [May 29, 2020, 11:01am UTC](https://discuss.elastic.co/t/kibana-siem-app-performance/234358 "2020-05-29T11:01:43Z")
Hello, we are experiencing some performance issues in Kibana SIEM app especially loading the Detections tab. Making it very annoying to use. The queries report times ~8ms (Signal count) ~33ms (Inspect signals). But the… --- ## [How to intercept http requests using a plugin](https://discuss.elastic.co/t/how-to-intercept-http-requests-using-a-plugin/234907)
**Author:** [@rahulkarajgikar](https://discuss.elastic.co/u/rahulkarajgikar)\ **Replies:** 0\ **Last updated:** [May 29, 2020, 11:05am UTC](https://discuss.elastic.co/t/how-to-intercept-http-requests-using-a-plugin/234907 "2020-05-29T11:05:08Z")
Hi, I want to intercept all http requests, to allow some endpoints and disallow other endpoints using a plugin. This plugin should also be able to modify the response being sent back to the users. How could I implement … --- ## [Match query with synonym token filter where synonym available on first & second paragraph only](https://discuss.elastic.co/t/match-query-with-synonym-token-filter-where-synonym-available-on-first-second-paragraph-only/234724)
**Author:** [@Yulius\_Ardian\_Febria](https://discuss.elastic.co/u/Yulius_Ardian_Febria)\ **Replies:** 2\ **Last updated:** [May 29, 2020, 10:57am UTC](https://discuss.elastic.co/t/match-query-with-synonym-token-filter-where-synonym-available-on-first-second-paragraph-only/234724 "2020-05-29T10:57:47Z")
Hi everyone ! I'm new on elasticsearch things... I have an index with settings like this : { "settings": { "index": { "analysis": { "analyzer": { "article\_ana… --- ## [How to change a field type in elasticsearch/kibana index pattern](https://discuss.elastic.co/t/how-to-change-a-field-type-in-elasticsearch-kibana-index-pattern/234896)
**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 10:40am UTC](https://discuss.elastic.co/t/how-to-change-a-field-type-in-elasticsearch-kibana-index-pattern/234896 "2020-05-29T10:40:40Z")
Hi, How to change a field type in elasticsearch/kibana index pattern/ management --- ## [Ascending order on x-axis showing the highest bucket values](https://discuss.elastic.co/t/ascending-order-on-x-axis-showing-the-highest-bucket-values/234498)
**Author:** [@loop](https://discuss.elastic.co/u/loop)\ **Replies:** 4\ **Last updated:** [May 29, 2020, 10:27am UTC](https://discuss.elastic.co/t/ascending-order-on-x-axis-showing-the-highest-bucket-values/234498 "2020-05-29T10:27:04Z")
Hi, let's say I have data like this: POST a/\_bulk {"index":{"\_id" : "1"}} {"x": 1, "y": 1} {"index":{"\_id" : "2"}} {"x": 2, "y":2 } {"index":{"\_id" : "3"}} {"x": 3, "y": 3} {"index":{"\_id" : "4"}} {"x": 4, "y":4} Now … --- ## [Are there plans to support “accurate distinct”？](https://discuss.elastic.co/t/are-there-plans-to-support-accurate-distinct/232808)
**Author:** [@ITzhangqiang](https://discuss.elastic.co/u/ITzhangqiang)\ **Replies:** 13\ **Last updated:** [May 29, 2020, 10:20am UTC](https://discuss.elastic.co/t/are-there-plans-to-support-accurate-distinct/232808 "2020-05-29T10:20:09Z")
In the field of big data，many olap engine already support “accurate distinct” ,such as kylin，clickhouse。Those engine can calculate Ultra High Cardinality(billion level ) in less than a second 。Dose elasticsearch has any… --- ## [ILM policy not working as expected](https://discuss.elastic.co/t/ilm-policy-not-working-as-expected/233504)
**Author:** [@reddy1262](https://discuss.elastic.co/u/reddy1262)\ **Replies:** 3\ **Last updated:** [May 29, 2020, 10:08am UTC](https://discuss.elastic.co/t/ilm-policy-not-working-as-expected/233504 "2020-05-29T10:08:26Z")
Hi Team, We have implemented ILM policies to cleanup indexes automatically after 14 days. But I see some old indexes still present with less documents count and Storage size whose min age is passed more than 14 days. Be… --- ## [Date query (problem with format)](https://discuss.elastic.co/t/date-query-problem-with-format/234884)
**Author:** [@mimimike](https://discuss.elastic.co/u/mimimike)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 9:14am UTC](https://discuss.elastic.co/t/date-query-problem-with-format/234884 "2020-05-29T09:14:09Z")
Hi, I have an index with a date field with dd/mm/yyyy format and I would like to search the documents of a specific day but maybe the format could not be the same as the index. How can I pass the format for parse the da… --- ## [Elasticsearch index size increased but data source is still the same in ES 7.4](https://discuss.elastic.co/t/elasticsearch-index-size-increased-but-data-source-is-still-the-same-in-es-7-4/234817)
**Author:** [@Dawid\_Macura](https://discuss.elastic.co/u/Dawid_Macura)\ **Replies:** 6\ **Last updated:** [May 29, 2020, 8:52am UTC](https://discuss.elastic.co/t/elasticsearch-index-size-increased-but-data-source-is-still-the-same-in-es-7-4/234817 "2020-05-29T08:52:09Z")
Hi, I have a problem on my es instance, I am creating a new index every day with count of documents about 5000000. At the begging my index has size 4.5GB now it has 15GB. Do you have any suggestions what is a cause of th… --- ## [ELK Stack - Hardware set-up](https://discuss.elastic.co/t/elk-stack-hardware-set-up/234875)
**Author:** [@fmquasi](https://discuss.elastic.co/u/fmquasi)\ **Replies:** 4\ **Last updated:** [May 29, 2020, 8:33am UTC](https://discuss.elastic.co/t/elk-stack-hardware-set-up/234875 "2020-05-29T08:33:32Z")
Im new to the ELK stack - and in now getting ready to set-up a cluster with a total of 4.5tb and then expand later. Can you please advise if this set-up works: 2xservers for elastic search 1server x logstach 1xserver… --- ## [How to avoid duplicates before entering the filter plugin?](https://discuss.elastic.co/t/how-to-avoid-duplicates-before-entering-the-filter-plugin/234735)
**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\ **Replies:** 5\ **Last updated:** [May 29, 2020, 8:23am UTC](https://discuss.elastic.co/t/how-to-avoid-duplicates-before-entering-the-filter-plugin/234735 "2020-05-29T08:23:55Z")
Hi, I'm using a document\_id and action =\> create in the logstash elasticsearch output filter to avoid duplicates. Since, this is in output plugin, I can see the duplicates passing through all my filter plugin operation… --- ## [Elasticsearch unable to build using Gradle](https://discuss.elastic.co/t/elasticsearch-unable-to-build-using-gradle/234715)
**Author:** [@Shubham\_Jha\_99](https://discuss.elastic.co/u/Shubham_Jha_99)\ **Replies:** 3\ **Last updated:** [May 29, 2020, 5:31am UTC](https://discuss.elastic.co/t/elasticsearch-unable-to-build-using-gradle/234715 "2020-05-29T05:31:29Z")
I am trying to setup Ealasticsearch on my windows 10 for intellij following this link but when i execute gradlew.bat idea I am getting this error. . I am using Gradle version 6.4 and java jdk 14. --- ## [Create-or-replace index programmatically](https://discuss.elastic.co/t/create-or-replace-index-programmatically/234344)
**Author:** [@mmu](https://discuss.elastic.co/u/mmu)\ **Replies:** 5\ **Last updated:** [May 29, 2020, 8:01am UTC](https://discuss.elastic.co/t/create-or-replace-index-programmatically/234344 "2020-05-29T08:01:25Z")
Hi, I have a JAVA web service that uses an ES index for caching. Sometimes the field/index definitions change so the ES index must be re-created. What I am looking for is a solution pattern (or API function) that: Cr… --- ## [How to send notification if filebeat on a machine not sending data for certain time](https://discuss.elastic.co/t/how-to-send-notification-if-filebeat-on-a-machine-not-sending-data-for-certain-time/234868)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 2\ **Last updated:** [May 29, 2020, 8:01am UTC](https://discuss.elastic.co/t/how-to-send-notification-if-filebeat-on-a-machine-not-sending-data-for-certain-time/234868 "2020-05-29T08:01:02Z")
As caption, is it possible to do so? --- ## [Elasticsearch failed to execute bulk item (create) index](https://discuss.elastic.co/t/elasticsearch-failed-to-execute-bulk-item-create-index/234876)
**Author:** [@MichaelA](https://discuss.elastic.co/u/MichaelA)\ **Replies:** 0\ **Last updated:** [May 29, 2020, 7:34am UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-execute-bulk-item-create-index/234876 "2020-05-29T07:34:44Z")
Hi, dear community! We are experiencing some difficulties in obtaining data on our cluster and found this error in the logs on several Elastic nodes. Could you help, please? \[2020-05-29T07:01:30,332\]\[DEBUG\]\[o.e.a.b.Tra… --- ## [Transform has failed; experienced: \[task encountered irrecoverable failure: field name cannot be null.\]](https://discuss.elastic.co/t/transform-has-failed-experienced-task-encountered-irrecoverable-failure-field-name-cannot-be-null/234780)
**Author:** [@simonlucalandi](https://discuss.elastic.co/u/simonlucalandi)\ **Replies:** 3\ **Last updated:** [May 29, 2020, 7:24am UTC](https://discuss.elastic.co/t/transform-has-failed-experienced-task-encountered-irrecoverable-failure-field-name-cannot-be-null/234780 "2020-05-29T07:24:39Z")
Hi all. I created a transform on ES 7.7.0 from Kibana gui, that uses some group\_by with script to handle any missing fields in the docs: "pivot": { "group\_by": { "acquisition.utm\_campaign.keyword": {… --- ## [Beats 7.7.0 wont run on some of our Windows clients](https://discuss.elastic.co/t/beats-7-7-0-wont-run-on-some-of-our-windows-clients/234319)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 12\ **Last updated:** [May 29, 2020, 7:04am UTC](https://discuss.elastic.co/t/beats-7-7-0-wont-run-on-some-of-our-windows-clients/234319 "2020-05-29T07:04:24Z")
trying to update our beats v.7.6.2 to 7.7.0, but for some reasons it seems that ~25-30% of them fails to launch the service after installing. v.7.6.2 was running just fine. Debug log from an launch attempt of AuditBeat … --- ## [Kibana 7.1.1 - Visual Builder vs Filters](https://discuss.elastic.co/t/kibana-7-1-1-visual-builder-vs-filters/233032)
**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\ **Replies:** 8\ **Last updated:** [May 29, 2020, 6:19am UTC](https://discuss.elastic.co/t/kibana-7-1-1-visual-builder-vs-filters/233032 "2020-05-29T06:19:20Z")
Hi everybody, I got a strange behavior in the Visualize part. One of my colleague complained because he did not see the Filters bar anymore in the Visual Builder. I said it is normal because this part does not display… --- ## [Multiple inputs in logstash](https://discuss.elastic.co/t/multiple-inputs-in-logstash/234849)
**Author:** [@vikramaddagulla](https://discuss.elastic.co/u/vikramaddagulla)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 5:45am UTC](https://discuss.elastic.co/t/multiple-inputs-in-logstash/234849 "2020-05-29T05:45:07Z")
Hello, We are currently running filebeats and sending the data to logstash and that is working fine. We are now working on a new set up which need to connect to an Oracle Database and get data from a table. I understa… --- ## [Fetch the Count of specific keywords in the log message](https://discuss.elastic.co/t/fetch-the-count-of-specific-keywords-in-the-log-message/232552)
**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\ **Replies:** 2\ **Last updated:** [May 29, 2020, 5:38am UTC](https://discuss.elastic.co/t/fetch-the-count-of-specific-keywords-in-the-log-message/232552 "2020-05-29T05:38:29Z")
Hi Team, Can any help on this please? I have a requirement to capture the count of specific keywords ( i.e Exception types) from the log file and should visualize in bar/pie. and the keywords are some where in the me… --- ## [Combine Two csv fileds using key column in logstash/Elasticsearch](https://discuss.elastic.co/t/combine-two-csv-fileds-using-key-column-in-logstash-elasticsearch/233677)
**Author:** [@renu\_jessi](https://discuss.elastic.co/u/renu_jessi)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 5:32am UTC](https://discuss.elastic.co/t/combine-two-csv-fileds-using-key-column-in-logstash-elasticsearch/233677 "2020-05-29T05:32:19Z")
Hi, I have two csv files like below CSV1 : ID,Number,Name,Gender 100,CHG0032798,Thor,Male CSV2 : ID.Drop 100,drop1 ISSUE: I need to combine this csv fileds make it as one index like below ID Number Gender Drop … --- ## [ES audit security events for user management audit trails, etc](https://discuss.elastic.co/t/es-audit-security-events-for-user-management-audit-trails-etc/234856)
**Author:** [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\ **Replies:** 2\ **Last updated:** [May 29, 2020, 4:59am UTC](https://discuss.elastic.co/t/es-audit-security-events-for-user-management-audit-trails-etc/234856 "2020-05-29T04:59:59Z")
Hi, is there a way to audit user management events in ES currently? We need to audit creation/update/removal of users in ES. We also need to audit password changes. This may be a question for Kibana. Is there a way t… --- ## [How should I wrap and reuse the RestClient behind in a web service facade?](https://discuss.elastic.co/t/how-should-i-wrap-and-reuse-the-restclient-behind-in-a-web-service-facade/234806)
**Author:** [@mmu](https://discuss.elastic.co/u/mmu)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 4:43am UTC](https://discuss.elastic.co/t/how-should-i-wrap-and-reuse-the-restclient-behind-in-a-web-service-facade/234806 "2020-05-29T04:43:03Z")
I have a JAVA service that wraps ES for specific queries behind an API. This means all requests are inspected by the facade and translated into ES queries via the JAVA API. Creating a fresh RestClient for each incoming … --- ## [Update field type to solve mapper\_parsing\_exception](https://discuss.elastic.co/t/update-field-type-to-solve-mapper-parsing-exception/234815)
**Author:** [@ahmad\_qasim](https://discuss.elastic.co/u/ahmad_qasim)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 4:40am UTC](https://discuss.elastic.co/t/update-field-type-to-solve-mapper-parsing-exception/234815 "2020-05-29T04:40:50Z")
Hello, field 'status' stored in elasticsearch, based on different responses from vendors(200,0,'XSDDF',...etc), and the value may represent string or integers, the definition of status field in mapping is : "status" :… --- ## [Try to enable geoip on logstash](https://discuss.elastic.co/t/try-to-enable-geoip-on-logstash/234763)
**Author:** [@rocanelo](https://discuss.elastic.co/u/rocanelo)\ **Replies:** 2\ **Last updated:** [May 29, 2020, 4:33am UTC](https://discuss.elastic.co/t/try-to-enable-geoip-on-logstash/234763 "2020-05-29T04:33:22Z")
Hi everyone, I'm try to enable geoip on my logstash but have a message say the database is corrupted, I suscribe to maxmind and get the last database, I upgdate with command "geoupdate" but not working. I dont now what… --- ## [When using UpdateByQuery it appears the return json for \_source is modified and fields are returned out of order](https://discuss.elastic.co/t/when-using-updatebyquery-it-appears-the-return-json-for-source-is-modified-and-fields-are-returned-out-of-order/234840)
**Author:** [@skv325](https://discuss.elastic.co/u/skv325)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 4:26am UTC](https://discuss.elastic.co/t/when-using-updatebyquery-it-appears-the-return-json-for-source-is-modified-and-fields-are-returned-out-of-order/234840 "2020-05-29T04:26:40Z")
Hi, I have an issue with using C# NEST low level client UpdateByQuery method. When I update index documents with this method, properties in \_source get shuffled. Fields are returned out of order for the updated document… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1418) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1420)