# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1445 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1446 --- ## [Shards getting marked as stale frequently causing cluster to go yellow](https://discuss.elastic.co/t/shards-getting-marked-as-stale-frequently-causing-cluster-to-go-yellow/231835)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 24\ **Last updated:** [May 16, 2020, 12:24pm UTC](https://discuss.elastic.co/t/shards-getting-marked-as-stale-frequently-causing-cluster-to-go-yellow/231835 "2020-05-16T12:24:44Z")
We use elasticsearch 7.2. It's a 11 node cluster with around 2TB of data sharded across 30 shards We use G1GC & have fixed this https://github.com/elastic/elasticsearch/pull/46169 Lately we've been seeing unnecessary c… --- ## [Why do I see multiple search tasks for a single search in Kibana](https://discuss.elastic.co/t/why-do-i-see-multiple-search-tasks-for-a-single-search-in-kibana/232468)
**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\ **Replies:** 4\ **Last updated:** [May 16, 2020, 11:12am UTC](https://discuss.elastic.co/t/why-do-i-see-multiple-search-tasks-for-a-single-search-in-kibana/232468 "2020-05-16T11:12:19Z")
As the title suggests when I run a query in Kibana using the discover app I see two identical search actions using the task management API. Just curious why this is and if it is actually running the same query twice agai… --- ## [Terms aggragation in datatable not showing all the values](https://discuss.elastic.co/t/terms-aggragation-in-datatable-not-showing-all-the-values/232920)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 0\ **Last updated:** [May 16, 2020, 10:58am UTC](https://discuss.elastic.co/t/terms-aggragation-in-datatable-not-showing-all-the-values/232920 "2020-05-16T10:58:28Z")
Hi, I am using datatable to visulaize the data. I want to display all the values from the each document in the index. I am using terms aggregation for each field. when i use terms aggregation if any of the field value … --- ## [Multi Fields Diadvantage](https://discuss.elastic.co/t/multi-fields-diadvantage/232699)
**Author:** [@saket\_gupta](https://discuss.elastic.co/u/saket_gupta)\ **Replies:** 6\ **Last updated:** [May 16, 2020, 10:41am UTC](https://discuss.elastic.co/t/multi-fields-diadvantage/232699 "2020-05-16T10:41:29Z")
Hi Team, I am parsing (in logstash using dissect filter) and indexing about 17 fields from a single log message (filebeat -\> logstash -\>ElasticSearch) . Logstash template by default places the parsed string fields as b… --- ## [Logstash configuring error in windows](https://discuss.elastic.co/t/logstash-configuring-error-in-windows/232904)
**Author:** [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\ **Replies:** 9\ **Last updated:** [May 16, 2020, 10:02am UTC](https://discuss.elastic.co/t/logstash-configuring-error-in-windows/232904 "2020-05-16T10:02:37Z")
Hi, I am using elk stack to fetch logs from client machine. i have done using these version elasticsearch- 6.5.3 logstash- 6.5.3 after 6 months Today for testing i just started watching logs running elasticseach and logs… --- ## [Is there a way to get rid of kibana css animations?](https://discuss.elastic.co/t/is-there-a-way-to-get-rid-of-kibana-css-animations/232786)
**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\ **Replies:** 3\ **Last updated:** [May 16, 2020, 7:40am UTC](https://discuss.elastic.co/t/is-there-a-way-to-get-rid-of-kibana-css-animations/232786 "2020-05-16T07:40:27Z")
As much as I love the Elastic stack, Kibana is becoming more and more bloated. I just posted this: Anyone know of a way (or a hack) to get rid of these mini-animations that are probably made with the best intentions … --- ## [Is Logstash SNMP used for traps or only for traps?](https://discuss.elastic.co/t/is-logstash-snmp-used-for-traps-or-only-for-traps/232649)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 4\ **Last updated:** [May 16, 2020, 7:09am UTC](https://discuss.elastic.co/t/is-logstash-snmp-used-for-traps-or-only-for-traps/232649 "2020-05-16T07:09:53Z")
Can i use logstash input snmp for traps? Which below vendor MIBs works without coverting to .dic format? Cisco, Fortigate, juniper, paloalto . --- ## [Logstash xml filter help](https://discuss.elastic.co/t/logstash-xml-filter-help/232358)
**Author:** [@sunny1](https://discuss.elastic.co/u/sunny1)\ **Replies:** 7\ **Last updated:** [May 16, 2020, 3:09am UTC](https://discuss.elastic.co/t/logstash-xml-filter-help/232358 "2020-05-16T03:09:28Z")
Hello Team, Hope all are doing good with stay home stay safe. Lately i tried playing with logstash to parse an xml file, using grok but did not had any luck. I am able to do text file but xml is giving me very hard time.… --- ## [Security is disabled but enabled in elasticsearch.yml](https://discuss.elastic.co/t/security-is-disabled-but-enabled-in-elasticsearch-yml/232875)
**Author:** [@Amine\_Maalfi](https://discuss.elastic.co/u/Amine_Maalfi)\ **Replies:** 3\ **Last updated:** [May 15, 2020, 10:02pm UTC](https://discuss.elastic.co/t/security-is-disabled-but-enabled-in-elasticsearch-yml/232875 "2020-05-15T22:02:09Z")
when i run elasticsearch in the console it shows that the security is disabled while i'm setting it to true in the elasticsearch.yml i'm also getting cors errors, so i'm starting to doubt that elasticsearch doesn't read … --- ## [Can Elastic SIEM have a Group By feature in the Timelines?](https://discuss.elastic.co/t/can-elastic-siem-have-a-group-by-feature-in-the-timelines/232725)
**Author:** [@hilo21](https://discuss.elastic.co/u/hilo21)\ **Replies:** 4\ **Last updated:** [May 15, 2020, 10:00pm UTC](https://discuss.elastic.co/t/can-elastic-siem-have-a-group-by-feature-in-the-timelines/232725 "2020-05-15T22:00:47Z")
Hello, When it comes to Elastic Stack is has great functionalities for specific detection trigerred by well tuned rules but security analysts struggle when it comes to generic checks like if I have a phishing related p… --- ## [Loop through json arrays](https://discuss.elastic.co/t/loop-through-json-arrays/232336)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 9\ **Last updated:** [May 15, 2020, 10:00pm UTC](https://discuss.elastic.co/t/loop-through-json-arrays/232336 "2020-05-15T22:00:41Z")
Hi, My JSON file looks like this : { "bookings": \[ { "bookingId": 553267, "bookingRef": "VO20200108460", "statusId": 1, "status": "Confirmed", "rooms": \[ { "board": "Demi pension", "paxes": { "adults": 2, "… --- ## [Json input and splitting](https://discuss.elastic.co/t/json-input-and-splitting/232677)
**Author:** [@tcaetano1995](https://discuss.elastic.co/u/tcaetano1995)\ **Replies:** 11\ **Last updated:** [May 15, 2020, 9:53pm UTC](https://discuss.elastic.co/t/json-input-and-splitting/232677 "2020-05-15T21:53:30Z")
Hello, I'm new to the elastic ecosystem. I'm trying to use logstash to take a json file as input and then use a filter to split into different events but I'm drowned by all of the info there is online. This is a short… --- ## [Filtering rows from a log based in their last status](https://discuss.elastic.co/t/filtering-rows-from-a-log-based-in-their-last-status/232858)
**Author:** [@ManuelChaverra](https://discuss.elastic.co/u/ManuelChaverra)\ **Replies:** 1\ **Last updated:** [May 15, 2020, 9:44pm UTC](https://discuss.elastic.co/t/filtering-rows-from-a-log-based-in-their-last-status/232858 "2020-05-15T21:44:00Z")
Hello everyone, this is my first time using Elastic Stack so I'm trying to learn a lot of things that I'd like to implement in my work. I'm using Filebeat to send logs files to logstash, then I'm filtering information a… --- ## [Best way to drop event based on the value(in an array) of a field](https://discuss.elastic.co/t/best-way-to-drop-event-based-on-the-value-in-an-array-of-a-field/232883)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [May 15, 2020, 9:32pm UTC](https://discuss.elastic.co/t/best-way-to-drop-event-based-on-the-value-in-an-array-of-a-field/232883 "2020-05-15T21:32:26Z")
Hi I want to drop an event if the field "group" contains any of the values in an array, it seems that this is the way to do it, but I was wondering if this is the best way to do it, especially because the array has arrou… --- ## [Return field alias name instead of the actual field name in search api](https://discuss.elastic.co/t/return-field-alias-name-instead-of-the-actual-field-name-in-search-api/232880)
**Author:** [@max\_chen](https://discuss.elastic.co/u/max_chen)\ **Replies:** 1\ **Last updated:** [May 15, 2020, 9:02pm UTC](https://discuss.elastic.co/t/return-field-alias-name-instead-of-the-actual-field-name-in-search-api/232880 "2020-05-15T21:02:00Z")
I have "field\_b" which is alias to "field\_a". When I search it using GET method in the dev console, it return the data with "field\_a" : 'some data" instead of "field\_b" : "some data". Is it possible to get it to return d… --- ## [How to configure SSL in elastic search ( http to https )](https://discuss.elastic.co/t/how-to-configure-ssl-in-elastic-search-http-to-https/232860)
**Author:** [@jinalptl1993](https://discuss.elastic.co/u/jinalptl1993)\ **Replies:** 0\ **Last updated:** [May 15, 2020, 5:27pm UTC](https://discuss.elastic.co/t/how-to-configure-ssl-in-elastic-search-http-to-https/232860 "2020-05-15T17:27:03Z")
I have launched elastic search server in azure using elastic search marketplace. Now, I want to configure SSL into elasticsearch. I want each request to go through https. I can't see any option in elastic load balancer… --- ## [Geo context not working with completion suggester with precision in "mi"](https://discuss.elastic.co/t/geo-context-not-working-with-completion-suggester-with-precision-in-mi/232882)
**Author:** [@Douglas\_Leister](https://discuss.elastic.co/u/Douglas_Leister)\ **Replies:** 0\ **Last updated:** [May 15, 2020, 8:38pm UTC](https://discuss.elastic.co/t/geo-context-not-working-with-completion-suggester-with-precision-in-mi/232882 "2020-05-15T20:38:39Z")
I'm using ES v.7.6 and am trying to setup an autocomplete to search for businesses and filter out those which lie a variable distance away from the center of the search area. When specifying precision on the query in te… --- ## [Getting We noticed that you don't have any data in your cluster](https://discuss.elastic.co/t/getting-we-noticed-that-you-dont-have-any-data-in-your-cluster/232705)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 2\ **Last updated:** [May 15, 2020, 8:37pm UTC](https://discuss.elastic.co/t/getting-we-noticed-that-you-dont-have-any-data-in-your-cluster/232705 "2020-05-15T20:37:02Z")
I have an existing ES cluster which I have used for a couple of years and finally got around to installing Kibana. Cluster has been used as backend for applications until now so we generally do not make ad hoc searches. … --- ## [Upgrade 5.6 to 6.8](https://discuss.elastic.co/t/upgrade-5-6-to-6-8/232872)
**Author:** [@andreacfm](https://discuss.elastic.co/u/andreacfm)\ **Replies:** 1\ **Last updated:** [May 15, 2020, 8:21pm UTC](https://discuss.elastic.co/t/upgrade-5-6-to-6-8/232872 "2020-05-15T20:21:16Z")
I need to upgrade an ELK system from 5.6.2 to 6.8.8. My plan is to upgrade before ES through a rolling upgrade and Kibana and later to upgrade logstash. Will logstash 5.6 work normally with ES 6.8.8 ? --- ## [Should GatewayAllocator force allocate replicas for node/process restart cases?](https://discuss.elastic.co/t/should-gatewayallocator-force-allocate-replicas-for-node-process-restart-cases/232876)
**Author:** [@vigyas](https://discuss.elastic.co/u/vigyas)\ **Replies:** 0\ **Last updated:** [May 15, 2020, 7:32pm UTC](https://discuss.elastic.co/t/should-gatewayallocator-force-allocate-replicas-for-node-process-restart-cases/232876 "2020-05-15T19:32:09Z")
Today, we can exclude certain nodes from allocation using FilterDecider settings, which is a way to decommission nodes on a rack, or with an attribute. If ES process restarts on such a node, the primaries get assigned b… --- ## [Exclude array items in cardinality aggregation](https://discuss.elastic.co/t/exclude-array-items-in-cardinality-aggregation/232331)
**Author:** [@Ninan\_Zhang](https://discuss.elastic.co/u/Ninan_Zhang)\ **Replies:** 2\ **Last updated:** [May 15, 2020, 6:57pm UTC](https://discuss.elastic.co/t/exclude-array-items-in-cardinality-aggregation/232331 "2020-05-15T18:57:26Z")
The field mapping is like this: \[ { "type": 1, "document\_id": \[4, 5\] }, { "type": 1, "document\_id": \[4\] }, { "typ… --- ## [How to change default the time range in Kibana?](https://discuss.elastic.co/t/how-to-change-default-the-time-range-in-kibana/232791)
**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\ **Replies:** 2\ **Last updated:** [May 15, 2020, 6:51pm UTC](https://discuss.elastic.co/t/how-to-change-default-the-time-range-in-kibana/232791 "2020-05-15T18:51:31Z")
The default the time range in Kibana is set to the last 15 minutes in any dashboard. Is there any way to change this default? 1- I try to change in file src\\legacy\\core\_plugins\\kibana\\ui\_setting\_defaults.js "from": "n… --- ## [Regexp for ES](https://discuss.elastic.co/t/regexp-for-es/232868)
**Author:** [@ebdavison](https://discuss.elastic.co/u/ebdavison)\ **Replies:** 0\ **Last updated:** [May 15, 2020, 6:49pm UTC](https://discuss.elastic.co/t/regexp-for-es/232868 "2020-05-15T18:49:56Z")
I have a regex that I have been using outside of elasticsearch and am needing to convert to a query: (\\sprivilege::|\\ssekurlsa::|\\scrypto::|\\skerberos::|\\slsadump::|\\sprocess::) I know from the documentation that the \\… --- ## [Refresh index from database](https://discuss.elastic.co/t/refresh-index-from-database/232823)
**Author:** [@mnasim](https://discuss.elastic.co/u/mnasim)\ **Replies:** 1\ **Last updated:** [May 15, 2020, 6:36pm UTC](https://discuss.elastic.co/t/refresh-index-from-database/232823 "2020-05-15T18:36:12Z")
Hi Support, We have an existing database index created from Logstash process using JDBC input plugin. Now database is continuously modifying. So that without dropping existing index it append all database entries in th… --- ## [Passing multiple values in Kibana - ‘add filter’ - ‘is one of’](https://discuss.elastic.co/t/passing-multiple-values-in-kibana-add-filter-is-one-of/232694)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 10\ **Last updated:** [May 15, 2020, 6:33pm UTC](https://discuss.elastic.co/t/passing-multiple-values-in-kibana-add-filter-is-one-of/232694 "2020-05-15T18:33:15Z")
Hi, I am having the same issue exposed in the topic below, but it never got a final answer nor solution (if any). In my case I have more than 400 entries and do it one by one it will take hours. The answer for this t… --- ## [Unable to set up path.repo in ece](https://discuss.elastic.co/t/unable-to-set-up-path-repo-in-ece/230457)
**Author:** [@Sreyansh](https://discuss.elastic.co/u/Sreyansh)\ **Replies:** 2\ **Last updated:** [May 15, 2020, 5:25pm UTC](https://discuss.elastic.co/t/unable-to-set-up-path-repo-in-ece/230457 "2020-05-15T17:25:06Z")
Hi there. We are setting up the filesystem snapshot repository in ECE. We are configuring the path.repo for the deployment in the User setting overrides section but it does not pick up and fails. Can you please guide us… --- ## [Snapshot and restore to move indexes](https://discuss.elastic.co/t/snapshot-and-restore-to-move-indexes/232854)
**Author:** [@chiara](https://discuss.elastic.co/u/chiara)\ **Replies:** 0\ **Last updated:** [May 15, 2020, 4:56pm UTC](https://discuss.elastic.co/t/snapshot-and-restore-to-move-indexes/232854 "2020-05-15T16:56:41Z")
I have 2 ELK cluster. Every x days I would like to take a snapshot of some indexes (based on date, for example indexes of previous month) in first cluster and restore them in second remote cluster. Can I dynamically sele… --- ## [Regular expression has redundant nested repeat operator messages](https://discuss.elastic.co/t/regular-expression-has-redundant-nested-repeat-operator-messages/232482)
**Author:** [@realyn\_elastic](https://discuss.elastic.co/u/realyn_elastic)\ **Replies:** 1\ **Last updated:** [May 15, 2020, 4:50pm UTC](https://discuss.elastic.co/t/regular-expression-has-redundant-nested-repeat-operator-messages/232482 "2020-05-15T16:50:52Z")
I am seeing this lot of errors inside my /var/log/messages. Could someone help me to enlighten and fix this regular expression has redundant nested repeat operator \* /(?:(?:(?:(?\(?:(?\>\\d\\d){… --- ## [ES Support Nested Docs Deletion](https://discuss.elastic.co/t/es-support-nested-docs-deletion/232709)
**Author:** [@kjain14](https://discuss.elastic.co/u/kjain14)\ **Replies:** 2\ **Last updated:** [May 15, 2020, 4:45pm UTC](https://discuss.elastic.co/t/es-support-nested-docs-deletion/232709 "2020-05-15T16:45:00Z")
Hi Folks, I have been using Elastic Search server of version 7.2.0. When I deleted parent document in ES by ID, it did not delete its child document. Can you please confirm over that? If yes, do you know another way to… --- ## [Sorting nested documents with inner\_hits not returning desired results. ES7.x](https://discuss.elastic.co/t/sorting-nested-documents-with-inner-hits-not-returning-desired-results-es7-x/232762)
**Author:** [@hkhan](https://discuss.elastic.co/u/hkhan)\ **Replies:** 1\ **Last updated:** [May 15, 2020, 2:28pm UTC](https://discuss.elastic.co/t/sorting-nested-documents-with-inner-hits-not-returning-desired-results-es7-x/232762 "2020-05-15T14:28:16Z")
Hi, I am trying to implement a proof of concept for using Elasticsearch in our application. I am, however, stuck at sorting the nested documents with nested field and will greatly appreciate help in finding answer to my … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1444) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1446)