# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1486

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1487

---

## [Logstash and winlogbeat configure SSL, but Logstash print error message :OPENSSL\_internal:WRONG\_VERSION\_NUMBER](https://discuss.elastic.co/t/logstash-and-winlogbeat-configure-ssl-but-logstash-print-error-message-wrong-version-number/229805)

<div class="topic-metadata">

**Author:** [@George\_Wang1](https://discuss.elastic.co/u/George_Wang1)\
**Replies:** 4\
**Last updated:** [April 27, 2020, 4:36pm UTC](https://discuss.elastic.co/t/logstash-and-winlogbeat-configure-ssl-but-logstash-print-error-message-wrong-version-number/229805 "2020-04-27T16:36:06Z")

</div>

Hi all, When I configure Logstash and Winlogbeat using SSL, Logstash print error message like that: OPENSSL\_internal:WRONG\_VERSION\_NUMBER Logstash error messages： BeatsHandler - \[local: 0.0.0.0:5044, remote: undefine…

---

## [Configuration keys](https://discuss.elastic.co/t/configuration-keys/229280)

<div class="topic-metadata">

**Author:** [@compengineer](https://discuss.elastic.co/u/compengineer)\
**Replies:** 14\
**Last updated:** [April 27, 2020, 4:11pm UTC](https://discuss.elastic.co/t/configuration-keys/229280 "2020-04-27T16:11:44Z")

</div>

I am getting a fatal error. FATAL Error: Unknown configuration key(s): "elastic.username", "elastic.password". Check for spelling errors. I have already added the correct configuration keys. I have no idea where kiba…

---

## [Elasticsearch Input and Aggregation Issue](https://discuss.elastic.co/t/elasticsearch-input-and-aggregation-issue/229657)

<div class="topic-metadata">

**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\
**Replies:** 2\
**Last updated:** [April 27, 2020, 4:00pm UTC](https://discuss.elastic.co/t/elasticsearch-input-and-aggregation-issue/229657 "2020-04-27T16:00:36Z")

</div>

Hello, I'm trying to combine two indexes using an elasticsearch input plugin and it's not working as intended (aggregation is not occuring). I'm setting the pipeline workers to 1. Event #1 { "\_index": "lum-asset-ent…

---

## [Deployment a cluster in Elastic Cloud](https://discuss.elastic.co/t/deployment-a-cluster-in-elastic-cloud/229959)

<div class="topic-metadata">

**Author:** [@alberto1](https://discuss.elastic.co/u/alberto1)\
**Replies:** 2\
**Last updated:** [April 27, 2020, 3:41pm UTC](https://discuss.elastic.co/t/deployment-a-cluster-in-elastic-cloud/229959 "2020-04-27T15:41:14Z")

</div>

Hi, I am new in Elastic and today i did create a trial account in Elastic Cloud till there everything was fine but the problem came when i´ve tried to create my first deployment. I left all the default settings for the…

---

## [SMTP logs from Windows Server can't be parsed](https://discuss.elastic.co/t/smtp-logs-from-windows-server-cant-be-parsed/229916)

<div class="topic-metadata">

**Author:** [@Vadym\_Mykolaichuk](https://discuss.elastic.co/u/Vadym_Mykolaichuk)\
**Replies:** 3\
**Last updated:** [April 27, 2020, 3:39pm UTC](https://discuss.elastic.co/t/smtp-logs-from-windows-server-cant-be-parsed/229916 "2020-04-27T15:39:20Z")

</div>

Hi! I'm using filebeat to send IIS log files from Windows Server machine. It parses logs from IIS (web logs) just fine, but it can't parse SMTP logs which have the same format. On Kibana I see this error: Provided Gro…

---

## [Logstash config file with syslog and json](https://discuss.elastic.co/t/logstash-config-file-with-syslog-and-json/229984)

<div class="topic-metadata">

**Author:** [@sublimesol](https://discuss.elastic.co/u/sublimesol)\
**Replies:** 0\
**Last updated:** [April 27, 2020, 3:13pm UTC](https://discuss.elastic.co/t/logstash-config-file-with-syslog-and-json/229984 "2020-04-27T15:13:01Z")

</div>

Hi all, Im very new to ELK and I've recently moved my firewall logging from Splunk to ELK - i currently have my palo alto firewall logging to ELK and I can see syslog messages in being displayed in dashboard in KIbana. …

---

## [Adding data to existing Index (Merge/Join)](https://discuss.elastic.co/t/adding-data-to-existing-index-merge-join/229983)

<div class="topic-metadata">

**Author:** [@Majid\_k](https://discuss.elastic.co/u/Majid_k)\
**Replies:** 0\
**Last updated:** [April 27, 2020, 3:08pm UTC](https://discuss.elastic.co/t/adding-data-to-existing-index-merge-join/229983 "2020-04-27T15:08:52Z")

</div>

Hey there. I am working on a project on social media analysis, esp. Twitter. I have imported tweets into daily indices with logstash. Now I need to do some processing in this data, and attach the results to each tweet. …

---

## [Should I use \`keyword\` in \`term\` queries?](https://discuss.elastic.co/t/should-i-use-keyword-in-term-queries/229960)

<div class="topic-metadata">

**Author:** [@tterranigma](https://discuss.elastic.co/u/tterranigma)\
**Replies:** 4\
**Last updated:** [April 27, 2020, 3:02pm UTC](https://discuss.elastic.co/t/should-i-use-keyword-in-term-queries/229960 "2020-04-27T15:02:21Z")

</div>

I parse a file with filebeat and send it to elasticsearch where I parse it with an ingest node into fields. The problem I have is that I want to use term queries to match the text of one of those fields. Until 2 days ag…

---

## [Where is the real API documentation?](https://discuss.elastic.co/t/where-is-the-real-api-documentation/229387)

<div class="topic-metadata">

**Author:** [@svbernem](https://discuss.elastic.co/u/svbernem)\
**Replies:** 7\
**Last updated:** [April 27, 2020, 2:55pm UTC](https://discuss.elastic.co/t/where-is-the-real-api-documentation/229387 "2020-04-27T14:55:52Z")

</div>

I am looking for documentation, that lists every possible command I can execute via the Rest-API, and every possible piece of data/url I can apply them to. Currently, I want to delete an index pattern via the rest API an…

---

## [Elasticsearch cluster error for ES 7.2.1 "master not discovered yet:"](https://discuss.elastic.co/t/elasticsearch-cluster-error-for-es-7-2-1-master-not-discovered-yet/229311)

<div class="topic-metadata">

**Author:** [@mkbmanas87](https://discuss.elastic.co/u/mkbmanas87)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 2:42pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-error-for-es-7-2-1-master-not-discovered-yet/229311 "2020-04-27T14:42:22Z")

</div>

Hi Team, I am getting the below Warning in 1 of my data node. My configuration is 1 master and 1 data node but data node is not connecting with the master node. ES Version- 7.2.1 "Error:- \[o.e.c.c.ClusterFormatio…

---

## [Line chart broken for logs with nanosecond timestamps](https://discuss.elastic.co/t/line-chart-broken-for-logs-with-nanosecond-timestamps/229973)

<div class="topic-metadata">

**Author:** [@data\_smith](https://discuss.elastic.co/u/data_smith)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 2:28pm UTC](https://discuss.elastic.co/t/line-chart-broken-for-logs-with-nanosecond-timestamps/229973 "2020-04-27T14:28:21Z")

</div>

I'm unable to create a line chart for logs with a nanosecond timestamp. Is this a known problem? Will it be fixed in a future release?

---

## [Can i change password for elastic user \[default user\] using kibana dev-tool](https://discuss.elastic.co/t/can-i-change-password-for-elastic-user-default-user-using-kibana-dev-tool/229952)

<div class="topic-metadata">

**Author:** [@Dragon9](https://discuss.elastic.co/u/Dragon9)\
**Replies:** 5\
**Last updated:** [April 27, 2020, 2:10pm UTC](https://discuss.elastic.co/t/can-i-change-password-for-elastic-user-default-user-using-kibana-dev-tool/229952 "2020-04-27T14:10:31Z")

</div>

please provide api for this currently i do this POST /\_security/user { "password" : "s3cr3t" } but error comes { "error": { "root\_cause": \[ { "type": "invalid\_index\_name\_exception", "re…

---

## [Timezone changes with user](https://discuss.elastic.co/t/timezone-changes-with-user/226629)

<div class="topic-metadata">

**Author:** [@Mugen](https://discuss.elastic.co/u/Mugen)\
**Replies:** 2\
**Last updated:** [April 27, 2020, 1:19pm UTC](https://discuss.elastic.co/t/timezone-changes-with-user/226629 "2020-04-27T13:19:51Z")

</div>

Hi Guys. I've two users to access Kibana one super\_user and one kibana\_user. We just use the default space. Last week we changed the Timezone setting in Kibana to UTC since we wanted to test something. Right after that w…

---

## [Unable to fetch real time data from database](https://discuss.elastic.co/t/unable-to-fetch-real-time-data-from-database/229956)

<div class="topic-metadata">

**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\
**Replies:** 0\
**Last updated:** [April 27, 2020, 12:55pm UTC](https://discuss.elastic.co/t/unable-to-fetch-real-time-data-from-database/229956 "2020-04-27T12:55:55Z")

</div>

This is my logstash config input { jdbc { jdbc\_driver\_library =\> "/etc/ojdbc6.jar" jdbc\_driver\_class =\> "Java::oracle.jdbc.driver.OracleDriver" jdbc\_connection\_string =\> "jdbc:oracle:thin:@1.0.2.10:8888/a…

---

## [Logstash plugin offline packaging](https://discuss.elastic.co/t/logstash-plugin-offline-packaging/229130)

<div class="topic-metadata">

**Author:** [@granier](https://discuss.elastic.co/u/granier)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 12:35pm UTC](https://discuss.elastic.co/t/logstash-plugin-offline-packaging/229130 "2020-04-27T12:35:38Z")

</div>

Hi, I try to package a logstash plugin for offlline deployment. I use openjdk 10 2018-03-20 build 10+44 and logstash 6.8.3 that contains jruby jruby 9.2.7.0 (2.5.3) . I use the follonwing commands : logstash-plugin…

---

## [Elastic Search Benchmarks](https://discuss.elastic.co/t/elastic-search-benchmarks/229914)

<div class="topic-metadata">

**Author:** [@nages](https://discuss.elastic.co/u/nages)\
**Replies:** 3\
**Last updated:** [April 27, 2020, 12:33pm UTC](https://discuss.elastic.co/t/elastic-search-benchmarks/229914 "2020-04-27T12:33:11Z")

</div>

Is there a document about benchmarks from elastic search -as in these many nodes for these many queries ? optimal shard size ? optimal node allocation ? I know "it depends" kind of answer for these questions - but any…

---

## [Geo\_point not indexed in Array format](https://discuss.elastic.co/t/geo-point-not-indexed-in-array-format/229334)

<div class="topic-metadata">

**Author:** [@Jalil](https://discuss.elastic.co/u/Jalil)\
**Replies:** 9\
**Last updated:** [April 27, 2020, 12:33pm UTC](https://discuss.elastic.co/t/geo-point-not-indexed-in-array-format/229334 "2020-04-27T12:33:07Z")

</div>

Hi all, I'm using logstash to index mongodb documents into ES. every thing goes well but the location object is not indexed. I defined a template mapping as geo\_point as follow : "arrival\_in": { "ignore\_m…

---

## [How to get all records in bucket](https://discuss.elastic.co/t/how-to-get-all-records-in-bucket/229216)

<div class="topic-metadata">

**Author:** [@Ramesh\_Kumar](https://discuss.elastic.co/u/Ramesh_Kumar)\
**Replies:** 13\
**Last updated:** [April 27, 2020, 12:28pm UTC](https://discuss.elastic.co/t/how-to-get-all-records-in-bucket/229216 "2020-04-27T12:28:44Z")

</div>

{ "aggs":{ "country":{ "terms":{ "field":"country.keyword" }, "size":1000, "aggs":{ "videocount":{ "sum":{ "field":"video\_count" } }, "viewcount":{ "sum":{ "field":"view\_count" } },…

---

## [Global ordinals on high cardinality fields with large indices](https://discuss.elastic.co/t/global-ordinals-on-high-cardinality-fields-with-large-indices/229948)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 7\
**Last updated:** [April 27, 2020, 12:14pm UTC](https://discuss.elastic.co/t/global-ordinals-on-high-cardinality-fields-with-large-indices/229948 "2020-04-27T12:14:33Z")

</div>

Hi, I've got a daily index with a couple of high cardinality fields. Even after reading some threads and the documentation available, I'm not sure how should I proceed. The index has ~600M docs in it every day and the m…

---

## [Platinum license expired](https://discuss.elastic.co/t/platinum-license-expired/229933)

<div class="topic-metadata">

**Author:** [@pantomin](https://discuss.elastic.co/u/pantomin)\
**Replies:** 5\
**Last updated:** [April 27, 2020, 11:45am UTC](https://discuss.elastic.co/t/platinum-license-expired/229933 "2020-04-27T11:45:01Z")

</div>

Hi everyone, I am quite new in ElasticSearch so any help would be highly appreciated. It happened that our ES platinum license expired, and now we can not run queries, which is understandable. My question: is there any …

---

## [Different scroll id for each subsequent scroll request?](https://discuss.elastic.co/t/different-scroll-id-for-each-subsequent-scroll-request/229580)

<div class="topic-metadata">

**Author:** [@A\_google\_user](https://discuss.elastic.co/u/A_google_user)\
**Replies:** 6\
**Last updated:** [April 27, 2020, 11:27am UTC](https://discuss.elastic.co/t/different-scroll-id-for-each-subsequent-scroll-request/229580 "2020-04-27T11:27:14Z")

</div>

I am using scroll to fetch docs from elasticsearch, modify them, and reindex them. I have read everywhere and it is mentioned here and here that each subsequent request sends different scroll\_id. But I don't see that hap…

---

## [Point in time values each minute. For visualisations](https://discuss.elastic.co/t/point-in-time-values-each-minute-for-visualisations/229943)

<div class="topic-metadata">

**Author:** [@nmesmeric](https://discuss.elastic.co/u/nmesmeric)\
**Replies:** 0\
**Last updated:** [April 27, 2020, 10:47am UTC](https://discuss.elastic.co/t/point-in-time-values-each-minute-for-visualisations/229943 "2020-04-27T10:47:21Z")

</div>

Hey Guys, I'm not sure exactly how to word this. However, i would like to have a timeseries chart that plots point in time values every minute. I collect login and logout events for users into a system. I have a transf…

---

## [Getting \[ERROR\] 'The \[dims\] property must be specified for field \[vector\].' despite being set in mapping](https://discuss.elastic.co/t/getting-error-the-dims-property-must-be-specified-for-field-vector-despite-being-set-in-mapping/229001)

<div class="topic-metadata">

**Author:** [@Vinay\_Sharma](https://discuss.elastic.co/u/Vinay_Sharma)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 10:38am UTC](https://discuss.elastic.co/t/getting-error-the-dims-property-must-be-specified-for-field-vector-despite-being-set-in-mapping/229001 "2020-04-27T10:38:36Z")

</div>

I am trying to upload dense vectors to Elasticsearch endpoint. created index with mapping as below: mapping = { "mappings": { "properties" : { "vector": { "type"…

---

## [Difference in performance between using metric path parameter and filter\_path query parameter in note stats](https://discuss.elastic.co/t/difference-in-performance-between-using-metric-path-parameter-and-filter-path-query-parameter-in-note-stats/229941)

<div class="topic-metadata">

**Author:** [@harskum](https://discuss.elastic.co/u/harskum)\
**Replies:** 0\
**Last updated:** [April 27, 2020, 10:29am UTC](https://discuss.elastic.co/t/difference-in-performance-between-using-metric-path-parameter-and-filter-path-query-parameter-in-note-stats/229941 "2020-04-27T10:29:38Z")

</div>

How is the computation of a query done. So, for example if I specify a metric path parameter in GET \_nodes/stats/\<metric\> api, are the computations being done for metrics that I passed, or whether it's just another filte…

---

## [Cancel the data columns](https://discuss.elastic.co/t/cancel-the-data-columns/229938)

<div class="topic-metadata">

**Author:** [@sowter](https://discuss.elastic.co/u/sowter)\
**Replies:** 0\
**Last updated:** [April 27, 2020, 10:16am UTC](https://discuss.elastic.co/t/cancel-the-data-columns/229938 "2020-04-27T10:16:06Z")

</div>

fisrt use dev tool put index second use bin/logstash -f /data/logstash\_csv.conf data into Elasticsearch but data shows what not included columns such like @timestamp @version \_id \_index \_score \_type \_doc …

---

## [Haproxy grokparsefailure](https://discuss.elastic.co/t/haproxy-grokparsefailure/229899)

<div class="topic-metadata">

**Author:** [@vakarthik](https://discuss.elastic.co/u/vakarthik)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 10:15am UTC](https://discuss.elastic.co/t/haproxy-grokparsefailure/229899 "2020-04-27T10:15:23Z")

</div>

HAPRoxy Logstash Grok Parse Failure This is my log entry from HAProxy (pfsense haproxy package) "message": "\<142\>Apr 27 02:24:00 haproxy\[37279\]: 162.158.155.249:54250 \[27/Apr/2020:02:24:00.173\] shared-frontend-merged~ …

---

## [Lifecycle indices with update functionality](https://discuss.elastic.co/t/lifecycle-indices-with-update-functionality/229937)

<div class="topic-metadata">

**Author:** [@thomasixo](https://discuss.elastic.co/u/thomasixo)\
**Replies:** 0\
**Last updated:** [April 27, 2020, 10:00am UTC](https://discuss.elastic.co/t/lifecycle-indices-with-update-functionality/229937 "2020-04-27T10:00:03Z")

</div>

Hello, i have an elasticsearch cluster with 3 nodes and need help / ideas for the correct index / alias / data structure. My application have different tenants, each tenant use it's own index to store their transaction…

---

## [Logstash: Got response code '405' contacting Elasticsearch](https://discuss.elastic.co/t/logstash-got-response-code-405-contacting-elasticsearch/228723)

<div class="topic-metadata">

**Author:** [@tom55](https://discuss.elastic.co/u/tom55)\
**Replies:** 9\
**Last updated:** [April 27, 2020, 7:19am UTC](https://discuss.elastic.co/t/logstash-got-response-code-405-contacting-elasticsearch/228723 "2020-04-27T07:19:02Z")

</div>

When trying to connect Logstash to ElasticSearch I'm getting this error and I don't understand why. The error mentions a "dead ES instance" but ElasticSearch is running and I'm able to access the API with curl from the s…

---

## [Configuration for cluster.initial\_master\_nodes](https://discuss.elastic.co/t/configuration-for-cluster-initial-master-nodes/229754)

<div class="topic-metadata">

**Author:** [@Dev\_Chakraborty](https://discuss.elastic.co/u/Dev_Chakraborty)\
**Replies:** 10\
**Last updated:** [April 25, 2020, 3:22pm UTC](https://discuss.elastic.co/t/configuration-for-cluster-initial-master-nodes/229754 "2020-04-25T15:22:32Z")

</div>

Hello Folks, I have three nodes, 2 dedicated for Elasticsearch and one is ES+Kibana. Below is my elasticsearch.yml file,can you suggest on cluster.initial\_master\_nodes, how it should be mentioned if I want only two node…

---

## [AWS EC2에 ES와 kibana 연동 문제](https://discuss.elastic.co/t/aws-ec2-es-kibana/229166)

<div class="topic-metadata">

**Author:** [@AidenSong](https://discuss.elastic.co/u/AidenSong)\
**Replies:** 4\
**Last updated:** [April 27, 2020, 9:52am UTC](https://discuss.elastic.co/t/aws-ec2-es-kibana/229166 "2020-04-27T09:52:41Z")

</div>

안녕하세요 AWS EC2에 2개에 ES와 kibana를 RPM으로 각각 설치 하였습니다. 하지만 kibana에서 ES에 연결를 할수 없다고만 표시되고 있어 질문 드립니다. \[환경\] 서버 : AWS EC2 OS : centos 7 ES/kibana version : 7.1.1 \[elasticsearch.yml\] node.name: node-1 network.host: 0.0.0…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1485)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1487)
