# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1521

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1522

---

## [ElesticSearch REST HTTP request through redirected URL](https://discuss.elastic.co/t/elesticsearch-rest-http-request-through-redirected-url/227478)

<div class="topic-metadata">

**Author:** [@pierremazieres](https://discuss.elastic.co/u/pierremazieres)\
**Replies:** 2\
**Last updated:** [April 10, 2020, 1:09pm UTC](https://discuss.elastic.co/t/elesticsearch-rest-http-request-through-redirected-url/227478 "2020-04-10T13:09:16Z")

</div>

Hello, I am asking community help because I have some trouble requesting an ElasticSearch database with a special redirected URL. Can you please give an hand on this ? Thank you very much. First, let's start with a f…

---

## [Kibana JSON input calc fields](https://discuss.elastic.co/t/kibana-json-input-calc-fields/227501)

<div class="topic-metadata">

**Author:** [@Robin020](https://discuss.elastic.co/u/Robin020)\
**Replies:** 1\
**Last updated:** [April 10, 2020, 1:05pm UTC](https://discuss.elastic.co/t/kibana-json-input-calc-fields/227501 "2020-04-10T13:05:21Z")

</div>

Hi, I use heartbeat for monitoring some url's. But unfortunately the resolving of my VPS is slow. So I would like to exclude the resolve.rtt.us field in a visualization. In the visualization I use the monitor.duration.…

---

## [Analyzing network packets with Wireshark, Elasticsearch, and Kibana](https://discuss.elastic.co/t/analyzing-network-packets-with-wireshark-elasticsearch-and-kibana/227482)

<div class="topic-metadata">

**Author:** [@elify](https://discuss.elastic.co/u/elify)\
**Replies:** 1\
**Last updated:** [April 10, 2020, 1:00pm UTC](https://discuss.elastic.co/t/analyzing-network-packets-with-wireshark-elasticsearch-and-kibana/227482 "2020-04-10T13:00:58Z")

</div>

Hello, I tried this document. I got some mistakes. Firtstly, I tried mapping in document. Then I got this error; { "error" : { "root\_cause" : \[ { "type" : "mapper\_par…

---

## [Percentile](https://discuss.elastic.co/t/percentile/227377)

<div class="topic-metadata">

**Author:** [@chosko](https://discuss.elastic.co/u/chosko)\
**Replies:** 0\
**Last updated:** [April 9, 2020, 5:20pm UTC](https://discuss.elastic.co/t/percentile/227377 "2020-04-09T17:20:00Z")

</div>

I need to calculate the percentile from a non-numeric field. I have an index to represent all events, include the user. The objective is to calculate the percentile based on events forms users (count of user field). use…

---

## [Create a Search Link using the Kibana URI](https://discuss.elastic.co/t/create-a-search-link-using-the-kibana-uri/227360)

<div class="topic-metadata">

**Author:** [@olatunde.tokun](https://discuss.elastic.co/u/olatunde.tokun)\
**Replies:** 1\
**Last updated:** [April 10, 2020, 12:11pm UTC](https://discuss.elastic.co/t/create-a-search-link-using-the-kibana-uri/227360 "2020-04-10T12:11:03Z")

</div>

Hello, My users access data through Kibana. I want to know if its possible to search directly using the Kibana URI. Kibana URI: https://mykibana.com Search String: "event.severity: high" Trying to created a search …

---

## [ILM : Clarification on Current action time meaning](https://discuss.elastic.co/t/ilm-clarification-on-current-action-time-meaning/227094)

<div class="topic-metadata">

**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\
**Replies:** 2\
**Last updated:** [April 10, 2020, 12:03pm UTC](https://discuss.elastic.co/t/ilm-clarification-on-current-action-time-meaning/227094 "2020-04-10T12:03:56Z")

</div>

Hello ! I have the following ILM policy (just hot phase and delete) : PUT \_ilm/policy/test\_policy { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": { …

---

## [Logstash parsing from filebeat with ECS](https://discuss.elastic.co/t/logstash-parsing-from-filebeat-with-ecs/227494)

<div class="topic-metadata">

**Author:** [@Rodrigo\_Jimenez](https://discuss.elastic.co/u/Rodrigo_Jimenez)\
**Replies:** 0\
**Last updated:** [April 10, 2020, 11:53am UTC](https://discuss.elastic.co/t/logstash-parsing-from-filebeat-with-ecs/227494 "2020-04-10T11:53:47Z")

</div>

Hi!, I saw some questions around talking about "moving forward" towards Logstash ECS compliance. So, I have now a setup with filebeat shipping logs using the nginx and system modules to an Logstash instance. I found th…

---

## [Percolator query on high level rest java api](https://discuss.elastic.co/t/percolator-query-on-high-level-rest-java-api/227493)

<div class="topic-metadata">

**Author:** [@Guillermo\_Blasco\_Jim](https://discuss.elastic.co/u/Guillermo_Blasco_Jim)\
**Replies:** 0\
**Last updated:** [April 10, 2020, 11:48am UTC](https://discuss.elastic.co/t/percolator-query-on-high-level-rest-java-api/227493 "2020-04-10T11:48:36Z")

</div>

New High Level Rest java api does not include support for percolator queries. With the old java client the support was limited via PercolateQueryBuilder. Given that the feature is not marked as deprecated (and hopefully …

---

## [Uanble to view Kibana dashboard localhost not working](https://discuss.elastic.co/t/uanble-to-view-kibana-dashboard-localhost-not-working/227241)

<div class="topic-metadata">

**Author:** [@pat3526](https://discuss.elastic.co/u/pat3526)\
**Replies:** 1\
**Last updated:** [April 10, 2020, 11:46am UTC](https://discuss.elastic.co/t/uanble-to-view-kibana-dashboard-localhost-not-working/227241 "2020-04-10T11:46:53Z")

</div>

I have a practice machine to try out the software. I'm unable to view the Kibana dashboard using http://localhost:5601/. I am running Centos 7 and have Elasticsearch and Kibana currently running, started and I am ab…

---

## [Restore a snapshot error ULTRAWARM INTERNAL EXCEPTION](https://discuss.elastic.co/t/restore-a-snapshot-error-ultrawarm-internal-exception/227470)

<div class="topic-metadata">

**Author:** [@michel1](https://discuss.elastic.co/u/michel1)\
**Replies:** 2\
**Last updated:** [April 10, 2020, 10:49am UTC](https://discuss.elastic.co/t/restore-a-snapshot-error-ultrawarm-internal-exception/227470 "2020-04-10T10:49:00Z")

</div>

I'm trying to restore an index with curator on an Amazon Elasticsearch domain (version 6.8), but the operation seems to failed with the error ULTRAWARM INTERNAL EXCEPTION. The curator restore yaml is: actions: 1…

---

## [KQL in ES query?](https://discuss.elastic.co/t/kql-in-es-query/227407)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 3\
**Last updated:** [April 10, 2020, 10:16am UTC](https://discuss.elastic.co/t/kql-in-es-query/227407 "2020-04-10T10:16:29Z")

</div>

Hi, is possible to use KQL in ES query? My problem is that I have just basic license, no alerts, and this is my personal project so no option to buy better license. I can do PHP/Bash script but problem is about query… K…

---

## [Kibana throws errors after SSl configuration in configmap kibana.yml](https://discuss.elastic.co/t/kibana-throws-errors-after-ssl-configuration-in-configmap-kibana-yml/224639)

<div class="topic-metadata">

**Author:** [@Abu84](https://discuss.elastic.co/u/Abu84)\
**Replies:** 16\
**Last updated:** [April 10, 2020, 8:57am UTC](https://discuss.elastic.co/t/kibana-throws-errors-after-ssl-configuration-in-configmap-kibana-yml/224639 "2020-04-10T08:57:43Z")

</div>

Continuing the discussion from Kibana logging errors after SSl configuration: here is my configuration. This is my complete kibana.yml configuration. server.host: "0.0.0.0" elasticsearch.hosts: \["http://localhost:9200"…

---

## [Recovery failure on shard](https://discuss.elastic.co/t/recovery-failure-on-shard/227453)

<div class="topic-metadata">

**Author:** [@pugdummy](https://discuss.elastic.co/u/pugdummy)\
**Replies:** 0\
**Last updated:** [April 10, 2020, 8:04am UTC](https://discuss.elastic.co/t/recovery-failure-on-shard/227453 "2020-04-10T08:04:52Z")

</div>

Hello, I am new with elastic and coding in general. I just want to ask how to fix this issue we have on Elastic. We are using elastic and kibana with UiPath Orchestrator. We are using old version for elastic 6.2.3. \[2…

---

## [Append to existing field](https://discuss.elastic.co/t/append-to-existing-field/16423)

<div class="topic-metadata">

**Author:** [@bruskie24](https://discuss.elastic.co/u/bruskie24)\
**Replies:** 9\
**Last updated:** [April 10, 2020, 6:54am UTC](https://discuss.elastic.co/t/append-to-existing-field/16423 "2020-04-10T06:54:27Z")

</div>

In looking at the Elasticsearch documentation, specifically the Update API, it doesn't appear that Elasticsearch has the functionality to append to an array, it can "update" it with new values, but not preserve the e…

---

## [Logstash S3 outputについて](https://discuss.elastic.co/t/logstash-s3-output/227441)

<div class="topic-metadata">

**Author:** [@harue](https://discuss.elastic.co/u/harue)\
**Replies:** 0\
**Last updated:** [April 10, 2020, 5:53am UTC](https://discuss.elastic.co/t/logstash-s3-output/227441 "2020-04-10T05:53:04Z")

</div>

お世話になります。 LogstashのS3 outputについて質問させて頂きます。 下記confを記載したところエラーが発生しました。 「bucket =\> "%{bucket}"」の記載が問題だと思いますが、解決策分かりますでしょうか。 「validate\_credentials\_on\_root\_bucket =\> false」を設定無でも別のエラーが発生しました。 input { file{ pa…

---

## [How to fix URL template in string field type URL](https://discuss.elastic.co/t/how-to-fix-url-template-in-string-field-type-url/226838)

<div class="topic-metadata">

**Author:** [@111207](https://discuss.elastic.co/u/111207)\
**Replies:** 3\
**Last updated:** [April 10, 2020, 5:11am UTC](https://discuss.elastic.co/t/how-to-fix-url-template-in-string-field-type-url/226838 "2020-04-10T05:11:24Z")

</div>

Hi Elastic team I 'm using FSCrewler to Import data to elasticsearch and I change string field name path.virtual to Link URL. I need to click to access into the file. How to fix the URL template it Filename es.txt …

---

## [Elasticsearch data node JVM Running out of memory](https://discuss.elastic.co/t/elasticsearch-data-node-jvm-running-out-of-memory/227415)

<div class="topic-metadata">

**Author:** [@rva](https://discuss.elastic.co/u/rva)\
**Replies:** 1\
**Last updated:** [April 10, 2020, 4:51am UTC](https://discuss.elastic.co/t/elasticsearch-data-node-jvm-running-out-of-memory/227415 "2020-04-10T04:51:03Z")

</div>

Hello, We have a cluster with 70 data nodes, 3 Masters and 2 Query nodes. JVM Data nodes Heap size is 30G - total ram 60G. On an average each data node has around 500 shards. We are seeing steady heap growth in data no…

---

## [Email alerts for built-in Watchers](https://discuss.elastic.co/t/email-alerts-for-built-in-watchers/227187)

<div class="topic-metadata">

**Author:** [@wpitt13](https://discuss.elastic.co/u/wpitt13)\
**Replies:** 3\
**Last updated:** [April 10, 2020, 4:51am UTC](https://discuss.elastic.co/t/email-alerts-for-built-in-watchers/227187 "2020-04-10T04:51:16Z")

</div>

Where do you set up the default email address for the built-in watchers? I've tried setting the " Admin email" setting within Kibana -\> Management -\> Advanced Settings but I am still not getting the email alerts. Custom …

---

## [Initializing elasticsearch db](https://discuss.elastic.co/t/initializing-elasticsearch-db/227391)

<div class="topic-metadata">

**Author:** [@Paul\_Stevens](https://discuss.elastic.co/u/Paul_Stevens)\
**Replies:** 2\
**Last updated:** [April 10, 2020, 4:19am UTC](https://discuss.elastic.co/t/initializing-elasticsearch-db/227391 "2020-04-10T04:19:04Z")

</div>

Openstack running VM(s) running 'Red Hat Enterprise Linux Server release 7.7 (Maipo)' elasticsearch-oss:6.8.2 Kibana was the first clue things were bad. This is lab. I would be happy to initialize database and loose a…

---

## [ELK cluster installation on 3 nodes + 1 node for Kibana only](https://discuss.elastic.co/t/elk-cluster-installation-on-3-nodes-1-node-for-kibana-only/226966)

<div class="topic-metadata">

**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Replies:** 2\
**Last updated:** [April 10, 2020, 3:59am UTC](https://discuss.elastic.co/t/elk-cluster-installation-on-3-nodes-1-node-for-kibana-only/226966 "2020-04-10T03:59:53Z")

</div>

Dears, I need your help and opinions in my case. I've got a request for installation ELK Cluster in such configuration: 3 x nodes for Elasticsearch, each node will be master/data/ingest node, on each node will be inst…

---

## [Index document count is 0 after reindexing](https://discuss.elastic.co/t/index-document-count-is-0-after-reindexing/227199)

<div class="topic-metadata">

**Author:** [@achang77](https://discuss.elastic.co/u/achang77)\
**Replies:** 1\
**Last updated:** [April 10, 2020, 3:16am UTC](https://discuss.elastic.co/t/index-document-count-is-0-after-reindexing/227199 "2020-04-10T03:16:25Z")

</div>

I am attempting to validate some reindex from remote operations I am reindexing from a "source" cluster to a "destination" cluster for an index "IndexName" I run the following r = esDest.reindex(body=query, wait\_f…

---

## [Why the apm-server config file cannot be updated automatically](https://discuss.elastic.co/t/why-the-apm-server-config-file-cannot-be-updated-automatically/227428)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 0\
**Last updated:** [April 10, 2020, 2:40am UTC](https://discuss.elastic.co/t/why-the-apm-server-config-file-cannot-be-updated-automatically/227428 "2020-04-10T02:40:41Z")

</div>

like logstash \>\> config.reload.automatic: true Under kubernetes, when I want to update the configmap, the apm-server container cannot automatically load the latest config volumeMounts: - name: apm-server-confi…

---

## [Query time increases on a particular index out of many indexes in es](https://discuss.elastic.co/t/query-time-increases-on-a-particular-index-out-of-many-indexes-in-es/227421)

<div class="topic-metadata">

**Author:** [@Mohit\_Ojha](https://discuss.elastic.co/u/Mohit_Ojha)\
**Replies:** 1\
**Last updated:** [April 10, 2020, 12:15am UTC](https://discuss.elastic.co/t/query-time-increases-on-a-particular-index-out-of-many-indexes-in-es/227421 "2020-04-10T00:15:43Z")

</div>

Query time increases on a particular index out of many indexes in es. This happens for 6-7 hours on some random days. The start time always is from 10:30 PM IST(occurs at same time on the day it happens), but there is no…

---

## [JDBC Input Plugin: "date" input plugin can't apply known timezone to incoming DATETIMEs](https://discuss.elastic.co/t/jdbc-input-plugin-date-input-plugin-cant-apply-known-timezone-to-incoming-datetimes/227409)

<div class="topic-metadata">

**Author:** [@Jonathan\_Rice](https://discuss.elastic.co/u/Jonathan_Rice)\
**Replies:** 2\
**Last updated:** [April 9, 2020, 10:36pm UTC](https://discuss.elastic.co/t/jdbc-input-plugin-date-input-plugin-cant-apply-known-timezone-to-incoming-datetimes/227409 "2020-04-09T22:36:07Z")

</div>

Using Logstash 7.6.2 with the JDBC Input Plugin, and a MySQL database, I'm trying to import a DATETIME field, but apply a known timezone to that field on input, using the "date" filter. But "date" is always throwing an e…

---

## [Conditional Pipeline Logic](https://discuss.elastic.co/t/conditional-pipeline-logic/227390)

<div class="topic-metadata">

**Author:** [@InfiniteLoops](https://discuss.elastic.co/u/InfiniteLoops)\
**Replies:** 1\
**Last updated:** [April 9, 2020, 10:32pm UTC](https://discuss.elastic.co/t/conditional-pipeline-logic/227390 "2020-04-09T22:32:43Z")

</div>

Logstash with an input A sending to outputs B and C. If B or C fails everything becomes blocked. If the loss of data is acceptable is the below setup possible. So if a failure occurs in the first pipeline the system swit…

---

## [For search-as-type scenario with 10 million very simple documents what is the recommended approach](https://discuss.elastic.co/t/for-search-as-type-scenario-with-10-million-very-simple-documents-what-is-the-recommended-approach/227410)

<div class="topic-metadata">

**Author:** [@jimisdrpc](https://discuss.elastic.co/u/jimisdrpc)\
**Replies:** 0\
**Last updated:** [April 9, 2020, 10:11pm UTC](https://discuss.elastic.co/t/for-search-as-type-scenario-with-10-million-very-simple-documents-what-is-the-recommended-approach/227410 "2020-04-09T22:11:57Z")

</div>

I have this requirement: create SEARCH-AS-TYPE solution with Spring and Elasticsearch couple. There will be one 10 million documents on Elasticsearch. Each document is really simple json like {“id”:9999, “FullName”}. Aft…

---

## [Embedding Kibana dashboard (7.3.1)](https://discuss.elastic.co/t/embedding-kibana-dashboard-7-3-1/224731)

<div class="topic-metadata">

**Author:** [@jhaajit](https://discuss.elastic.co/u/jhaajit)\
**Replies:** 2\
**Last updated:** [April 9, 2020, 8:53pm UTC](https://discuss.elastic.co/t/embedding-kibana-dashboard-7-3-1/224731 "2020-04-09T20:53:43Z")

</div>

Hello, I embedded a Kibana (7.3.1) dashboard with full screen mode using IFrame. However, I want to display the Search bar (KQL) as well. Please help, if it is possible. Thanks, Ajit

---

## [Production and Monitoring Cluster with metricbeat](https://discuss.elastic.co/t/production-and-monitoring-cluster-with-metricbeat/227405)

<div class="topic-metadata">

**Author:** [@bcastilho90](https://discuss.elastic.co/u/bcastilho90)\
**Replies:** 0\
**Last updated:** [April 9, 2020, 8:41pm UTC](https://discuss.elastic.co/t/production-and-monitoring-cluster-with-metricbeat/227405 "2020-04-09T20:41:00Z")

</div>

Hi, I'm setting up two elastic search clusters with helm charts. The clusters are up and running fine on Kubernetes. Now I would like to use metricbeat to ship ES metrics from cluster 1 to cluster 2 (monitoring cluste…

---

## [Delete and insert to elastic from logstash](https://discuss.elastic.co/t/delete-and-insert-to-elastic-from-logstash/227399)

<div class="topic-metadata">

**Author:** [@krishna\_bhargav](https://discuss.elastic.co/u/krishna_bhargav)\
**Replies:** 0\
**Last updated:** [April 9, 2020, 7:51pm UTC](https://discuss.elastic.co/t/delete-and-insert-to-elastic-from-logstash/227399 "2020-04-09T19:51:31Z")

</div>

We have intraday updates to our records, so we need to delete and insert all child records. logstash output : This is not deleting and insert , it's insert or update. output { elasticsearch{ hosts =\> \[ "xxxxxx" \] in…

---

## [Not able to connect to Kibana from any IP other than localhost loopback address](https://discuss.elastic.co/t/not-able-to-connect-to-kibana-from-any-ip-other-than-localhost-loopback-address/227207)

<div class="topic-metadata">

**Author:** [@mneely](https://discuss.elastic.co/u/mneely)\
**Replies:** 10\
**Last updated:** [April 9, 2020, 7:57pm UTC](https://discuss.elastic.co/t/not-able-to-connect-to-kibana-from-any-ip-other-than-localhost-loopback-address/227207 "2020-04-09T19:57:47Z")

</div>

Hello, I am able to connect to http://localhost:5601 on my ubuntu 18.04 machine that is running docker and the ELK stack, but not able to connect to my Ethernet IP. mneely@umbrella-kibana:~$ curl -i http://localhost:560…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1520)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1522)
