# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1522 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1523 --- ## [Error while installing elasticsearch license](https://discuss.elastic.co/t/error-while-installing-elasticsearch-license/227222)
**Author:** [@manoj123](https://discuss.elastic.co/u/manoj123)\ **Replies:** 4\ **Last updated:** [April 9, 2020, 7:38pm UTC](https://discuss.elastic.co/t/error-while-installing-elasticsearch-license/227222 "2020-04-09T19:38:38Z")
Recently I tried to install elastic search license for the version 5.6.8. The error I am seeing is Curl I ran: curl -XPUT -u elastic 'http://es-d3-logs.int.stage.tmocce.com:9200/ … --- ## [Search with \_routing on indices without \_routing](https://discuss.elastic.co/t/search-with-routing-on-indices-without-routing/227366)
**Author:** [@jeffzhao](https://discuss.elastic.co/u/jeffzhao)\ **Replies:** 9\ **Last updated:** [April 9, 2020, 7:38pm UTC](https://discuss.elastic.co/t/search-with-routing-on-indices-without-routing/227366 "2020-04-09T19:38:21Z")
Hi, We have time-based data in Elasticsearch cluster: one index per month and use alias to join them. So the user only need to search on the index alias. In the past when creating the index for each month, we didn't sp… --- ## [Kibana is unable to start with all shards failed message](https://discuss.elastic.co/t/kibana-is-unable-to-start-with-all-shards-failed-message/227046)
**Author:** [@brb44](https://discuss.elastic.co/u/brb44)\ **Replies:** 5\ **Last updated:** [April 9, 2020, 7:15pm UTC](https://discuss.elastic.co/t/kibana-is-unable-to-start-with-all-shards-failed-message/227046 "2020-04-09T19:15:45Z")
After encrypting elasticsearch and changing the ALB from HTTP to https for ES and Kibana. I'm getting below error. Also, metricbeat is also in a failed state. kibana: {"type":"error","@timestamp":"2020-04-08T03:33:47Z",… --- ## [I'm not able to start kibana on my web browser but running properly on my terminal](https://discuss.elastic.co/t/im-not-able-to-start-kibana-on-my-web-browser-but-running-properly-on-my-terminal/227394)
**Author:** [@Jyoti\_Singh1](https://discuss.elastic.co/u/Jyoti_Singh1)\ **Replies:** 0\ **Last updated:** [April 9, 2020, 7:06pm UTC](https://discuss.elastic.co/t/im-not-able-to-start-kibana-on-my-web-browser-but-running-properly-on-my-terminal/227394 "2020-04-09T19:06:32Z")
I have an ubuntu instance on which i have installed elasticsearch. I also installed kibana, but on starting it, it is showing that it is not ready. on doing sudo journalctl --unit kibana i am getting logs as follows: A… --- ## [JDBC Input Plugin: Behavior if job runs longer than schedule period? Just waits until next schedule time?](https://discuss.elastic.co/t/jdbc-input-plugin-behavior-if-job-runs-longer-than-schedule-period-just-waits-until-next-schedule-time/227382)
**Author:** [@Jonathan\_Rice](https://discuss.elastic.co/u/Jonathan_Rice)\ **Replies:** 0\ **Last updated:** [April 9, 2020, 5:59pm UTC](https://discuss.elastic.co/t/jdbc-input-plugin-behavior-if-job-runs-longer-than-schedule-period-just-waits-until-next-schedule-time/227382 "2020-04-09T17:59:34Z")
Say I give the JDBC Input Plugin a schedule to run every 5 minutes, but the Logstash job takes 6 minutes to run. Does the next job then run immediately, or does it wait until the next 5-minute wall-clock time is reached … --- ## [Display log information](https://discuss.elastic.co/t/display-log-information/227380)
**Author:** [@Gary\_Blackwell](https://discuss.elastic.co/u/Gary_Blackwell)\ **Replies:** 0\ **Last updated:** [April 9, 2020, 5:45pm UTC](https://discuss.elastic.co/t/display-log-information/227380 "2020-04-09T17:45:27Z")
The default display "\_source" has a lot of uninteresting data. So I went to advanced settings and modified the default columns to be "winlog.event\_id, event.action, winlog.event\_data.SubjectUserName, winlog.event\_data.Su… --- ## [Mulitple pipeline with common output file](https://discuss.elastic.co/t/mulitple-pipeline-with-common-output-file/226910)
**Author:** [@priya\_yuvaraj](https://discuss.elastic.co/u/priya_yuvaraj)\ **Replies:** 1\ **Last updated:** [April 9, 2020, 5:32pm UTC](https://discuss.elastic.co/t/mulitple-pipeline-with-common-output-file/226910 "2020-04-09T17:32:57Z")
Hi all, I need a help in the following logstash implementation. I am new to logstash. I am having multiple pipeline configured in pipeline.yml. All the pipelines have to send data to the same output file ( commonfile\_d… --- ## [Duplicate log events with different \_id generated by logstash](https://discuss.elastic.co/t/duplicate-log-events-with-different-id-generated-by-logstash/227135)
**Author:** [@nityaraj06](https://discuss.elastic.co/u/nityaraj06)\ **Replies:** 1\ **Last updated:** [April 9, 2020, 5:29pm UTC](https://discuss.elastic.co/t/duplicate-log-events-with-different-id-generated-by-logstash/227135 "2020-04-09T17:29:34Z")
Hi, I am able to see duplicate log events with different \_id generated by logstash in Kibana. Below is my logstash config. Could someone help me with this? input { file { path =\> "E:/console-2020\*.log" sinced… --- ## [Problem when i run logstash as a service](https://discuss.elastic.co/t/problem-when-i-run-logstash-as-a-service/227312)
**Author:** [@mimimike](https://discuss.elastic.co/u/mimimike)\ **Replies:** 2\ **Last updated:** [April 9, 2020, 5:13pm UTC](https://discuss.elastic.co/t/problem-when-i-run-logstash-as-a-service/227312 "2020-04-09T17:13:20Z")
Hi everyone, I don't know why cannot run logstash as a service. If i run logstash in command line works well but when i run as a service appears the next error in status service: Apr 09 14:03:02 kafka02 logstash\[60398\]… --- ## [Kibana does not diplay elasticsearch index](https://discuss.elastic.co/t/kibana-does-not-diplay-elasticsearch-index/227343)
**Author:** [@Cristiano\_Corrado](https://discuss.elastic.co/u/Cristiano_Corrado)\ **Replies:** 3\ **Last updated:** [April 9, 2020, 5:04pm UTC](https://discuss.elastic.co/t/kibana-does-not-diplay-elasticsearch-index/227343 "2020-04-09T17:04:57Z")
Hello, I am sure it has been asked million times but I couldn't find a solution for myself after hours of browsing. I created an index in elasticsearch PUT /coronavirus { "settings" : { "number\_of\_shards" : … --- ## [Table in Kibana with ratios](https://discuss.elastic.co/t/table-in-kibana-with-ratios/225450)
**Author:** [@stefano\_guerrieri](https://discuss.elastic.co/u/stefano_guerrieri)\ **Replies:** 4\ **Last updated:** [April 9, 2020, 4:29pm UTC](https://discuss.elastic.co/t/table-in-kibana-with-ratios/225450 "2020-04-09T16:29:20Z")
Dears, I have this raw data in Elastic: I need first to create in Kibana a table like that one: but the most important is that I have to create a table based on the aggregation above like the following (i'm highli… --- ## [Index creation on bulk update](https://discuss.elastic.co/t/index-creation-on-bulk-update/227344)
**Author:** [@111313](https://discuss.elastic.co/u/111313)\ **Replies:** 3\ **Last updated:** [April 9, 2020, 4:15pm UTC](https://discuss.elastic.co/t/index-creation-on-bulk-update/227344 "2020-04-09T16:15:49Z")
Hello. I noticed for operation bulk update, for example POST http://localhost:9200/\_bulk {"update":{"\_id":"1", "\_index" : "index", "\_type": "type"}} {"doc": {"id": "1", "name": "test"}} if index with name "index" do… --- ## [Grok create an array not a string](https://discuss.elastic.co/t/grok-create-an-array-not-a-string/227352)
**Author:** [@nico88](https://discuss.elastic.co/u/nico88)\ **Replies:** 2\ **Last updated:** [April 9, 2020, 4:14pm UTC](https://discuss.elastic.co/t/grok-create-an-array-not-a-string/227352 "2020-04-09T16:14:08Z")
Hello, I try to grok a tacacs authentification log file from tac plus. Ex of log line : 2020-04-09 16:13:26 +0200 10.2.0.163 test tty2 8.8.8.8 shell login succeeded This is my filter : filter { if \[type\] == … --- ## [Error with bulk upload & Role permissions](https://discuss.elastic.co/t/error-with-bulk-upload-role-permissions/227363)
**Author:** [@hogbinj](https://discuss.elastic.co/u/hogbinj)\ **Replies:** 1\ **Last updated:** [April 9, 2020, 4:03pm UTC](https://discuss.elastic.co/t/error-with-bulk-upload-role-permissions/227363 "2020-04-09T16:03:22Z")
I'm trying to bulk upload using a specific user/role and getting an error I don't understand given my configuration. Other than a .yml security file (which I'm not using) I can't work out how to set the specific permiss… --- ## [Unit Test Case for the High Level Rest Client?](https://discuss.elastic.co/t/unit-test-case-for-the-high-level-rest-client/195253)
**Author:** [@Clark\_Wright](https://discuss.elastic.co/u/Clark_Wright)\ **Replies:** 5\ **Last updated:** [April 9, 2020, 3:58pm UTC](https://discuss.elastic.co/t/unit-test-case-for-the-high-level-rest-client/195253 "2020-04-09T15:58:43Z")
I am in the process of moving our applications search functionality from Elasticsearch 1.x to 7.x, and from the TransportClient to the HighLevelRestClient, while trying to avoid using all the deprecated (or known to bec… --- ## [In memory testing with RestHighLevelClient](https://discuss.elastic.co/t/in-memory-testing-with-resthighlevelclient/106196)
**Author:** [@kieran](https://discuss.elastic.co/u/kieran)\ **Replies:** 6\ **Last updated:** [April 9, 2020, 3:58pm UTC](https://discuss.elastic.co/t/in-memory-testing-with-resthighlevelclient/106196 "2020-04-09T15:58:02Z")
I'm using elasticsearch 5.6, and the brand new RestHighLevelClient. I know that previously, with the nodebuilder, it was possible to configure elastic to run in-memory for testing (i.e. as part of a unit test after the … --- ## [Not able connect with Rest High Level Client in ESIntegTestCase of ElasticSearch 7.0.0](https://discuss.elastic.co/t/not-able-connect-with-rest-high-level-client-in-esintegtestcase-of-elasticsearch-7-0-0/179307)
**Author:** [@rohitpatil](https://discuss.elastic.co/u/rohitpatil)\ **Replies:** 4\ **Last updated:** [April 9, 2020, 3:57pm UTC](https://discuss.elastic.co/t/not-able-connect-with-rest-high-level-client-in-esintegtestcase-of-elasticsearch-7-0-0/179307 "2020-04-09T15:57:26Z")
Hello, I have written some integration tests for my project which uses ElasticSearch as database. I was using Rest High Level Client with ElasticSearch version 6.6.0. But recently I upgraded the version to 7.0.0. Now, … --- ## [Could not generate pdf report](https://discuss.elastic.co/t/could-not-generate-pdf-report/227336)
**Author:** [@manojkrishna561994](https://discuss.elastic.co/u/manojkrishna561994)\ **Replies:** 2\ **Last updated:** [April 9, 2020, 3:51pm UTC](https://discuss.elastic.co/t/could-not-generate-pdf-report/227336 "2020-04-09T15:51:15Z")
I'm have made a dashboard using the visualizations available, now I want to generate pdf report of that dashboard, however I don't find the pdf option in Dashboard\>Share. I'm using the ELK v7.6. How do i enable this "ge… --- ## [Authentication Error After Configuring SSL](https://discuss.elastic.co/t/authentication-error-after-configuring-ssl/226979)
**Author:** [@Emre\_Altan](https://discuss.elastic.co/u/Emre_Altan)\ **Replies:** 2\ **Last updated:** [April 9, 2020, 3:28pm UTC](https://discuss.elastic.co/t/authentication-error-after-configuring-ssl/226979 "2020-04-09T15:28:06Z")
Hi, I'm trying to configure ssl and basic authentication in an Amazon EC2 instance. I've installed the elasticsearch, opened authentication by setting xpack.security.enabled to true, and set a password to built-in users… --- ## [Prevent the loss of existing fields while using document\_id of elasticsearch output plugin](https://discuss.elastic.co/t/prevent-the-loss-of-existing-fields-while-using-document-id-of-elasticsearch-output-plugin/227327)
**Author:** [@oula\_oula](https://discuss.elastic.co/u/oula_oula)\ **Replies:** 2\ **Last updated:** [April 9, 2020, 3:17pm UTC](https://discuss.elastic.co/t/prevent-the-loss-of-existing-fields-while-using-document-id-of-elasticsearch-output-plugin/227327 "2020-04-09T15:17:28Z")
Hi, I need to inject multiple logs in a common document according to a specific field value. So, I specify document\_id's value in elasticsearch plugin output. But instead of adding fields after parsing logs it deletes… --- ## [Ability to run ES queries directed at Kibana?](https://discuss.elastic.co/t/ability-to-run-es-queries-directed-at-kibana/225262)
**Author:** [@slmingol](https://discuss.elastic.co/u/slmingol)\ **Replies:** 2\ **Last updated:** [April 9, 2020, 3:14pm UTC](https://discuss.elastic.co/t/ability-to-run-es-queries-directed-at-kibana/225262 "2020-04-09T15:14:18Z")
We often times use curl to run ES queries at one of the datanodes within our ES cluster. Is there a way to direct these to Kibana and use Kibana as a loadbalancer across all the ES datanodes? Today we have to either use … --- ## [Elasticsearch Timeout issue (Attempted to send a bulk request to elasticsearch)](https://discuss.elastic.co/t/elasticsearch-timeout-issue-attempted-to-send-a-bulk-request-to-elasticsearch/227315)
**Author:** [@Afsal](https://discuss.elastic.co/u/Afsal)\ **Replies:** 1\ **Last updated:** [April 9, 2020, 3:12pm UTC](https://discuss.elastic.co/t/elasticsearch-timeout-issue-attempted-to-send-a-bulk-request-to-elasticsearch/227315 "2020-04-09T15:12:45Z")
Hi guys, We are using Elasticsearch and Logstash 6.8.2 and we are facing the below issue intermittent in the logstash logs. \[2020-04-05T11:33:06,492\]\[ERROR\]\[logstash.outputs.elasticsearch\] Attempted to send a bulk requ… --- ## [Query to fetch Document if certain nested document does not exists](https://discuss.elastic.co/t/query-to-fetch-document-if-certain-nested-document-does-not-exists/224904)
**Author:** [@farhanAamir](https://discuss.elastic.co/u/farhanAamir)\ **Replies:** 4\ **Last updated:** [April 9, 2020, 2:49pm UTC](https://discuss.elastic.co/t/query-to-fetch-document-if-certain-nested-document-does-not-exists/224904 "2020-04-09T14:49:00Z")
Hi, I am new to elastic search and got stuck in a scenario. I have document mapping as below: { "mappings": { "customer": { "properties": { "customerEmails": … --- ## [Bucket Script Aggregation per Bucket in TSVB possible?](https://discuss.elastic.co/t/bucket-script-aggregation-per-bucket-in-tsvb-possible/227317)
**Author:** [@cyverboy2](https://discuss.elastic.co/u/cyverboy2)\ **Replies:** 3\ **Last updated:** [April 9, 2020, 2:48pm UTC](https://discuss.elastic.co/t/bucket-script-aggregation-per-bucket-in-tsvb-possible/227317 "2020-04-09T14:48:43Z")
Hey there, my data looks like this: Unique ID with should be my buckets Count: Number of entrys per Unique ID, each entry has a separate count value Max: max number of entry per Unique ID Min: min number of entry per … --- ## [Analyzers and Content Length](https://discuss.elastic.co/t/analyzers-and-content-length/226254)
**Author:** [@mrbarret](https://discuss.elastic.co/u/mrbarret)\ **Replies:** 7\ **Last updated:** [April 9, 2020, 2:42pm UTC](https://discuss.elastic.co/t/analyzers-and-content-length/226254 "2020-04-09T14:42:54Z")
I have a wonderful little document and index that I use to ingest document. Unfortunately, a few of the documents have long fields and the ingest process fails for those documents. An example document that I have conta… --- ## [Is there a way to rename an ingest pipeline](https://discuss.elastic.co/t/is-there-a-way-to-rename-an-ingest-pipeline/226173)
**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\ **Replies:** 4\ **Last updated:** [April 9, 2020, 2:07pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-rename-an-ingest-pipeline/226173 "2020-04-09T14:07:52Z")
Hello all, I found nothing on this searching the forum so opening a new topic. I also found nothing suggesting this would be possible in the comprehensive official documentation but I thought I would ask anyway :smiley… --- ## [Aggregation: number of new users over last week](https://discuss.elastic.co/t/aggregation-number-of-new-users-over-last-week/226477)
**Author:** [@smirnov10](https://discuss.elastic.co/u/smirnov10)\ **Replies:** 2\ **Last updated:** [April 9, 2020, 1:38pm UTC](https://discuss.elastic.co/t/aggregation-number-of-new-users-over-last-week/226477 "2020-04-09T13:38:16Z")
Hi, I read/tried plenty of aggregation examples but I still cannot come up with the complete solution :frowning: I need to display new users over the week (day/month) trend chart. In SQL it may look like this: select … --- ## [WRITE threadpool rejected stats](https://discuss.elastic.co/t/write-threadpool-rejected-stats/227306)
**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\ **Replies:** 2\ **Last updated:** [April 9, 2020, 1:38pm UTC](https://discuss.elastic.co/t/write-threadpool-rejected-stats/227306 "2020-04-09T13:38:15Z")
Hello all, I'm using Elasticsearch 7.6.1 - I was looking at the indexing stats with the following command: GET /\_cat/thread\_pool/write?v&h=id,name,active,queue,rejected,completed Which gives the following output: id… --- ## [Local query parameter for the GetFieldMapping API](https://discuss.elastic.co/t/local-query-parameter-for-the-getfieldmapping-api/227319)
**Author:** [@yfful](https://discuss.elastic.co/u/yfful)\ **Replies:** 1\ **Last updated:** [April 9, 2020, 1:34pm UTC](https://discuss.elastic.co/t/local-query-parameter-for-the-getfieldmapping-api/227319 "2020-04-09T13:34:25Z")
Hi, It is possible to pass a boolean query parameter local \[1\] that controls whether or not the master node should be accessed when resolving a field's mapping. Can you clarify how the information differs when that is … --- ## [Is there a way query 2 indx base on their same field?](https://discuss.elastic.co/t/is-there-a-way-query-2-indx-base-on-their-same-field/227330)
**Author:** [@bainan19820202](https://discuss.elastic.co/u/bainan19820202)\ **Replies:** 0\ **Last updated:** [April 9, 2020, 1:27pm UTC](https://discuss.elastic.co/t/is-there-a-way-query-2-indx-base-on-their-same-field/227330 "2020-04-09T13:27:20Z")
for example index 1 has field A error\_code:value B error\_group:value index 2 was imported from a csv file which includes the explanation for those error logs so what I want to achieve is based on the index1 ' error … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1521) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1523)