# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1544 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1545 --- ## [Undercounting of doc\_counts in Terms agg V.S. scripted terms agg](https://discuss.elastic.co/t/undercounting-of-doc-counts-in-terms-agg-v-s-scripted-terms-agg/225722)
**Author:** [@gpiimetrics](https://discuss.elastic.co/u/gpiimetrics)\ **Replies:** 0\ **Last updated:** [March 30, 2020, 5:26pm UTC](https://discuss.elastic.co/t/undercounting-of-doc-counts-in-terms-agg-v-s-scripted-terms-agg/225722 "2020-03-30T17:26:53Z")
I was experimenting a scripted terms agg that converts a field to String, because we have all data types at different times of the project (I know it's crazy but have to deal with it now). Then I noticed a mismatch in b… --- ## [What is the best way to increase storage capacity?](https://discuss.elastic.co/t/what-is-the-best-way-to-increase-storage-capacity/225489)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 2\ **Last updated:** [March 30, 2020, 4:43pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-increase-storage-capacity/225489 "2020-03-30T16:43:48Z")
Hello Elasticians ! I need to add more data to Elastic and didn't found clear information on Google or forums So, what is for you the best way to achieve this and what are the impact ? extend actual disk ? attach… --- ## [Unable to create elasticsearch cluster in docker swarm](https://discuss.elastic.co/t/unable-to-create-elasticsearch-cluster-in-docker-swarm/225570)
**Author:** [@sammi](https://discuss.elastic.co/u/sammi)\ **Replies:** 9\ **Last updated:** [March 30, 2020, 4:23pm UTC](https://discuss.elastic.co/t/unable-to-create-elasticsearch-cluster-in-docker-swarm/225570 "2020-03-30T16:23:26Z")
i am trying to create a 2 node docker swarm elasticsearch cluster. have been trying this from 2 days but couldn't succeed. please help me. below is the compose file, first node joins the cluster but second not able to jo… --- ## [How to create indexes in bulk using Elasticseach\_dsl?](https://discuss.elastic.co/t/how-to-create-indexes-in-bulk-using-elasticseach-dsl/225525)
**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\ **Replies:** 1\ **Last updated:** [March 30, 2020, 4:20pm UTC](https://discuss.elastic.co/t/how-to-create-indexes-in-bulk-using-elasticseach-dsl/225525 "2020-03-30T16:20:21Z")
Hi, I was able to create a single index using below code: Single index code from elasticsearch import Elasticsearch from elasticsearch\_dsl import Index,Search,Document, analyzer, tokenizer,\\ … --- ## [Custom tokenizer for letter and digits](https://discuss.elastic.co/t/custom-tokenizer-for-letter-and-digits/225317)
**Author:** [@lfcnassif](https://discuss.elastic.co/u/lfcnassif)\ **Replies:** 2\ **Last updated:** [March 30, 2020, 3:49pm UTC](https://discuss.elastic.co/t/custom-tokenizer-for-letter-and-digits/225317 "2020-03-30T15:49:38Z")
Hi, Searched the docs and I was not able to find a solution to create a custom tokenizer to break text at any char different from digit or unicode letter (like those returned by java Character.isLetterOrDigit()). In the… --- ## [Java Heap Space](https://discuss.elastic.co/t/java-heap-space/225496)
**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\ **Replies:** 2\ **Last updated:** [March 30, 2020, 3:46pm UTC](https://discuss.elastic.co/t/java-heap-space/225496 "2020-03-30T15:46:08Z")
Hi, I am getting OutOfMemoryError following are the JVM sizes \> intx CompilerThreadStackSize = 0 {pd product} \> uintx ErgoHeapSizeLimit =… --- ## [Logstash Json Split Data is NOT loading correctly and gives Http Status 409 at logstash log file](https://discuss.elastic.co/t/logstash-json-split-data-is-not-loading-correctly-and-gives-http-status-409-at-logstash-log-file/225700)
**Author:** [@Ranga\_Bhupal\_G](https://discuss.elastic.co/u/Ranga_Bhupal_G)\ **Replies:** 2\ **Last updated:** [March 30, 2020, 3:34pm UTC](https://discuss.elastic.co/t/logstash-json-split-data-is-not-loading-correctly-and-gives-http-status-409-at-logstash-log-file/225700 "2020-03-30T15:34:48Z")
Hi, We have a table that contains JSON data as text/string. Logstash has below configuration that uses JDBC, JSON, SPLIT, HTTP and ELASTICSEARCH plugins. Logstash error contains Http Status 409 and Data is NOT loading… --- ## [Aggregation with distinct null elements](https://discuss.elastic.co/t/aggregation-with-distinct-null-elements/225393)
**Author:** [@Ekaterina\_Nekrasova](https://discuss.elastic.co/u/Ekaterina_Nekrasova)\ **Replies:** 2\ **Last updated:** [March 30, 2020, 3:23pm UTC](https://discuss.elastic.co/t/aggregation-with-distinct-null-elements/225393 "2020-03-30T15:23:20Z")
Hello everybody ! I have PersonType with groupId field, which can be null, or even doesn't exist { Id: 1 Name : ToTo, GroupId: 1 } { Id: 2 Name : TaTo, GroupId: 2 } { Id: 3 Name : ToTa, GroupId: null } { Id: 4 Name : T… --- ## [ELK Certification](https://discuss.elastic.co/t/elk-certification/225121)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 1\ **Last updated:** [March 30, 2020, 3:19pm UTC](https://discuss.elastic.co/t/elk-certification/225121 "2020-03-30T15:19:56Z")
Hi All, I would like to attempt ELK certifications, could some one suggest where can i find certification path details and which are the basic certifications. Please feel free to move this to right group Thanks --- ## [Kibana text and background color changes](https://discuss.elastic.co/t/kibana-text-and-background-color-changes/225620)
**Author:** [@balaji\_18](https://discuss.elastic.co/u/balaji_18)\ **Replies:** 1\ **Last updated:** [March 30, 2020, 3:14pm UTC](https://discuss.elastic.co/t/kibana-text-and-background-color-changes/225620 "2020-03-30T15:14:36Z")
Is there is any way to change the text and background color of metric, ? And also if i change the background color the bar and pie chart should change their colors automatically based on the background color, Is there a… --- ## [Getting \_dateparsefailure error](https://discuss.elastic.co/t/getting-dateparsefailure-error/225613)
**Author:** [@niudaye123](https://discuss.elastic.co/u/niudaye123)\ **Replies:** 1\ **Last updated:** [March 30, 2020, 3:13pm UTC](https://discuss.elastic.co/t/getting-dateparsefailure-error/225613 "2020-03-30T15:13:01Z")
Hi, I am getting \_dateparsefailure in tags, Not sure why it is. I checked the date match format and did not see any issue though, Any idea what's the issue? thanks! Here is the original message: Mar 27 16:48:18.875 PD… --- ## [Curl XPOST errors not supported 406](https://discuss.elastic.co/t/curl-xpost-errors-not-supported-406/225509)
**Author:** [@Ketan\_Chachad](https://discuss.elastic.co/u/Ketan_Chachad)\ **Replies:** 3\ **Last updated:** [March 30, 2020, 3:10pm UTC](https://discuss.elastic.co/t/curl-xpost-errors-not-supported-406/225509 "2020-03-30T15:10:29Z")
I have installed elasticsearch 7.6.1 on an AWS EC2 instance. When I give the following curl command from Windows I get a valid JSON response: curl -XGET "http://\:9200" However when I give the following command… --- ## [Logstash, split field and remove field](https://discuss.elastic.co/t/logstash-split-field-and-remove-field/225410)
**Author:** [@SBH](https://discuss.elastic.co/u/SBH)\ **Replies:** 3\ **Last updated:** [March 30, 2020, 3:09pm UTC](https://discuss.elastic.co/t/logstash-split-field-and-remove-field/225410 "2020-03-30T15:09:10Z")
Hi, working on my logstash conf file. I have a remove field like this: remove\_field =\> \["\[data\]\[tasks\]\[data\]"\] And then i have a split field like this: split {field =\> "\[data\]\[tasks\]"} But when i see it in Discover… --- ## [Length filter: array index out of bounds exception](https://discuss.elastic.co/t/length-filter-array-index-out-of-bounds-exception/225261)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 4\ **Last updated:** [March 30, 2020, 3:08pm UTC](https://discuss.elastic.co/t/length-filter-array-index-out-of-bounds-exception/225261 "2020-03-30T15:08:38Z")
I encountered a strange issue, when a query fails depending on the position of a term and only then the length filter is active (see below): works: GET test/\_search?filter\_path=\*\*.productNumber { "query": { "mat… --- ## [Autocomplete enhancement](https://discuss.elastic.co/t/autocomplete-enhancement/225473)
**Author:** [@vijay2](https://discuss.elastic.co/u/vijay2)\ **Replies:** 2\ **Last updated:** [March 30, 2020, 2:56pm UTC](https://discuss.elastic.co/t/autocomplete-enhancement/225473 "2020-03-30T14:56:58Z")
Hello, I have built a e-commerce autocomplete feature which works with the product names. Searching “Gucci” gives me phrases found in the rest of the product title. But I would like to build something like Amazon, E.… --- ## [Vega-lite stacked plot mistake](https://discuss.elastic.co/t/vega-lite-stacked-plot-mistake/225624)
**Author:** [@nb03briceno](https://discuss.elastic.co/u/nb03briceno)\ **Replies:** 1\ **Last updated:** [March 30, 2020, 2:55pm UTC](https://discuss.elastic.co/t/vega-lite-stacked-plot-mistake/225624 "2020-03-30T14:55:19Z")
Hello everyone, I hope somebody could help me. I'm trying to make an stacked plot in vega-lite. Everything appears to be fine but for some reason the graph does not allow one bar or (area) to be over the other. Instead … --- ## [Map embedded json object to one field](https://discuss.elastic.co/t/map-embedded-json-object-to-one-field/225667)
**Author:** [@cowensel](https://discuss.elastic.co/u/cowensel)\ **Replies:** 1\ **Last updated:** [March 30, 2020, 2:49pm UTC](https://discuss.elastic.co/t/map-embedded-json-object-to-one-field/225667 "2020-03-30T14:49:32Z")
I can see there a number of posts about this but I cannot seem to make heads or tails of them. We have some logs that get sent to our ELK server where an embedded Json object is sent. I would like to map everything in t… --- ## [Logstash: retrying failed action with response code: 403; reason=\> blocked by: FORBIDDEN/5/index read-only (api)](https://discuss.elastic.co/t/logstash-retrying-failed-action-with-response-code-403-reason-blocked-by-forbidden-5-index-read-only-api/225405)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 1\ **Last updated:** [March 30, 2020, 2:47pm UTC](https://discuss.elastic.co/t/logstash-retrying-failed-action-with-response-code-403-reason-blocked-by-forbidden-5-index-read-only-api/225405 "2020-03-30T14:47:47Z")
We have set up our production environment with a 5 ES node cluster (3 hot and 2 warm) with a curator executing cronjob to push older logs into the warm nodes. As per industry regulations, curator password expired and was… --- ## [Load balancing Kibana behind Nginx](https://discuss.elastic.co/t/load-balancing-kibana-behind-nginx/225113)
**Author:** [@craigothy](https://discuss.elastic.co/u/craigothy)\ **Replies:** 3\ **Last updated:** [March 30, 2020, 2:40pm UTC](https://discuss.elastic.co/t/load-balancing-kibana-behind-nginx/225113 "2020-03-30T14:40:16Z")
We are using nginx as our load balancer. It is working just fine for elastic. However, when logging into kibana, it shows "no data". However, we can go to index management and see indices have been created that match ou… --- ## [Timestamp not as expected in kibana](https://discuss.elastic.co/t/timestamp-not-as-expected-in-kibana/225637)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 2\ **Last updated:** [March 30, 2020, 2:35pm UTC](https://discuss.elastic.co/t/timestamp-not-as-expected-in-kibana/225637 "2020-03-30T14:35:05Z")
Hello I would like to see the indexed @timestamp value as i correctly see it in the kibana graph. So i woud like to see 7:30:29:772 instead of 4:30:29:772. As it can be seen from the image i am loosing 1+2=3 hours tot… --- ## [Compile a category hierarchy list from several different such hierarchies](https://discuss.elastic.co/t/compile-a-category-hierarchy-list-from-several-different-such-hierarchies/225696)
**Author:** [@Catalin](https://discuss.elastic.co/u/Catalin)\ **Replies:** 0\ **Last updated:** [March 30, 2020, 2:34pm UTC](https://discuss.elastic.co/t/compile-a-category-hierarchy-list-from-several-different-such-hierarchies/225696 "2020-03-30T14:34:57Z")
My final goal is to create the most relevant category hierarchy steaming from several different such hierarchies. But for a first step, being given a number of lists each containing 1 or more categories, I'd like to cre… --- ## [Enrich pipeline policy using child record attributes](https://discuss.elastic.co/t/enrich-pipeline-policy-using-child-record-attributes/224528)
**Author:** [@askids](https://discuss.elastic.co/u/askids)\ **Replies:** 4\ **Last updated:** [March 30, 2020, 2:26pm UTC](https://discuss.elastic.co/t/enrich-pipeline-policy-using-child-record-attributes/224528 "2020-03-30T14:26:03Z")
hi, Is it possible to use enrich policy pipeline to perform a lookup against a child record to pull required attributes? I have 1 to 1 parent-child data in another index. But the attributes that I want to be included ar… --- ## [Kibana Elasticsearch error](https://discuss.elastic.co/t/kibana-elasticsearch-error/225694)
**Author:** [@thywoe](https://discuss.elastic.co/u/thywoe)\ **Replies:** 0\ **Last updated:** [March 30, 2020, 2:20pm UTC](https://discuss.elastic.co/t/kibana-elasticsearch-error/225694 "2020-03-30T14:20:42Z")
Error: Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"The length of \[message.keyword\] field of \[4Ne\_K3EB1QJ6ixoFhFAq\] doc of \[filebeat-7.6.1\] index has exceeded \[1… --- ## [How to apply percentile range filter on kibana visualization for data table](https://discuss.elastic.co/t/how-to-apply-percentile-range-filter-on-kibana-visualization-for-data-table/225524)
**Author:** [@nishnath.nandi](https://discuss.elastic.co/u/nishnath.nandi)\ **Replies:** 1\ **Last updated:** [March 30, 2020, 2:10pm UTC](https://discuss.elastic.co/t/how-to-apply-percentile-range-filter-on-kibana-visualization-for-data-table/225524 "2020-03-30T14:10:51Z")
I am very new to Elastic Search and using Kibana. I am trying to create a visualization for response times for different pages on a website. For each page hit, we capture response times and was able to create a visualiza… --- ## [Sub aggregations on bucket key](https://discuss.elastic.co/t/sub-aggregations-on-bucket-key/224755)
**Author:** [@Michael\_Jackson1](https://discuss.elastic.co/u/Michael_Jackson1)\ **Replies:** 3\ **Last updated:** [March 30, 2020, 2:03pm UTC](https://discuss.elastic.co/t/sub-aggregations-on-bucket-key/224755 "2020-03-30T14:03:14Z")
Hello everyone, new member here. I have been testing the path\_hierarchy tokenizer. Just looking for advice with my situation. I have a simple index with docs that look like this: { "keyword": "stuff and things", … --- ## [Fingerprint- SHA256 takes a lot more space then MURMUR3](https://discuss.elastic.co/t/fingerprint-sha256-takes-a-lot-more-space-then-murmur3/225574)
**Author:** [@aurimas](https://discuss.elastic.co/u/aurimas)\ **Replies:** 4\ **Last updated:** [March 30, 2020, 2:00pm UTC](https://discuss.elastic.co/t/fingerprint-sha256-takes-a-lot-more-space-then-murmur3/225574 "2020-03-30T14:00:34Z")
Hi, I have problem with duplicate documents, so I am using method with Logstash described here: It seems to do the job as after dedublication I get smaller number of documents. But then I get another problem, then … --- ## [Sum aggregation on "counter like" object field](https://discuss.elastic.co/t/sum-aggregation-on-counter-like-object-field/224884)
**Author:** [@fhdz](https://discuss.elastic.co/u/fhdz)\ **Replies:** 3\ **Last updated:** [March 30, 2020, 1:58pm UTC](https://discuss.elastic.co/t/sum-aggregation-on-counter-like-object-field/224884 "2020-03-30T13:58:53Z")
Hi there, I find myself with 'counter like' fields, e.g. for counting some occurrences of my docs in different domains. (When a doc is used in a context of such or such domain, the counter is incremented.) I have an o… --- ## [Recommendations for syslog ingestion?](https://discuss.elastic.co/t/recommendations-for-syslog-ingestion/223557)
**Author:** [@\_finack](https://discuss.elastic.co/u/_finack)\ **Replies:** 3\ **Last updated:** [March 30, 2020, 1:46pm UTC](https://discuss.elastic.co/t/recommendations-for-syslog-ingestion/223557 "2020-03-30T13:46:22Z")
We have many applications where we would like to ingest their log data into Elastic Stack; however, the log shipping mechanism is syslog (BSD, CEF, or RFC 5424). Our use case is SIEM & threat hunting. Here are options I… --- ## [Reconnaissance d'objet geo dans elasticsearch](https://discuss.elastic.co/t/reconnaissance-dobjet-geo-dans-elasticsearch/225478)
**Author:** [@Jalil](https://discuss.elastic.co/u/Jalil)\ **Replies:** 5\ **Last updated:** [March 30, 2020, 1:20pm UTC](https://discuss.elastic.co/t/reconnaissance-dobjet-geo-dans-elasticsearch/225478 "2020-03-30T13:20:33Z")
Bonjour, Mon objectif est d'indexer une collection depuis mongodb vers ES afin d'exploiter les points geo sur la MAP kibana. J'utilise mongo-connector. Ma collection mongodb contient entre autre un objet comme suit : "… --- ## [Read timed out .. Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down!](https://discuss.elastic.co/t/read-timed-out-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/225680)
**Author:** [@jl2035](https://discuss.elastic.co/u/jl2035)\ **Replies:** 0\ **Last updated:** [March 30, 2020, 1:18pm UTC](https://discuss.elastic.co/t/read-timed-out-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/225680 "2020-03-30T13:18:41Z")
Hi, I've found thousands of forum post on this topic, but not a single solution. This is my desperate attempt to solve my problem creating my own thread. Any help would be awesome, this is really difficult to setup. I'm… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1543) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1545)