# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1617

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1618

---

## [How to add a new node to existing cluster](https://discuss.elastic.co/t/how-to-add-a-new-node-to-existing-cluster/220090)

<div class="topic-metadata">

**Author:** [@zeghitsama](https://discuss.elastic.co/u/zeghitsama)\
**Replies:** 3\
**Last updated:** [February 20, 2020, 10:03am UTC](https://discuss.elastic.co/t/how-to-add-a-new-node-to-existing-cluster/220090 "2020-02-20T10:03:05Z")

</div>

Hi, i want to add a new to the existing cluster. I already setup a new elasticsearch on another vm and named it as node-2. My first elasticsearch named it as node-1. Already configured both of it and restart the elastics…

---

## [ES 1.7 completion suggester throws zero results](https://discuss.elastic.co/t/es-1-7-completion-suggester-throws-zero-results/220092)

<div class="topic-metadata">

**Author:** [@deltafarce](https://discuss.elastic.co/u/deltafarce)\
**Replies:** 2\
**Last updated:** [February 20, 2020, 9:51am UTC](https://discuss.elastic.co/t/es-1-7-completion-suggester-throws-zero-results/220092 "2020-02-20T09:51:32Z")

</div>

I'm aware of 1.7 reaching EOL but I have to make this work on it. What I defined in the mapping: "mappings": { "questions": { "\_id": {"store": "yes", "path": "id"}, "\_source": {"enabled"…

---

## [How to pass multiple values from Data Table for next drilldown to filter data?](https://discuss.elastic.co/t/how-to-pass-multiple-values-from-data-table-for-next-drilldown-to-filter-data/219801)

<div class="topic-metadata">

**Author:** [@venkata.kodapaka](https://discuss.elastic.co/u/venkata.kodapaka)\
**Replies:** 4\
**Last updated:** [February 20, 2020, 9:54am UTC](https://discuss.elastic.co/t/how-to-pass-multiple-values-from-data-table-for-next-drilldown-to-filter-data/219801 "2020-02-20T09:54:46Z")

</div>

Hi Team, I've built a Visualization as Data Table as Summary report in which I have multiple columns. When I click on any cell, it has to open the respective drilldown data where in which Column1 and Column2 have to be …

---

## [Failed to load elasticsearch nodes](https://discuss.elastic.co/t/failed-to-load-elasticsearch-nodes/220107)

<div class="topic-metadata">

**Author:** [@shivsandeep](https://discuss.elastic.co/u/shivsandeep)\
**Replies:** 3\
**Last updated:** [February 20, 2020, 9:42am UTC](https://discuss.elastic.co/t/failed-to-load-elasticsearch-nodes/220107 "2020-02-20T09:42:45Z")

</div>

hi, i have setup elasticsearch 5.6.3 using docker but when i am trying to access that using my local spring application i am getting below error: " failed to load elasticsearch nodes : org.elasticsearch.client.transpo…

---

## [Unable to install ingest attachment plugin in windows using elasticsearch-plugin install ingest-attachment](https://discuss.elastic.co/t/unable-to-install-ingest-attachment-plugin-in-windows-using-elasticsearch-plugin-install-ingest-attachment/220104)

<div class="topic-metadata">

**Author:** [@samanvi\_sweety](https://discuss.elastic.co/u/samanvi_sweety)\
**Replies:** 6\
**Last updated:** [February 20, 2020, 9:24am UTC](https://discuss.elastic.co/t/unable-to-install-ingest-attachment-plugin-in-windows-using-elasticsearch-plugin-install-ingest-attachment/220104 "2020-02-20T09:24:51Z")

</div>

Exception in thread "main" java.net.ConnectException: Connection timed out: connect at java.base/java.net.PlainSocketImpl.connect0(Native Method) at java.base/java.net.PlainSocketImpl.socketConnect(PlainS…

---

## [Efficient way to query Elasticsearch](https://discuss.elastic.co/t/efficient-way-to-query-elasticsearch/220094)

<div class="topic-metadata">

**Author:** [@sidshirke](https://discuss.elastic.co/u/sidshirke)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 9:18am UTC](https://discuss.elastic.co/t/efficient-way-to-query-elasticsearch/220094 "2020-02-20T09:18:55Z")

</div>

Below is the short version of the dataset I am working on. ID TYPE DATA SERIES\_ID VALIDITY MOVIE\_1 MOVIE MOVIE\_DATA\_1 NULL 2000-2050 MOVIE\_2 MOVIE MOVIE\_DATA\_2 NULL 2000-2050 SERIES\_1 TV\_SERI…

---

## [Error from \_cat APIs: Values less than -1 bytes are not supported](https://discuss.elastic.co/t/error-from-cat-apis-values-less-than-1-bytes-are-not-supported/220071)

<div class="topic-metadata">

**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\
**Replies:** 3\
**Last updated:** [February 20, 2020, 9:11am UTC](https://discuss.elastic.co/t/error-from-cat-apis-values-less-than-1-bytes-are-not-supported/220071 "2020-02-20T09:11:10Z")

</div>

Elasticsearch cluster running 7.1.1. I was adding/removing some nodes to the cluster, but no other config changes took place. The \_cat/nodes and \_cat/indices API started returning an error as below $ curl localhost:9200…

---

## [Td-agent logs stopped working](https://discuss.elastic.co/t/td-agent-logs-stopped-working/219907)

<div class="topic-metadata">

**Author:** [@krushnakantB](https://discuss.elastic.co/u/krushnakantB)\
**Replies:** 2\
**Last updated:** [February 20, 2020, 9:06am UTC](https://discuss.elastic.co/t/td-agent-logs-stopped-working/219907 "2020-02-20T09:06:36Z")

</div>

Hi All, Need a guideline for below mentioned issue. In our environment, we are using Elasticsearch to store web logs and we also use td-agent to pass data to elasticsearch. Elasticsearch version is 7.2.0, Kibana versio…

---

## [Template for dynamic indexes](https://discuss.elastic.co/t/template-for-dynamic-indexes/220134)

<div class="topic-metadata">

**Author:** [@tennaen](https://discuss.elastic.co/u/tennaen)\
**Replies:** 0\
**Last updated:** [February 20, 2020, 8:58am UTC](https://discuss.elastic.co/t/template-for-dynamic-indexes/220134 "2020-02-20T08:58:53Z")

</div>

Hello, i have a pipeline that reads from postgres and create index for every event. It is really hard to manage which event will occur and what index will be created. Is there any way to write a template, which will be …

---

## [Extracting docs with whitespaces between words in a field](https://discuss.elastic.co/t/extracting-docs-with-whitespaces-between-words-in-a-field/220116)

<div class="topic-metadata">

**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\
**Replies:** 2\
**Last updated:** [February 20, 2020, 8:53am UTC](https://discuss.elastic.co/t/extracting-docs-with-whitespaces-between-words-in-a-field/220116 "2020-02-20T08:53:29Z")

</div>

I have a field with zipcodes, some zipcodes are continuous without any whitespace some have whitespaces in between. Ex: "abc 123". How can filter out or extract the docs with whitespace in between words using either the…

---

## [Testing Watcher without gold licence](https://discuss.elastic.co/t/testing-watcher-without-gold-licence/220128)

<div class="topic-metadata">

**Author:** [@Jakob](https://discuss.elastic.co/u/Jakob)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 8:45am UTC](https://discuss.elastic.co/t/testing-watcher-without-gold-licence/220128 "2020-02-20T08:45:20Z")

</div>

Hello, I'm trying to implement watchers for our cluster however I am waiting for confirmation from support about getting gold licence. While I'm waiting for it I would like to start testing the watcher configurations I…

---

## [Elasticsearch store time series data when there are many properties fields (about 60000 fields)](https://discuss.elastic.co/t/elasticsearch-store-time-series-data-when-there-are-many-properties-fields-about-60000-fields/220114)

<div class="topic-metadata">

**Author:** [@qinlin](https://discuss.elastic.co/u/qinlin)\
**Replies:** 4\
**Last updated:** [February 20, 2020, 8:38am UTC](https://discuss.elastic.co/t/elasticsearch-store-time-series-data-when-there-are-many-properties-fields-about-60000-fields/220114 "2020-02-20T08:38:21Z")

</div>

store 60000 points value every 500 milliseconds with elasticsearch,there are two ways to design elasticsearch mapping: 1.one pointName/one timestamp in one doc,like this: \_id timestamp pointName value uuid1 …

---

## [Match a keyword field containing a newline character](https://discuss.elastic.co/t/match-a-keyword-field-containing-a-newline-character/219867)

<div class="topic-metadata">

**Author:** [@kamiunsu](https://discuss.elastic.co/u/kamiunsu)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 8:31am UTC](https://discuss.elastic.co/t/match-a-keyword-field-containing-a-newline-character/219867 "2020-02-20T08:31:01Z")

</div>

I'm able to sort on a nested field using the following params: "sort": \[ { "scores.value": { "mode": "sum", "order": "desc", "nested": { "path": "scores", "filter": …

---

## [Index Mappings Compare](https://discuss.elastic.co/t/index-mappings-compare/220010)

<div class="topic-metadata">

**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 8:28am UTC](https://discuss.elastic.co/t/index-mappings-compare/220010 "2020-02-20T08:28:46Z")

</div>

Is there a way to compare the index mappings between 2 indices?

---

## [Huge json data update in kibana using python](https://discuss.elastic.co/t/huge-json-data-update-in-kibana-using-python/220121)

<div class="topic-metadata">

**Author:** [@SangeethaSivakumar](https://discuss.elastic.co/u/SangeethaSivakumar)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 8:24am UTC](https://discuss.elastic.co/t/huge-json-data-update-in-kibana-using-python/220121 "2020-02-20T08:24:50Z")

</div>

{ "statusCode": 413, "error": "Request Entity Too Large", "message": "Payload content length greater than maximum allowed: 1048576" } Getting the above error while updating the json data in kibana. File size is huge…

---

## [Custom type field example not work in Elasticsearch 7.6](https://discuss.elastic.co/t/custom-type-field-example-not-work-in-elasticsearch-7-6/220031)

<div class="topic-metadata">

**Author:** [@andrewbien](https://discuss.elastic.co/u/andrewbien)\
**Replies:** 4\
**Last updated:** [February 20, 2020, 8:16am UTC](https://discuss.elastic.co/t/custom-type-field-example-not-work-in-elasticsearch-7-6/220031 "2020-02-20T08:16:28Z")

</div>

Hi everyone, I got a problem when I try to run an example of Custom type field section in this tutorial: https://www.elastic.co/guide/en/elasticsearch/reference/7.6/removal-of-types.html#\_custom\_type\_field I executed th…

---

## [\-How to sort within nested objects](https://discuss.elastic.co/t/how-to-sort-within-nested-objects/220095)

<div class="topic-metadata">

**Author:** [@Shafath\_Ahmed](https://discuss.elastic.co/u/Shafath_Ahmed)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 8:01am UTC](https://discuss.elastic.co/t/how-to-sort-within-nested-objects/220095 "2020-02-20T08:01:25Z")

</div>

Hi All I have a document like the following: { "applicant" : { "firstName" : "tasd", "lastName" : "asdfasdf" }, "employmentsHistory" : \[ { "companyName" : "asdfa 1", "isCurrentlyWorkin…

---

## [Elasticsearch \_bulk insert node js axios](https://discuss.elastic.co/t/elasticsearch-bulk-insert-node-js-axios/220099)

<div class="topic-metadata">

**Author:** [@chase2981](https://discuss.elastic.co/u/chase2981)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 7:59am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-insert-node-js-axios/220099 "2020-02-20T07:59:45Z")

</div>

axios.post(\`http://ec2-99-999-99-999.us-west-2.compute.amazonaws.com:9200/\_bulk\`, \`{ "update" : {"\_id" : "1", "\_index" : "test"} }\\n{ "doc" : {"field2" : "value2"} }\\n\`, { headers: { 'Content-type': 'applicat…

---

## [Qualys API integration into Elasticsearch](https://discuss.elastic.co/t/qualys-api-integration-into-elasticsearch/219888)

<div class="topic-metadata">

**Author:** [@tanner8302](https://discuss.elastic.co/u/tanner8302)\
**Replies:** 3\
**Last updated:** [February 20, 2020, 7:44am UTC](https://discuss.elastic.co/t/qualys-api-integration-into-elasticsearch/219888 "2020-02-20T07:44:08Z")

</div>

I am a current customer of Qualys and would like to create a reoccuring API call to Qualys from my Elasticsearch instance. I am unclear on where I create and schedule cURL command to access this data. When I try and us…

---

## [Is there a way to reindex data in ES from start to now()?](https://discuss.elastic.co/t/is-there-a-way-to-reindex-data-in-es-from-start-to-now/219830)

<div class="topic-metadata">

**Author:** [@fallenreaper](https://discuss.elastic.co/u/fallenreaper)\
**Replies:** 4\
**Last updated:** [February 20, 2020, 7:42am UTC](https://discuss.elastic.co/t/is-there-a-way-to-reindex-data-in-es-from-start-to-now/219830 "2020-02-20T07:42:23Z")

</div>

I figured there was a built in way to say: Hey Master node, reindex on propertyA, propertyB, propertyC for independent faster lookups. My ES DB is about 250g large now on a single dual purpose Master/Data node. I was …

---

## [Troubles with cyrillic data](https://discuss.elastic.co/t/troubles-with-cyrillic-data/220109)

<div class="topic-metadata">

**Author:** [@ImMushroom](https://discuss.elastic.co/u/ImMushroom)\
**Replies:** 0\
**Last updated:** [February 20, 2020, 7:25am UTC](https://discuss.elastic.co/t/troubles-with-cyrillic-data/220109 "2020-02-20T07:25:45Z")

</div>

Hello! I have problems with putting cyrillic data into indices. I have a messages like 13:32.907017-17,CALL,1,p:processName=ut,Context=ОбщийМодуль.Вызов : ОбщийМодуль.прОбщегоНазначенияСервер.Модуль.ПолучитьТекстОпов…

---

## [Logstash 7.6 using older version of beats input plugin](https://discuss.elastic.co/t/logstash-7-6-using-older-version-of-beats-input-plugin/220103)

<div class="topic-metadata">

**Author:** [@aksadvance](https://discuss.elastic.co/u/aksadvance)\
**Replies:** 0\
**Last updated:** [February 20, 2020, 6:59am UTC](https://discuss.elastic.co/t/logstash-7-6-using-older-version-of-beats-input-plugin/220103 "2020-02-20T06:59:32Z")

</div>

Hi, I have setup 2 machines one for filebeat and other for logstash. Done all of the settings as required and filebeat is also transmitting data to logstash. The problem I see is filebeat is sending log lines in loop me…

---

## [Compare fields of different documents in the same index](https://discuss.elastic.co/t/compare-fields-of-different-documents-in-the-same-index/219756)

<div class="topic-metadata">

**Author:** [@JamieUnix](https://discuss.elastic.co/u/JamieUnix)\
**Replies:** 4\
**Last updated:** [February 20, 2020, 6:59am UTC](https://discuss.elastic.co/t/compare-fields-of-different-documents-in-the-same-index/219756 "2020-02-20T06:59:10Z")

</div>

There are a lot of discussions around this topic but haven't found a solution for my problem. I am trying to compare fields of different documents in the same index. For example,let's say i have three documents as below…

---

## [Lowercase Field Name](https://discuss.elastic.co/t/lowercase-field-name/219987)

<div class="topic-metadata">

**Author:** [@akeslo](https://discuss.elastic.co/u/akeslo)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 6:57am UTC](https://discuss.elastic.co/t/lowercase-field-name/219987 "2020-02-20T06:57:43Z")

</div>

Hi All, How do I rename a field name so that it is in all lowercase? The field name is utilizing a value from another field (cs2Label is uppercase and I'd like to convert it to lowercase before I rename the field): mu…

---

## [Finding the age of tickets](https://discuss.elastic.co/t/finding-the-age-of-tickets/220084)

<div class="topic-metadata">

**Author:** [@katara](https://discuss.elastic.co/u/katara)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 6:34am UTC](https://discuss.elastic.co/t/finding-the-age-of-tickets/220084 "2020-02-20T06:34:42Z")

</div>

Hi All, Ive been working on finding the age of a ticket with respect to its open and closed time. @Fabio-sama, helped me with the below ruby, input { http\_poller { urls =\> { snowinc =\> { url =\> "…

---

## [Events Received Rate Suddenly Dropped](https://discuss.elastic.co/t/events-received-rate-suddenly-dropped/220096)

<div class="topic-metadata">

**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\
**Replies:** 0\
**Last updated:** [February 20, 2020, 6:27am UTC](https://discuss.elastic.co/t/events-received-rate-suddenly-dropped/220096 "2020-02-20T06:27:15Z")

</div>

Hi all, I was looking at my stack monitoring and I was emitting just under 10,000 e/s and then all of a sudden it dropped to around 5,000 e/s and has stayed there. There were no changes made, so there shouldn't be a ~50…

---

## [Date range with now-20d not working on nested fields (long post)](https://discuss.elastic.co/t/date-range-with-now-20d-not-working-on-nested-fields-long-post/219700)

<div class="topic-metadata">

**Author:** [@GX1](https://discuss.elastic.co/u/GX1)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 5:21am UTC](https://discuss.elastic.co/t/date-range-with-now-20d-not-working-on-nested-fields-long-post/219700 "2020-02-20T05:21:44Z")

</div>

I came across a strange scenario and cant understand why I can not match a nested field by date range basically I want to find documents where field 'data.api\_data.listings\_favorites.ts' is within the last 20 days, if I…

---

## [Search using multiple strings](https://discuss.elastic.co/t/search-using-multiple-strings/220089)

<div class="topic-metadata">

**Author:** [@Darshan\_Kamat](https://discuss.elastic.co/u/Darshan_Kamat)\
**Replies:** 0\
**Last updated:** [February 20, 2020, 5:21am UTC](https://discuss.elastic.co/t/search-using-multiple-strings/220089 "2020-02-20T05:21:01Z")

</div>

i have below setup Filebeat-\>es\<-Kibana i need to capture 3 api logs with order id . I have logs like below :: 2020 Feb 19 10:10:06:136---\> API 1 order id -\<\> \<\<---SOAP XML Payload logs of API 1 --\>\> 2020 Feb 19 10…

---

## [From scripted field to logstash](https://discuss.elastic.co/t/from-scripted-field-to-logstash/220062)

<div class="topic-metadata">

**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 1:40am UTC](https://discuss.elastic.co/t/from-scripted-field-to-logstash/220062 "2020-02-20T01:40:51Z")

</div>

I dunno if this is the place, but since the destination is Logstash's ruby filter, I think it is. I have this massive scripted field... and I'm considering reindexing and adding it to the pipeline config, but I'm not re…

---

## [Strigo lab ended before start virtual classroom](https://discuss.elastic.co/t/strigo-lab-ended-before-start-virtual-classroom/219885)

<div class="topic-metadata">

**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\
**Replies:** 7\
**Last updated:** [February 20, 2020, 3:59am UTC](https://discuss.elastic.co/t/strigo-lab-ended-before-start-virtual-classroom/219885 "2020-02-20T03:59:28Z")

</div>

I was taking on-demand class "Vega Visualizations in Kibana" , but I could not start a virtual classroom even though after "Setting Up Your Lab". Now, I click "Lab" button and the new tab will show up saying "This cours…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1616)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1618)
