# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1685 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1686 --- ## [Created nested fields from Xpath & check for existing documents](https://discuss.elastic.co/t/created-nested-fields-from-xpath-check-for-existing-documents/214414)
**Author:** [@karlm](https://discuss.elastic.co/u/karlm)\ **Replies:** 2\ **Last updated:** [January 14, 2020, 11:46am UTC](https://discuss.elastic.co/t/created-nested-fields-from-xpath-check-for-existing-documents/214414 "2020-01-14T11:46:59Z")
I have two questions; parsing xml data & adding it to an array in a record in an index checking for an existing record in an index and if it exists add the new data of that record to the array of the existing record I… --- ## [All shards failed-yellow status](https://discuss.elastic.co/t/all-shards-failed-yellow-status/214919)
**Author:** [@Deny7](https://discuss.elastic.co/u/Deny7)\ **Replies:** 4\ **Last updated:** [January 14, 2020, 11:16am UTC](https://discuss.elastic.co/t/all-shards-failed-yellow-status/214919 "2020-01-14T11:16:00Z")
ELK: version 6.6.2 Hi, my elasticsearch stopped working after couple weeks. Im monitoring cca 10 tomcat logs ondifferent servers. I run ELK with Logstash on same server(SINGLE NODE). In log there is still repeating: … --- ## [External version control with update\_by\_query](https://discuss.elastic.co/t/external-version-control-with-update-by-query/214975)
**Author:** [@uddhav](https://discuss.elastic.co/u/uddhav)\ **Replies:** 0\ **Last updated:** [January 14, 2020, 10:51am UTC](https://discuss.elastic.co/t/external-version-control-with-update-by-query/214975 "2020-01-14T10:51:32Z")
I have a use-case where I want to have an external version control with update\_by\_query. The same document might get updated a million times so retrying on version conflict is not an option. Any pointers on how to implem… --- ## [Parsing json file with logstash](https://discuss.elastic.co/t/parsing-json-file-with-logstash/214080)
**Author:** [@BeMoore](https://discuss.elastic.co/u/BeMoore)\ **Replies:** 11\ **Last updated:** [January 14, 2020, 10:27am UTC](https://discuss.elastic.co/t/parsing-json-file-with-logstash/214080 "2020-01-14T10:27:15Z")
Happy new year everyone! hoping someone can shed some light on this, i have a weird issue i cant set right with parsing a json file. This is the source json file { "SHA256": "766be5c99ba674f985ce844add4bc5ec423e90811f… --- ## [Use item of field to plot chart](https://discuss.elastic.co/t/use-item-of-field-to-plot-chart/214826)
**Author:** [@Tennis](https://discuss.elastic.co/u/Tennis)\ **Replies:** 2\ **Last updated:** [January 14, 2020, 9:49am UTC](https://discuss.elastic.co/t/use-item-of-field-to-plot-chart/214826 "2020-01-14T09:49:48Z")
My index data: Item: Book, count: 1, time: ... Item: Car, count: 2, time: ... Item: Car, count: 3, time: ... Item: Book, count: 5, time: ... Item: Cat, count: 2, time: ... Item: Car, count: 7, time: ... I want t… --- ## [ELK Watcher Alarms](https://discuss.elastic.co/t/elk-watcher-alarms/213566)
**Author:** [@rj23495](https://discuss.elastic.co/u/rj23495)\ **Replies:** 6\ **Last updated:** [January 14, 2020, 9:45am UTC](https://discuss.elastic.co/t/elk-watcher-alarms/213566 "2020-01-14T09:45:41Z")
Hey, I am trying to create alarms in elk watcher with the following parameters like 5 datapoints in 20 min for value \> 10 but i cannot see anything apart from average median, etc. How can we achieve this type pf alarm co… --- ## [Logstash - csv with a json column - Add a new nested field from the existing field if it is integer](https://discuss.elastic.co/t/logstash-csv-with-a-json-column-add-a-new-nested-field-from-the-existing-field-if-it-is-integer/214967)
**Author:** [@Lakshmi\_Narasimhan\_V](https://discuss.elastic.co/u/Lakshmi_Narasimhan_V)\ **Replies:** 0\ **Last updated:** [January 14, 2020, 9:32am UTC](https://discuss.elastic.co/t/logstash-csv-with-a-json-column-add-a-new-nested-field-from-the-existing-field-if-it-is-integer/214967 "2020-01-14T09:32:44Z")
Below are the details: - CSV File, visitid,labreport, 11111,"\[{""test"":""BUN"",""value"":""0.5""},{""test"":""Creatinie"",""value"":""0.8""},{""test"":""Potassium"",""value"":""3.5""}\]", 22222,"\[{""test"":""BUN"",""v… --- ## [Logstash nested data update is not working as expected](https://discuss.elastic.co/t/logstash-nested-data-update-is-not-working-as-expected/214965)
**Author:** [@Ram\_29](https://discuss.elastic.co/u/Ram_29)\ **Replies:** 0\ **Last updated:** [January 14, 2020, 9:27am UTC](https://discuss.elastic.co/t/logstash-nested-data-update-is-not-working-as-expected/214965 "2020-01-14T09:27:17Z")
Hi I'm having a nested field as below "appdata": { "type":"nested", "include\_in\_parent":true, "properties": { "accessType": { "type": "text", "norms": false, "fields": { "keyword": { "type": "keyword", "ignor… --- ## [Getting specific Repo for Linux](https://discuss.elastic.co/t/getting-specific-repo-for-linux/214762)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 2\ **Last updated:** [January 14, 2020, 9:19am UTC](https://discuss.elastic.co/t/getting-specific-repo-for-linux/214762 "2020-01-14T09:19:38Z")
Hi Team, How to get a specific version repo. of elasticsearch for Red Hat. thanks --- ## [Different behavior with minimum\_should\_match on ES2.4 and ES7.1](https://discuss.elastic.co/t/different-behavior-with-minimum-should-match-on-es2-4-and-es7-1/214960)
**Author:** [@oalfonso](https://discuss.elastic.co/u/oalfonso)\ **Replies:** 0\ **Last updated:** [January 14, 2020, 9:03am UTC](https://discuss.elastic.co/t/different-behavior-with-minimum-should-match-on-es2-4-and-es7-1/214960 "2020-01-14T09:03:07Z")
Hi, First of all, disclaimer: we had to move long before to ES7.X but we are doing right now, from 2.4, shame on us. Well, my case: I've found that minimum\_should\_match has a different behavior when the param given is … --- ## [Elasticsearch(7.5) error of Connection refused when curl http request with real IP address](https://discuss.elastic.co/t/elasticsearch-7-5-error-of-connection-refused-when-curl-http-request-with-real-ip-address/214948)
**Author:** [@longfei.li](https://discuss.elastic.co/u/longfei.li)\ **Replies:** 2\ **Last updated:** [January 14, 2020, 9:00am UTC](https://discuss.elastic.co/t/elasticsearch-7-5-error-of-connection-refused-when-curl-http-request-with-real-ip-address/214948 "2020-01-14T09:00:14Z")
After installing the elasticserach(7.5) on ubuntu 18.04 successfully, I try to send the curl request but get error message. |- curl http://10.13.2.111:9200 curl: (7) Failed to connect to 10.13.2.111 port 9200: Connecti… --- ## [Enrich Processor, Lookups: how to Update once through Enrich Pipeline generated document](https://discuss.elastic.co/t/enrich-processor-lookups-how-to-update-once-through-enrich-pipeline-generated-document/214958)
**Author:** [@Mattteo](https://discuss.elastic.co/u/Mattteo)\ **Replies:** 0\ **Last updated:** [January 14, 2020, 8:59am UTC](https://discuss.elastic.co/t/enrich-processor-lookups-how-to-update-once-through-enrich-pipeline-generated-document/214958 "2020-01-14T08:59:51Z")
We have many Lookup-indexes and one enrich pipeline to decode some values. Data will be imported from a DB using logstash and a pipeline parameter within elasticsearch plugin. output { elasticsearch { index =\> "custo… --- ## [Partial search of attributes(Substring, Case insensitive and special chars included)](https://discuss.elastic.co/t/partial-search-of-attributes-substring-case-insensitive-and-special-chars-included/214883)
**Author:** [@Shail](https://discuss.elastic.co/u/Shail)\ **Replies:** 1\ **Last updated:** [January 14, 2020, 8:41am UTC](https://discuss.elastic.co/t/partial-search-of-attributes-substring-case-insensitive-and-special-chars-included/214883 "2020-01-14T08:41:19Z")
We are using ElasticSearch version 7.2 in our project with following characteristics: The main index mapping contains attributes, embedded objects as well as few nested (array) types. Analyzer : Standard analyzer The… --- ## [Scripting Query for returning cases where array size is larger than X](https://discuss.elastic.co/t/scripting-query-for-returning-cases-where-array-size-is-larger-than-x/214892)
**Author:** [@spdoes](https://discuss.elastic.co/u/spdoes)\ **Replies:** 2\ **Last updated:** [January 14, 2020, 8:36am UTC](https://discuss.elastic.co/t/scripting-query-for-returning-cases-where-array-size-is-larger-than-x/214892 "2020-01-14T08:36:20Z")
I want to make a query that counts how many elements there are in the field that is a array of jsons objects. When I run: {script: { script: "doc\['field\_name'\].values.length() \> 0"}} I get: "No field found for \[field… --- ## [I cant set values in new fields](https://discuss.elastic.co/t/i-cant-set-values-in-new-fields/214930)
**Author:** [@Jonny3](https://discuss.elastic.co/u/Jonny3)\ **Replies:** 1\ **Last updated:** [January 14, 2020, 8:32am UTC](https://discuss.elastic.co/t/i-cant-set-values-in-new-fields/214930 "2020-01-14T08:32:16Z")
I use grok to differentiate the content in each line of the log and mutate to create a new field and be able to assign those values ​​but it doesn't work, write the configuration content literally. I don't have compilin… --- ## [Unable to make any request to elastic cloud](https://discuss.elastic.co/t/unable-to-make-any-request-to-elastic-cloud/214805)
**Author:** [@portal](https://discuss.elastic.co/u/portal)\ **Replies:** 5\ **Last updated:** [January 14, 2020, 8:28am UTC](https://discuss.elastic.co/t/unable-to-make-any-request-to-elastic-cloud/214805 "2020-01-14T08:28:57Z")
Hi, I have been working with elasticsearch for about a year now in development using version 7.1 and the high level rest client (java), deployed my application to azure and created a free trial elastic deployment but una… --- ## [Possible to use custom dhparam for tls?](https://discuss.elastic.co/t/possible-to-use-custom-dhparam-for-tls/214946)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 0\ **Last updated:** [January 14, 2020, 8:17am UTC](https://discuss.elastic.co/t/possible-to-use-custom-dhparam-for-tls/214946 "2020-01-14T08:17:21Z")
Hi, can I use an individual dhparm file with elasticserach tls? If possible I want to be able to use a cusrtom dhparam for rest api and for transport. Do I need to append dhparam fragment to the cert (if using pem mode… --- ## [Possible to use custom dhparam?](https://discuss.elastic.co/t/possible-to-use-custom-dhparam/214945)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 0\ **Last updated:** [January 14, 2020, 8:15am UTC](https://discuss.elastic.co/t/possible-to-use-custom-dhparam/214945 "2020-01-14T08:15:24Z")
Hi, can I use an individual dhparm file with kibana's tls? Do I need to append dhparam fragment to the cert, is there a parameter to load the dhparam file explicitly or will kibana just ignore custom dhparams? Thanks,… --- ## [Winlogbeat service won't start - Server 2016](https://discuss.elastic.co/t/winlogbeat-service-wont-start-server-2016/211374)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 9\ **Last updated:** [January 2, 2020, 8:15pm UTC](https://discuss.elastic.co/t/winlogbeat-service-wont-start-server-2016/211374 "2020-01-02T20:15:22Z")
I'm trying to install winlogbeat on a Server 2016 host but the service won't start. I've tested the config file using: winlogbeat.exe test config and it comes back OK. I've tried running it in the foreground using winlog… --- ## [Nodes randomly disconnected from the ES cluster](https://discuss.elastic.co/t/nodes-randomly-disconnected-from-the-es-cluster/23028)
**Author:** [@Anil\_Karaka](https://discuss.elastic.co/u/Anil_Karaka)\ **Replies:** 9\ **Last updated:** [January 14, 2020, 7:14am UTC](https://discuss.elastic.co/t/nodes-randomly-disconnected-from-the-es-cluster/23028 "2020-01-14T07:14:31Z")
I greped for "removed" in master node and these are the logs that I see. \[2015-04-01 05:32:55,813\]\[INFO \]\[cluster.service \] \[ESBigNode3\] removed {\[ES30GBNode2\]\[Yf8ODQh0TE2\_0hQ35Y0M\_w\]\[ip-153-31-43-55\]\[ine… --- ## [Maximum RAM recommended for data node](https://discuss.elastic.co/t/maximum-ram-recommended-for-data-node/214928)
**Author:** [@malshan](https://discuss.elastic.co/u/malshan)\ **Replies:** 5\ **Last updated:** [January 14, 2020, 7:11am UTC](https://discuss.elastic.co/t/maximum-ram-recommended-for-data-node/214928 "2020-01-14T07:11:40Z")
Hi all, I'm new here, for please forgive for any changes from expected format. ES version: 7.5 I'm going to deploy a hot-warm-cold architecture, with dedicated data, master and ingest nodes. However, even our 'hot' se… --- ## [How can i create a time line](https://discuss.elastic.co/t/how-can-i-create-a-time-line/213982)
**Author:** [@prasannarajan](https://discuss.elastic.co/u/prasannarajan)\ **Replies:** 2\ **Last updated:** [January 14, 2020, 6:29am UTC](https://discuss.elastic.co/t/how-can-i-create-a-time-line/213982 "2020-01-14T06:29:29Z")
i need to visualize a bar chart and have time frame of created date and updated date. but my X-axis can only hold either created or updated.i need to create where both can be seen --- ## [Delegate access on cloud.elastic](https://discuss.elastic.co/t/delegate-access-on-cloud-elastic/214850)
**Author:** [@AQ\_Amra](https://discuss.elastic.co/u/AQ_Amra)\ **Replies:** 2\ **Last updated:** [January 14, 2020, 6:18am UTC](https://discuss.elastic.co/t/delegate-access-on-cloud-elastic/214850 "2020-01-14T06:18:20Z")
Hi, Is it possible to delegate access to other members of our team on the cloud.elastic console? --- ## [Reset elasticsearch password](https://discuss.elastic.co/t/reset-elasticsearch-password/214281)
**Author:** [@talsantos](https://discuss.elastic.co/u/talsantos)\ **Replies:** 2\ **Last updated:** [January 14, 2020, 5:53am UTC](https://discuss.elastic.co/t/reset-elasticsearch-password/214281 "2020-01-14T05:53:05Z")
Hi, I need to reset the password of elasticsearch because I don't know it. And the person who know it, doesn´t work at the company anymore. How can I reset the password? Thank you. Tânia --- ## [On kibana's display of super long fields](https://discuss.elastic.co/t/on-kibanas-display-of-super-long-fields/214701)
**Author:** [@ahahaex](https://discuss.elastic.co/u/ahahaex)\ **Replies:** 1\ **Last updated:** [January 14, 2020, 5:23am UTC](https://discuss.elastic.co/t/on-kibanas-display-of-super-long-fields/214701 "2020-01-14T05:23:28Z")
When there are very long fields in the data，Kibana can't display data very well. So , I set truncated string: 100.Now kibana's discovery can display the abbreviated data normally. But when I want to view the detailed d… --- ## [Possibility to 'join' data in Elasticsearch / Kibana](https://discuss.elastic.co/t/possibility-to-join-data-in-elasticsearch-kibana/214695)
**Author:** [@Matthias\_Seidl](https://discuss.elastic.co/u/Matthias_Seidl)\ **Replies:** 0\ **Last updated:** [January 11, 2020, 8:23am UTC](https://discuss.elastic.co/t/possibility-to-join-data-in-elasticsearch-kibana/214695 "2020-01-11T08:23:08Z")
Hi guys, this has been on my mind for a few days now. I have 2 indices, indA and indB. IndA has a field called "Magic" and indB has a field called "Magic". This is what I'd use in a relational DB to make the join betwe… --- ## [Metric formatting - 2 formats simultaneously](https://discuss.elastic.co/t/metric-formatting-2-formats-simultaneously/214818)
**Author:** [@WishTripES](https://discuss.elastic.co/u/WishTripES)\ **Replies:** 1\ **Last updated:** [January 14, 2020, 4:29am UTC](https://discuss.elastic.co/t/metric-formatting-2-formats-simultaneously/214818 "2020-01-14T04:29:32Z")
I'd like to format a metric in a kibana index pattern for use in a visual using 2 formats .divide(1000) AND '0.0\[0000\]' I've tried all kinds of chain combinations and nothing works. Is this possible? --- ## [In kibana how to draw a graph which should give me average time given with 2 dates(start date & end date)](https://discuss.elastic.co/t/in-kibana-how-to-draw-a-graph-which-should-give-me-average-time-given-with-2-dates-start-date-end-date/214861)
**Author:** [@Amarsha\_N.G](https://discuss.elastic.co/u/Amarsha_N.G)\ **Replies:** 1\ **Last updated:** [January 14, 2020, 4:24am UTC](https://discuss.elastic.co/t/in-kibana-how-to-draw-a-graph-which-should-give-me-average-time-given-with-2-dates-start-date-end-date/214861 "2020-01-14T04:24:20Z")
I am having 2 date field one is PR open date other isPR closed date in my ES \_source with PR num, project name, etc. Now In kibana I want to draw a graph which should give me average time to close a PR. how to achieve … --- ## [Elastic Community Slack](https://discuss.elastic.co/t/elastic-community-slack/214925)
**Author:** [@aravindputrevu](https://discuss.elastic.co/u/aravindputrevu)\ **Replies:** 0\ **Last updated:** [January 14, 2020, 3:19am UTC](https://discuss.elastic.co/t/elastic-community-slack/214925 "2020-01-14T03:19:29Z")
We're pleased to announce our Community Slack instance, a space for real time discussions between community members on topics relating to the Elastic Stack. Please note: Discuss.elastic.co will remain the primary techni… --- ## [Stackoverflow rooms for discussion](https://discuss.elastic.co/t/stackoverflow-rooms-for-discussion/214771)
**Author:** [@rakmo](https://discuss.elastic.co/u/rakmo)\ **Replies:** 1\ **Last updated:** [January 14, 2020, 3:21am UTC](https://discuss.elastic.co/t/stackoverflow-rooms-for-discussion/214771 "2020-01-14T03:21:59Z")
I have created Stackoverflow rooms for Elastic related discussions. I am completely aware that Elastic maintains it's own discussion platform which is awesome, and I am completely in favor of this platform. Stackoverflow… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1684) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1686)