# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1693

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1694

---

## [Can't delete all files elasticsearch](https://discuss.elastic.co/t/cant-delete-all-files-elasticsearch/214413)

<div class="topic-metadata">

**Author:** [@Ramon\_Mateo](https://discuss.elastic.co/u/Ramon_Mateo)\
**Replies:** 1\
**Last updated:** [January 9, 2020, 12:42pm UTC](https://discuss.elastic.co/t/cant-delete-all-files-elasticsearch/214413 "2020-01-09T12:42:06Z")

</div>

Hi I keep trying to delete specific data in an index. My problem is that I have many files in the same index. When I try to delete by query the answer of the query is that it can delete some files but it cannot delete e…

---

## [Performance degradation after upgrading from v6.3.2 to v7.4.2](https://discuss.elastic.co/t/performance-degradation-after-upgrading-from-v6-3-2-to-v7-4-2/213466)

<div class="topic-metadata">

**Author:** [@farin99](https://discuss.elastic.co/u/farin99)\
**Replies:** 9\
**Last updated:** [January 9, 2020, 12:40pm UTC](https://discuss.elastic.co/t/performance-degradation-after-upgrading-from-v6-3-2-to-v7-4-2/213466 "2020-01-09T12:40:22Z")

</div>

Hi, we have a cluster with hot and warm nodes. Our warm nodes have around 400 shards. In 7.4.2, we see an increase of 10% in CPU usage in comparison to 6.3.2. According to the hot threads call stacks, it is related to …

---

## [Transport publishing names vs new +7.0 format and es.transport.cname\_in\_publish\_address](https://discuss.elastic.co/t/transport-publishing-names-vs-new-7-0-format-and-es-transport-cname-in-publish-address/214362)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 10\
**Last updated:** [January 9, 2020, 12:27pm UTC](https://discuss.elastic.co/t/transport-publishing-names-vs-new-7-0-format-and-es-transport-cname-in-publish-address/214362 "2020-01-09T12:27:33Z")

</div>

Got a 7.5.1 cluster of 12 nodes where the elected master node logs deprecation warnings like these per cluster node very frequently: \[2020-01-09T08:52:41,809\]\[WARN \]\[o.e.d.t.TransportInfo \] \[es-mst2\] transport.publi…

---

## [Show only the average values that are more than 80%](https://discuss.elastic.co/t/show-only-the-average-values-that-are-more-than-80/214425)

<div class="topic-metadata">

**Author:** [@jtebbens](https://discuss.elastic.co/u/jtebbens)\
**Replies:** 0\
**Last updated:** [January 9, 2020, 12:14pm UTC](https://discuss.elastic.co/t/show-only-the-average-values-that-are-more-than-80/214425 "2020-01-09T12:14:43Z")

</div>

Hi, I am trying to get a table with Average Utilization of interfaces that are more than 80%. It's like a TopN list but I need a limitation that shows only those interfaces that are more than 80%. I tried a filter opt…

---

## [Failed to load plugin class\[elasticsearch.authenticate.AuthenticatePlugin\]](https://discuss.elastic.co/t/failed-to-load-plugin-class-elasticsearch-authenticate-authenticateplugin/214422)

<div class="topic-metadata">

**Author:** [@kumar\_prasad](https://discuss.elastic.co/u/kumar_prasad)\
**Replies:** 1\
**Last updated:** [January 9, 2020, 12:06pm UTC](https://discuss.elastic.co/t/failed-to-load-plugin-class-elasticsearch-authenticate-authenticateplugin/214422 "2020-01-09T12:06:06Z")

</div>

elasticsearch fails to start, i see the below error Caused by: java.lang.ClassCastException: java.util.LinkedHashMap cannot be cast to java.util.ArrayList at com..elasticsearch.authenticate.accesscontrol.utils.ConfigRe…

---

## [Transport profiles with ES 7.5.0](https://discuss.elastic.co/t/transport-profiles-with-es-7-5-0/214407)

<div class="topic-metadata">

**Author:** [@akappler](https://discuss.elastic.co/u/akappler)\
**Replies:** 1\
**Last updated:** [January 9, 2020, 11:12am UTC](https://discuss.elastic.co/t/transport-profiles-with-es-7-5-0/214407 "2020-01-09T11:12:45Z")

</div>

Hi, we configured ES 6.8.3 with a transport profile without mutual TLS authentication for use with a legacy client. Now we want to upgrade to ES 7.5.0, but the same configuration stopped working. Apparently no server ce…

---

## [Elasticsearching \*Highlighting\* feature breaks highlights by words, not phrases](https://discuss.elastic.co/t/elasticsearching-highlighting-feature-breaks-highlights-by-words-not-phrases/214337)

<div class="topic-metadata">

**Author:** [@Noctis17](https://discuss.elastic.co/u/Noctis17)\
**Replies:** 1\
**Last updated:** [January 9, 2020, 11:08am UTC](https://discuss.elastic.co/t/elasticsearching-highlighting-feature-breaks-highlights-by-words-not-phrases/214337 "2020-01-09T11:08:00Z")

</div>

ElasticSearch v7.5 Hello and good day! I'm using ElasticSearch's feature called Highlighting . ES is able to emphasize the keywords I'm using in my query\_string query, sample query: GET socialmedia/\_search { "s…

---

## [Aggregate doc\_count per document and not per nested item?](https://discuss.elastic.co/t/aggregate-doc-count-per-document-and-not-per-nested-item/214416)

<div class="topic-metadata">

**Author:** [@Laurens\_Mertens](https://discuss.elastic.co/u/Laurens_Mertens)\
**Replies:** 1\
**Last updated:** [January 9, 2020, 10:56am UTC](https://discuss.elastic.co/t/aggregate-doc-count-per-document-and-not-per-nested-item/214416 "2020-01-09T10:56:37Z")

</div>

Hi, my documents have the following document structure (I changed the document type to frog and colors per year here to make it more clear): { "id": "489191", "type": "frog", "color\_types": \[ { …

---

## [Indexing csv with header in elasticsearch](https://discuss.elastic.co/t/indexing-csv-with-header-in-elasticsearch/214229)

<div class="topic-metadata">

**Author:** [@johnkary](https://discuss.elastic.co/u/johnkary)\
**Replies:** 8\
**Last updated:** [January 9, 2020, 10:41am UTC](https://discuss.elastic.co/t/indexing-csv-with-header-in-elasticsearch/214229 "2020-01-09T10:41:40Z")

</div>

Hi all! I' m using Elasticsearch 6.6 and Kibana 6.4 installed on my Google Cloud account. Here is my issue: I have a folder there where csv logs arrive from some IoT devices and with a Logstash pipeline that i created, …

---

## [Multiple logstash servers - unique pipeline name per server?](https://discuss.elastic.co/t/multiple-logstash-servers-unique-pipeline-name-per-server/214417)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 0\
**Last updated:** [January 9, 2020, 10:39am UTC](https://discuss.elastic.co/t/multiple-logstash-servers-unique-pipeline-name-per-server/214417 "2020-01-09T10:39:12Z")

</div>

Hi, I have 2 logstash servers with the same pipeline, all of the beats are going to 1 server at the moment, if I go into stack monitoring I see 1 pipeline (main) from there I want to see the pipeline and the performance…

---

## [Logstash 7.4.0 "grok " filter not work or might some problem with Logstash](https://discuss.elastic.co/t/logstash-7-4-0-grok-filter-not-work-or-might-some-problem-with-logstash/214408)

<div class="topic-metadata">

**Author:** [@Krunal\_Patel](https://discuss.elastic.co/u/Krunal_Patel)\
**Replies:** 0\
**Last updated:** [January 9, 2020, 10:13am UTC](https://discuss.elastic.co/t/logstash-7-4-0-grok-filter-not-work-or-might-some-problem-with-logstash/214408 "2020-01-09T10:13:01Z")

</div>

Here, I have tried to send MySQL's error log data through filebeat 7.4.0 to Logstash 7.4.0 and after filter, the required information, send these all data to Elastic and then viewing through Kibana. There has some prob…

---

## [Received response for a request that has timed out](https://discuss.elastic.co/t/received-response-for-a-request-that-has-timed-out/214377)

<div class="topic-metadata">

**Author:** [@Lawrence](https://discuss.elastic.co/u/Lawrence)\
**Replies:** 0\
**Last updated:** [January 9, 2020, 9:09am UTC](https://discuss.elastic.co/t/received-response-for-a-request-that-has-timed-out/214377 "2020-01-09T09:09:42Z")

</div>

Hello, In recent weeks, the cluster goes back many errors of "Timeout" while there was no change over. The cluster is currently composed of 7 nodes (3 master / data / ingest and 4 datas) and is running on version 5.6.7…

---

## [Should elasticsearch data restore work when the cluster is red?](https://discuss.elastic.co/t/should-elasticsearch-data-restore-work-when-the-cluster-is-red/214357)

<div class="topic-metadata">

**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\
**Replies:** 2\
**Last updated:** [January 9, 2020, 8:52am UTC](https://discuss.elastic.co/t/should-elasticsearch-data-restore-work-when-the-cluster-is-red/214357 "2020-01-09T08:52:08Z")

</div>

Hi, I have taken a backup on my data on a healthy cluster. Now, due to index curruption or some other reason my cluster went into red state and I tried to restore my data. All the restore curl commands was running fine…

---

## [Logstash Aggregate filter plugin works in 7.5.0, not in 6.6.1](https://discuss.elastic.co/t/logstash-aggregate-filter-plugin-works-in-7-5-0-not-in-6-6-1/214260)

<div class="topic-metadata">

**Author:** [@bjosve](https://discuss.elastic.co/u/bjosve)\
**Replies:** 4\
**Last updated:** [January 9, 2020, 8:26am UTC](https://discuss.elastic.co/t/logstash-aggregate-filter-plugin-works-in-7-5-0-not-in-6-6-1/214260 "2020-01-09T08:26:31Z")

</div>

Hi, I have a problem with Logstash Aggregate filter. The exact same filter works in Logstash 7.5.0 but not in Logstash 6.6.1 and I can't find out why. The Aggregate filter version in 7.5.0 is 2.9.1 and in 6.6.1 it is 2.…

---

## [Read csv file automatically without using 'logstash -f'](https://discuss.elastic.co/t/read-csv-file-automatically-without-using-logstash-f/214298)

<div class="topic-metadata">

**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\
**Replies:** 5\
**Last updated:** [January 9, 2020, 7:09am UTC](https://discuss.elastic.co/t/read-csv-file-automatically-without-using-logstash-f/214298 "2020-01-09T07:09:19Z")

</div>

hello, i have a csv file that i view on kibana (i have already created an index), the problem is that every time i have to type the command 'logstash -f myfile.csv', I want to automate this task, that is to say that the…

---

## [Multiple logstash instance need to run on window 10](https://discuss.elastic.co/t/multiple-logstash-instance-need-to-run-on-window-10/214198)

<div class="topic-metadata">

**Author:** [@Pramod\_Thakur](https://discuss.elastic.co/u/Pramod_Thakur)\
**Replies:** 2\
**Last updated:** [January 9, 2020, 6:59am UTC](https://discuss.elastic.co/t/multiple-logstash-instance-need-to-run-on-window-10/214198 "2020-01-09T06:59:31Z")

</div>

Hi Folks, On my local machine logstash is working fine when I am running only one logstash pipeline, but when I am trying to run second logstash pipeline (config file) it says that Logstash could not be started becaus…

---

## [Getting error when i am running kibana on multiple elasticsearch hosts](https://discuss.elastic.co/t/getting-error-when-i-am-running-kibana-on-multiple-elasticsearch-hosts/214346)

<div class="topic-metadata">

**Author:** [@Bhayyasaheb\_Koke](https://discuss.elastic.co/u/Bhayyasaheb_Koke)\
**Replies:** 0\
**Last updated:** [January 9, 2020, 5:44am UTC](https://discuss.elastic.co/t/getting-error-when-i-am-running-kibana-on-multiple-elasticsearch-hosts/214346 "2020-01-09T05:44:38Z")

</div>

log \[05:43:50.912\] \[warning\]\[migrations\] Unable to connect to Elasticsearch. Error: \[index\_not\_found\_exception\] no such index \[.kibana\_task\_manager\], with { resource.type="index\_or\_alias" & resource.id=".kibana\_task\_ma…

---

## [UI for search](https://discuss.elastic.co/t/ui-for-search/214042)

<div class="topic-metadata">

**Author:** [@rubpa](https://discuss.elastic.co/u/rubpa)\
**Replies:** 2\
**Last updated:** [January 9, 2020, 5:26am UTC](https://discuss.elastic.co/t/ui-for-search/214042 "2020-01-09T05:26:20Z")

</div>

We have an existing MySQL based application which has data over several years. We have created meaningful SQL queries (i.e. join/flatten the data) and indexed that data into elasticsearch. And we want to offer this data …

---

## [How to use the connection that kibana is using to Elasticsearch in kibana plugin?](https://discuss.elastic.co/t/how-to-use-the-connection-that-kibana-is-using-to-elasticsearch-in-kibana-plugin/213669)

<div class="topic-metadata">

**Author:** [@jaytran](https://discuss.elastic.co/u/jaytran)\
**Replies:** 5\
**Last updated:** [January 9, 2020, 4:41am UTC](https://discuss.elastic.co/t/how-to-use-the-connection-that-kibana-is-using-to-elasticsearch-in-kibana-plugin/213669 "2020-01-09T04:41:02Z")

</div>

Hi all, I'm building a kibana plugin with a new connection such as below: const elasticsearch = require('elasticsearch'); const client = new elasticsearch.Client({ host: '127.0.0.1:9200'}); const search = function se…

---

## [Logstash Sql Server](https://discuss.elastic.co/t/logstash-sql-server/213979)

<div class="topic-metadata">

**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Replies:** 5\
**Last updated:** [January 9, 2020, 4:37am UTC](https://discuss.elastic.co/t/logstash-sql-server/213979 "2020-01-09T04:37:17Z")

</div>

I have integrate elk stack with sql server. When i run logstash to parse the data the query parse the data and logstash service shutdown after parsing the records. Is there any way around that the service will run in the…

---

## [Index full document or subset?](https://discuss.elastic.co/t/index-full-document-or-subset/214144)

<div class="topic-metadata">

**Author:** [@Rvs](https://discuss.elastic.co/u/Rvs)\
**Replies:** 7\
**Last updated:** [January 9, 2020, 2:53am UTC](https://discuss.elastic.co/t/index-full-document-or-subset/214144 "2020-01-09T02:53:44Z")

</div>

I Had a newbie question. Would appreciate some advice here. Should i index my entire document or only the data (subset)within my document that i know will be searched on. What is the philosophy of elasticsearch. Should…

---

## [Xpack.security.audit.outputs: \[ index, logfile \] in 7.x?](https://discuss.elastic.co/t/xpack-security-audit-outputs-index-logfile-in-7-x/214336)

<div class="topic-metadata">

**Author:** [@retr0s](https://discuss.elastic.co/u/retr0s)\
**Replies:** 0\
**Last updated:** [January 9, 2020, 2:39am UTC](https://discuss.elastic.co/t/xpack-security-audit-outputs-index-logfile-in-7-x/214336 "2020-01-09T02:39:44Z")

</div>

Hello, Uptil 6.2 the security audits could be sent to an ES index by setting this line elasticsearch.yml file xpack.security.audit.outputs: \[ index, logfile \] https://www.elastic.co/guide/en/x-pack/current/auditing.ht…

---

## [Pyspark write to elasticsearch with empty fields](https://discuss.elastic.co/t/pyspark-write-to-elasticsearch-with-empty-fields/214328)

<div class="topic-metadata">

**Author:** [@xiaochong2dai](https://discuss.elastic.co/u/xiaochong2dai)\
**Replies:** 0\
**Last updated:** [January 9, 2020, 1:42am UTC](https://discuss.elastic.co/t/pyspark-write-to-elasticsearch-with-empty-fields/214328 "2020-01-09T01:42:36Z")

</div>

Hi I'm new to elasticsearch and right now writing a spark dataframe to elasticsearch. The dataframe has below schema: df.printSchema() root |-- col1: array (nullable = true) | |-- element: struct (containsNull …

---

## [How to connect elasticsearch with kibana without using the username and password](https://discuss.elastic.co/t/how-to-connect-elasticsearch-with-kibana-without-using-the-username-and-password/214315)

<div class="topic-metadata">

**Author:** [@Deepthi\_Tummala](https://discuss.elastic.co/u/Deepthi_Tummala)\
**Replies:** 0\
**Last updated:** [January 8, 2020, 10:32pm UTC](https://discuss.elastic.co/t/how-to-connect-elasticsearch-with-kibana-without-using-the-username-and-password/214315 "2020-01-08T22:32:58Z")

</div>

Hi, I want to connect kibana to elasticsearch without entering the username and password in kibana.yml file. I am using Basic version of the elasticsearch. So I am unable to use PKI realm. Is there anyother way to conne…

---

## ["missing" agg weird results](https://discuss.elastic.co/t/missing-agg-weird-results/212430)

<div class="topic-metadata">

**Author:** [@dvisz-inf](https://discuss.elastic.co/u/dvisz-inf)\
**Replies:** 1\
**Last updated:** [January 8, 2020, 9:46pm UTC](https://discuss.elastic.co/t/missing-agg-weird-results/212430 "2020-01-08T21:46:47Z")

</div>

I get some odd looking results from this query: POST my-index/\_search?pretty { "size": 0, "aggs": { "a": { "terms": { "field": "foo.a" }, "aggs": { "missing\_b": { "mis…

---

## [How to auto-set zabbix\_host?](https://discuss.elastic.co/t/how-to-auto-set-zabbix-host/213961)

<div class="topic-metadata">

**Author:** [@Philip\_Brown](https://discuss.elastic.co/u/Philip_Brown)\
**Replies:** 17\
**Last updated:** [January 8, 2020, 9:13pm UTC](https://discuss.elastic.co/t/how-to-auto-set-zabbix-host/213961 "2020-01-08T21:13:01Z")

</div>

I'm trying to set up a logstash-\> zabbix gateway, that collects inputs from multiple servers running filebeat. I gather that zabbix\_host is a mandatory field. It also seems like it would be set to the ACTUAL generating…

---

## [Cannot write to a field alias \[user.domain\]](https://discuss.elastic.co/t/cannot-write-to-a-field-alias-user-domain/213944)

<div class="topic-metadata">

**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\
**Replies:** 1\
**Last updated:** [January 8, 2020, 9:08pm UTC](https://discuss.elastic.co/t/cannot-write-to-a-field-alias-user-domain/213944 "2020-01-08T21:08:33Z")

</div>

I recently installed a single instance of Winlogbeat 7.5.0 on a host to test log ingestion from the 7.5.0 beater version into Logstash and then into our production Elasticsearch environment. Our Elastic environment is on…

---

## [Drill down Kibana visualization with another chart](https://discuss.elastic.co/t/drill-down-kibana-visualization-with-another-chart/214140)

<div class="topic-metadata">

**Author:** [@MattEdwards](https://discuss.elastic.co/u/MattEdwards)\
**Replies:** 1\
**Last updated:** [January 8, 2020, 8:11pm UTC](https://discuss.elastic.co/t/drill-down-kibana-visualization-with-another-chart/214140 "2020-01-08T20:11:32Z")

</div>

Is there a way to create an option in Kibana where if user clicks on a visualization chart that it would drill down to a more in-depth chart. If so, can you please advise how to perform this? Thanks, Matt

---

## [Kibana Upgrade](https://discuss.elastic.co/t/kibana-upgrade/214167)

<div class="topic-metadata">

**Author:** [@balaji\_18](https://discuss.elastic.co/u/balaji_18)\
**Replies:** 1\
**Last updated:** [January 8, 2020, 8:08pm UTC](https://discuss.elastic.co/t/kibana-upgrade/214167 "2020-01-08T20:08:37Z")

</div>

How to upgrade kibana 7.4.2 to 7.5.1 in windows...

---

## [Custom Y-Axis aggregation](https://discuss.elastic.co/t/custom-y-axis-aggregation/214262)

<div class="topic-metadata">

**Author:** [@Xuan\_Nam\_Dang](https://discuss.elastic.co/u/Xuan_Nam_Dang)\
**Replies:** 1\
**Last updated:** [January 8, 2020, 7:50pm UTC](https://discuss.elastic.co/t/custom-y-axis-aggregation/214262 "2020-01-08T19:50:07Z")

</div>

I have a custom field that i want to use to sort the data in line chart for Y-axis. Currently the options for Y-axis is either count or any other Metric aggregation. My field consists of integers only, which i want to im…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1692)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1694)
