# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1769 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1770 --- ## [Update value of a filed in a list of objects - Elasticsearch (update by query)](https://discuss.elastic.co/t/update-value-of-a-filed-in-a-list-of-objects-elasticsearch-update-by-query/208740)
**Author:** [@Abhilash\_Sathe1](https://discuss.elastic.co/u/Abhilash_Sathe1)\ **Replies:** 0\ **Last updated:** [November 20, 2019, 4:22pm UTC](https://discuss.elastic.co/t/update-value-of-a-filed-in-a-list-of-objects-elasticsearch-update-by-query/208740 "2019-11-20T16:22:05Z")
As shown in the image, I need to create a query that will accept a comma separated string of the id field and whichever id field's value matches, the flag is\_read will change to true. I tried to create something like … --- ## [Index URLs in Elasticsearch and make them clickable in Kibana](https://discuss.elastic.co/t/index-urls-in-elasticsearch-and-make-them-clickable-in-kibana/208738)
**Author:** [@Steztric](https://discuss.elastic.co/u/Steztric)\ **Replies:** 0\ **Last updated:** [November 20, 2019, 4:20pm UTC](https://discuss.elastic.co/t/index-urls-in-elasticsearch-and-make-them-clickable-in-kibana/208738 "2019-11-20T16:20:18Z")
I am working on a .NET project so I am using NEST. I want to index an object that has a URL property. I want to index it in such a way that Kibana recognises that it is a URL and allows me to click on it to open the URL … --- ## [Cluster unstable after upgrade to ES 7.4.2](https://discuss.elastic.co/t/cluster-unstable-after-upgrade-to-es-7-4-2/208731)
**Author:** [@octave](https://discuss.elastic.co/u/octave)\ **Replies:** 0\ **Last updated:** [November 20, 2019, 3:30pm UTC](https://discuss.elastic.co/t/cluster-unstable-after-upgrade-to-es-7-4-2/208731 "2019-11-20T15:30:45Z")
Hello, We recently upgraded our cluster from 6.8 to 7.4.2 and are now facing a major stability issue: the cluster randomly loses its master then is unable to re-elect a new one. Our current configuration is: 6 nodes … --- ## [Elastic Cloud Architecture Selection and System Requirements Suggestion](https://discuss.elastic.co/t/elastic-cloud-architecture-selection-and-system-requirements-suggestion/208644)
**Author:** [@firat.tekin](https://discuss.elastic.co/u/firat.tekin)\ **Replies:** 1\ **Last updated:** [November 20, 2019, 3:36pm UTC](https://discuss.elastic.co/t/elastic-cloud-architecture-selection-and-system-requirements-suggestion/208644 "2019-11-20T15:36:29Z")
Hey there, I just tried Elastic Cloud service and looks like it meets my expectations. I want to ask some questions before further steps. I've got approximately 600GB of data currently, which strictly defined as "keywo… --- ## [Boundaries - When to use Kibana/ES and when NOT to use](https://discuss.elastic.co/t/boundaries-when-to-use-kibana-es-and-when-not-to-use/208232)
**Author:** [@lbi2000](https://discuss.elastic.co/u/lbi2000)\ **Replies:** 1\ **Last updated:** [November 20, 2019, 3:39am UTC](https://discuss.elastic.co/t/boundaries-when-to-use-kibana-es-and-when-not-to-use/208232 "2019-11-20T03:39:45Z")
I work for a major IT services enterprise that builds analytics solutions for our clients. We have aggressively dug our heals into leveraging/using ElasticSearch and Kibana in places where other RDBMS + Web-SQL-Visua… --- ## [Retry: Pipeline to Pipeline Output Variable Expansion](https://discuss.elastic.co/t/retry-pipeline-to-pipeline-output-variable-expansion/208674)
**Author:** [@Lukas\_L](https://discuss.elastic.co/u/Lukas_L)\ **Replies:** 3\ **Last updated:** [November 20, 2019, 3:30pm UTC](https://discuss.elastic.co/t/retry-pipeline-to-pipeline-output-variable-expansion/208674 "2019-11-20T15:30:24Z")
Hello, I have the same question as described in this post. Since there hasnt been any replies I thought i would just open the same topic again. I am currently using Logstash-7.3.1 with this configuration for all inc… --- ## [Access Denied Exception in elasticsearch v5.6](https://discuss.elastic.co/t/access-denied-exception-in-elasticsearch-v5-6/206276)
**Author:** [@amirhossein](https://discuss.elastic.co/u/amirhossein)\ **Replies:** 16\ **Last updated:** [November 20, 2019, 3:20pm UTC](https://discuss.elastic.co/t/access-denied-exception-in-elasticsearch-v5-6/206276 "2019-11-20T15:20:36Z")
Hi, i have a cluster with 3 nodes. elasticsearch UID is different and their GID is same, But when I get the information of the snapshot on the Kibana, all the processes failed, here is part of the logs of the snapshot: … --- ## [Word delimiter filter with preserve\_original](https://discuss.elastic.co/t/word-delimiter-filter-with-preserve-original/207123)
**Author:** [@skowron-line](https://discuss.elastic.co/u/skowron-line)\ **Replies:** 3\ **Last updated:** [November 20, 2019, 3:05pm UTC](https://discuss.elastic.co/t/word-delimiter-filter-with-preserve-original/207123 "2019-11-20T15:05:47Z")
I have such case My mapping is PUT my\_index { "settings": { "analysis": { "filter": { "my\_length": { "type": "length", "min": 2 }, "my\_word": { "type": … --- ## [Hot/Warm архитектура и Graylog](https://discuss.elastic.co/t/hot-warm-graylog/208719)
**Author:** [@Damir\_Tazetdinov](https://discuss.elastic.co/u/Damir_Tazetdinov)\ **Replies:** 1\ **Last updated:** [November 20, 2019, 3:02pm UTC](https://discuss.elastic.co/t/hot-warm-graylog/208719 "2019-11-20T15:02:25Z")
Добрый день! Планирую развернуть кластер Graylog и пока остановился на такой архитектуре: 3 ноды Graylog + MongoDB 3 Мастер ноды ES 3 Дата ноды ES (на 1 индекс планирую 2 Shard и 2 реплики) В процессе чтения доков п… --- ## [Kibana snapshot and restore policies - how to set snapshot retention, meaning how long to keep specific snapshots](https://discuss.elastic.co/t/kibana-snapshot-and-restore-policies-how-to-set-snapshot-retention-meaning-how-long-to-keep-specific-snapshots/208717)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 0\ **Last updated:** [November 20, 2019, 2:37pm UTC](https://discuss.elastic.co/t/kibana-snapshot-and-restore-policies-how-to-set-snapshot-retention-meaning-how-long-to-keep-specific-snapshots/208717 "2019-11-20T14:37:02Z")
Hi Elastic and kibana 7.4.2 There is this feature in kibana, that I can create snapshot policies to automatically back up my cluster. My question is, how the old snapshots are getting deleted automatically and how can… --- ## [Trying to setup a cluster on version 6.5](https://discuss.elastic.co/t/trying-to-setup-a-cluster-on-version-6-5/208724)
**Author:** [@gotigers](https://discuss.elastic.co/u/gotigers)\ **Replies:** 0\ **Last updated:** [November 20, 2019, 2:49pm UTC](https://discuss.elastic.co/t/trying-to-setup-a-cluster-on-version-6-5/208724 "2019-11-20T14:49:19Z")
I am trying to setup a 3 node cluster but only two are joining. the yml settings are the same on all three vm's. Am I missing a particular setting? Thanks in advance! --- ## [Changed mapping from text+keyword to keyword, queries not working now](https://discuss.elastic.co/t/changed-mapping-from-text-keyword-to-keyword-queries-not-working-now/208723)
**Author:** [@nahiko2000](https://discuss.elastic.co/u/nahiko2000)\ **Replies:** 0\ **Last updated:** [November 20, 2019, 2:47pm UTC](https://discuss.elastic.co/t/changed-mapping-from-text-keyword-to-keyword-queries-not-working-now/208723 "2019-11-20T14:47:24Z")
Hi! I have some indices which some field mappings where text and keyword. In Kibana I used "field.keyword" to use the keyword mapped value. As well, in an application I made I used queries pointing to "field.keyword". … --- ## [После обновления ELK Stack до версии 7.4.2 Kibana server is not ready yet](https://discuss.elastic.co/t/elk-stack-7-4-2-kibana-server-is-not-ready-yet/208301)
**Author:** [@mrbig](https://discuss.elastic.co/u/mrbig)\ **Replies:** 6\ **Last updated:** [November 20, 2019, 2:47pm UTC](https://discuss.elastic.co/t/elk-stack-7-4-2-kibana-server-is-not-ready-yet/208301 "2019-11-20T14:47:17Z")
Добрый день! Подскажите пожалуйста что может быть после обновления elk stack появилась ошибка Kibana server is not ready yet. Elasticsearch работает Logstash работает Kibana тоже работает. Что может быть? --- ## [Автоматизация управления темплейтами ES из Logstash](https://discuss.elastic.co/t/es-logstash/208471)
**Author:** [@74db36a597f21b891b3f](https://discuss.elastic.co/u/74db36a597f21b891b3f)\ **Replies:** 3\ **Last updated:** [November 20, 2019, 2:46pm UTC](https://discuss.elastic.co/t/es-logstash/208471 "2019-11-20T14:46:29Z")
Всем добрый день. Задумался тут, как лучше хранить и бэкапить настройки шаблонов в ES. Сейчас редактирую их в Cerebro, но хотелось бы хранить в каком-нибудь гите и пушить автоматически. Logstash вроде как умеет прогруж… --- ## [1KB JSON doc becomes 17KB after indexing with many fields of type "Keyword"](https://discuss.elastic.co/t/1kb-json-doc-becomes-17kb-after-indexing-with-many-fields-of-type-keyword/208720)
**Author:** [@Madala](https://discuss.elastic.co/u/Madala)\ **Replies:** 0\ **Last updated:** [November 20, 2019, 2:44pm UTC](https://discuss.elastic.co/t/1kb-json-doc-becomes-17kb-after-indexing-with-many-fields-of-type-keyword/208720 "2019-11-20T14:44:45Z")
Hi Team, We are trying to do our Volume sizing exercise and found that a json doc of size 1KB is taking up about 17KB in the index. Our use case is metrics related and most of the fields do not need indexing for search.… --- ## [Kibana visualize top 10 Apache requests](https://discuss.elastic.co/t/kibana-visualize-top-10-apache-requests/208557)
**Author:** [@alesabat](https://discuss.elastic.co/u/alesabat)\ **Replies:** 2\ **Last updated:** [November 20, 2019, 2:13pm UTC](https://discuss.elastic.co/t/kibana-visualize-top-10-apache-requests/208557 "2019-11-20T14:13:50Z")
Hello everyone. I'm a little stuck here... I want to create a visualization on Kibana which shows ten most invoked requests of a web site (I named the field which contains de request URL "UrlRequest"), and I would like … --- ## [Sending sysmon logs from Winlogbeat to Logstash](https://discuss.elastic.co/t/sending-sysmon-logs-from-winlogbeat-to-logstash/208177)
**Author:** [@Coder\_HK](https://discuss.elastic.co/u/Coder_HK)\ **Replies:** 4\ **Last updated:** [November 20, 2019, 1:49pm UTC](https://discuss.elastic.co/t/sending-sysmon-logs-from-winlogbeat-to-logstash/208177 "2019-11-20T13:49:13Z")
I have installed ELK on ubuntu in vmware and Windows 10 is my main OS. I want to send sysmon logs to logstash that's on ubuntu from my windows system through winlogsbeat please guide me step by step how to do it .. --- ## [Logstash Kafka Input: divided message received](https://discuss.elastic.co/t/logstash-kafka-input-divided-message-received/208705)
**Author:** [@jaypark81](https://discuss.elastic.co/u/jaypark81)\ **Replies:** 0\ **Last updated:** [November 20, 2019, 1:35pm UTC](https://discuss.elastic.co/t/logstash-kafka-input-divided-message-received/208705 "2019-11-20T13:35:07Z")
Hello, I have a question for Logstash Kafka input. Here are versions for what I use: Elasticsearch: 7.3.2 Logstash version: 7.2.1 Kafka version: 2.1.0 Here is input configuration of Logstash: input { kafka { … --- ## [Logstash Syntax :: Force a Newly-Created Field to be an Integer?](https://discuss.elastic.co/t/logstash-syntax-force-a-newly-created-field-to-be-an-integer/208562)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 4\ **Last updated:** [November 20, 2019, 1:32pm UTC](https://discuss.elastic.co/t/logstash-syntax-force-a-newly-created-field-to-be-an-integer/208562 "2019-11-20T13:32:41Z")
Hi Logstash Gurus, I need to build off another syntax question I asked, here. In that post, I learned how to use a Ruby Filter to create a new field, then populate that field with the product of other fields: ruby {… --- ## [Updated data with tracking column for sql server binary timestamp](https://discuss.elastic.co/t/updated-data-with-tracking-column-for-sql-server-binary-timestamp/208700)
**Author:** [@WalterLeff](https://discuss.elastic.co/u/WalterLeff)\ **Replies:** 0\ **Last updated:** [November 20, 2019, 1:20pm UTC](https://discuss.elastic.co/t/updated-data-with-tracking-column-for-sql-server-binary-timestamp/208700 "2019-11-20T13:20:23Z")
Hi all, I have a table with a version column which is a timestamp as a binary. This is changed every time there is a change/update in the row. I can transmit this table to elastic but my format is not really correct \<… --- ## [Add New Node](https://discuss.elastic.co/t/add-new-node/208606)
**Author:** [@Hoang\_Ph\_m](https://discuss.elastic.co/u/Hoang_Ph_m)\ **Replies:** 1\ **Last updated:** [November 20, 2019, 12:30pm UTC](https://discuss.elastic.co/t/add-new-node/208606 "2019-11-20T12:30:02Z")
Hello! My name is Hoang. I'm a newbie. I doing a project and use ElasticSearch. In Cluster, these are three nodes. I config, each shard is (3 primary shard and 2 replica). Now, I want to add a new node to Cluster. Quest… --- ## [After rolling over, new index doesn't have dynamic template mappings from old one](https://discuss.elastic.co/t/after-rolling-over-new-index-doesnt-have-dynamic-template-mappings-from-old-one/205716)
**Author:** [@sensei-wu](https://discuss.elastic.co/u/sensei-wu)\ **Replies:** 2\ **Last updated:** [November 20, 2019, 12:30pm UTC](https://discuss.elastic.co/t/after-rolling-over-new-index-doesnt-have-dynamic-template-mappings-from-old-one/205716 "2019-11-20T12:30:01Z")
In elasticsearch 6.4, I have an alias /foo which had an index of the format /foo-000001. This index was created with a mapping which also included dynamic template. When data grew, I rolled over using POST /foo/\_rollove… --- ## [Ealsticsearch is stop when Xpack setiing enable](https://discuss.elastic.co/t/ealsticsearch-is-stop-when-xpack-setiing-enable/207613)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 14\ **Last updated:** [November 20, 2019, 12:01pm UTC](https://discuss.elastic.co/t/ealsticsearch-is-stop-when-xpack-setiing-enable/207613 "2019-11-20T12:01:08Z")
When I configure X-pack setting Enable my elasticsearch services stop. What to do? --- ## [How to sub aggregation from nested aggregation in Java](https://discuss.elastic.co/t/how-to-sub-aggregation-from-nested-aggregation-in-java/208688)
**Author:** [@Soumitra\_Goswami](https://discuss.elastic.co/u/Soumitra_Goswami)\ **Replies:** 0\ **Last updated:** [November 20, 2019, 11:55am UTC](https://discuss.elastic.co/t/how-to-sub-aggregation-from-nested-aggregation-in-java/208688 "2019-11-20T11:55:33Z")
I have some nested fields, of which I want to calculate all distinct values, for example: "author":{ "type":"nested", "properties":{ "first\_name":{ "type": "text", "fields": { "keyword": { … --- ## [FSCrawler over HTTPS](https://discuss.elastic.co/t/fscrawler-over-https/208592)
**Author:** [@sealsj](https://discuss.elastic.co/u/sealsj)\ **Replies:** 1\ **Last updated:** [November 20, 2019, 11:50am UTC](https://discuss.elastic.co/t/fscrawler-over-https/208592 "2019-11-20T11:50:47Z")
Greetings: I am trying to use FSCrawler to crawl a remote site over https. Does anyone know if this is even possible? I've read the docs and tried doing it over SSH butI get the "Error while crawling https://myserver.pa… --- ## [Why use checksum to verify segment files？](https://discuss.elastic.co/t/why-use-checksum-to-verify-segment-files/208636)
**Author:** [@cigarl](https://discuss.elastic.co/u/cigarl)\ **Replies:** 7\ **Last updated:** [November 20, 2019, 11:47am UTC](https://discuss.elastic.co/t/why-use-checksum-to-verify-segment-files/208636 "2019-11-20T11:47:40Z")
When I restart the cluster,I found that many copies are copied from 0，the reason is that the checksum of the segment files is inconsistent,and then I wrote a demo by using the Lucene interface，the result is the same oper… --- ## [Build failure for elasticsearch 7.2 on PPC64LE](https://discuss.elastic.co/t/build-failure-for-elasticsearch-7-2-on-ppc64le/208687)
**Author:** [@sarvesh.tamba](https://discuss.elastic.co/u/sarvesh.tamba)\ **Replies:** 0\ **Last updated:** [November 20, 2019, 11:43am UTC](https://discuss.elastic.co/t/build-failure-for-elasticsearch-7-2-on-ppc64le/208687 "2019-11-20T11:43:12Z")
I am trying to build elasticsearch version 7.2 on PPC64LE inside a registry.access.redhat.com/ubi7/ubi-minimal based container. Initially I ran into error: unmappable character (0xE0) for encoding US-ASCII errors, w… --- ## [Using Nested Field like main data source](https://discuss.elastic.co/t/using-nested-field-like-main-data-source/208571)
**Author:** [@salihklc](https://discuss.elastic.co/u/salihklc)\ **Replies:** 0\ **Last updated:** [November 19, 2019, 7:51pm UTC](https://discuss.elastic.co/t/using-nested-field-like-main-data-source/208571 "2019-11-19T19:51:23Z")
Hello everyone, I'm developing a website which using elasticsearch for showing data on datatable with fully supported features (paging,sorting, etc.) (you can see example data below, and easy to figure out thats a groc… --- ## [Is there a way to add bar value above each bar](https://discuss.elastic.co/t/is-there-a-way-to-add-bar-value-above-each-bar/208640)
**Author:** [@SheetalRIL](https://discuss.elastic.co/u/SheetalRIL)\ **Replies:** 2\ **Last updated:** [November 20, 2019, 11:20am UTC](https://discuss.elastic.co/t/is-there-a-way-to-add-bar-value-above-each-bar/208640 "2019-11-20T11:20:47Z")
Is there a way to add the value of each bar above it? P.S. I have already gone through Show bar value above each bar · Issue #7116 · elastic/kibana · GitHub --- ## [APM Server has still not connected to Elasticsearch (2, previous was closed)](https://discuss.elastic.co/t/apm-server-has-still-not-connected-to-elasticsearch-2-previous-was-closed/206491)
**Author:** [@fraballi](https://discuss.elastic.co/u/fraballi)\ **Replies:** 11\ **Last updated:** [November 20, 2019, 11:12am UTC](https://discuss.elastic.co/t/apm-server-has-still-not-connected-to-elasticsearch-2-previous-was-closed/206491 "2019-11-20T11:12:01Z")
APM Server version: APM-Server 7.4.1 Elasticsearch: 7.4.0 Kibana: 7.4.1 I'm having this error, yet I ran: docker exec -it elastic-apm-server bash -c "./apm-server test config" Config OK docker exec -it elastic-apm-… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1768) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1770)