# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1782 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1783 --- ## [Cluster stats flat settings](https://discuss.elastic.co/t/cluster-stats-flat-settings/207933)
**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 4:31pm UTC](https://discuss.elastic.co/t/cluster-stats-flat-settings/207933 "2019-11-14T16:31:03Z")
I'm trying to get cluster stats using the flat\_settings query parameter. However when I run: GET \_cluster/stats?flat\_settings=true I get back the following response: { "error": { "root\_cause": \[ { … --- ## [Unable to save default index pattern - Kibana-7.3](https://discuss.elastic.co/t/unable-to-save-default-index-pattern-kibana-7-3/207774)
**Author:** [@deeps](https://discuss.elastic.co/u/deeps)\ **Replies:** 3\ **Last updated:** [November 14, 2019, 4:12pm UTC](https://discuss.elastic.co/t/unable-to-save-default-index-pattern-kibana-7-3/207774 "2019-11-14T16:12:06Z")
I have an elk stack with basic auth enabled.. meaning I have setup the password for elastic, kibana etc users. Cluster was in fine state and kibana auth was working fine until I cleared indexes older than 30 days. Afte… --- ## [Point in time recovery from a snapshot](https://discuss.elastic.co/t/point-in-time-recovery-from-a-snapshot/207795)
**Author:** [@AxialTilt](https://discuss.elastic.co/u/AxialTilt)\ **Replies:** 1\ **Last updated:** [November 14, 2019, 4:41am UTC](https://discuss.elastic.co/t/point-in-time-recovery-from-a-snapshot/207795 "2019-11-14T04:41:01Z")
Hello I am trying out ElasticSearch administration for the first time after having administered relational DBMS for many years. Trying to understand if point in time recovery is possible with ElasticSearch snapshots. Fr… --- ## [Issues with installation in IPv6 environment](https://discuss.elastic.co/t/issues-with-installation-in-ipv6-environment/207000)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 4\ **Last updated:** [November 14, 2019, 3:45pm UTC](https://discuss.elastic.co/t/issues-with-installation-in-ipv6-environment/207000 "2019-11-14T15:45:23Z")
Hi, I am installing elasticsearch in a kubernetes environment with IPv6 network. Using helm charts from https://github.com/elastic/helm-charts/tree/master/elasticsearch. I configured network.host as \["::"\], but with t… --- ## [Error in installing elasticsearch 6.7 and above](https://discuss.elastic.co/t/error-in-installing-elasticsearch-6-7-and-above/180980)
**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Replies:** 2\ **Last updated:** [November 14, 2019, 3:11pm UTC](https://discuss.elastic.co/t/error-in-installing-elasticsearch-6-7-and-above/180980 "2019-11-14T15:11:06Z")
While installing elaticsearch 6.7 and above I am getting this error: sudo systemctl start elasticsearch.service could not find java in JAVA\_HOME or bundled at /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.212.b04-0.el7\_6.x86\_6… --- ## [Creating a new field based on the input and send it to the output](https://discuss.elastic.co/t/creating-a-new-field-based-on-the-input-and-send-it-to-the-output/207915)
**Author:** [@Avinaba\_Ghosh\_Hajra](https://discuss.elastic.co/u/Avinaba_Ghosh_Hajra)\ **Replies:** 1\ **Last updated:** [November 14, 2019, 3:02pm UTC](https://discuss.elastic.co/t/creating-a-new-field-based-on-the-input-and-send-it-to-the-output/207915 "2019-11-14T15:02:00Z")
I have a simple query that fetch data from database through logstash jdbc plugin. Query : Select emp\_id, department\_id from employee; Now I need an addition field department\_name in the output. department\_name can be … --- ## [Create structure in painless update script](https://discuss.elastic.co/t/create-structure-in-painless-update-script/207865)
**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\ **Replies:** 2\ **Last updated:** [November 14, 2019, 2:53pm UTC](https://discuss.elastic.co/t/create-structure-in-painless-update-script/207865 "2019-11-14T14:53:10Z")
I am using Elasticsearch 6.5. I want to use an update API with the painless script. Let's say, that my target document has an address structure inside of it. Update script may look something like this: ctx.\_source.addr… --- ## [Scroll search | Caused by: java.io.IOException: entity content is too long \[226508429\] for the configured buffer limit \[1029760\]](https://discuss.elastic.co/t/scroll-search-caused-by-java-io-ioexception-entity-content-is-too-long-226508429-for-the-configured-buffer-limit-1029760/207202)
**Author:** [@vijaykriishna](https://discuss.elastic.co/u/vijaykriishna)\ **Replies:** 0\ **Last updated:** [November 9, 2019, 5:39am UTC](https://discuss.elastic.co/t/scroll-search-caused-by-java-io-ioexception-entity-content-is-too-long-226508429-for-the-configured-buffer-limit-1029760/207202 "2019-11-09T05:39:25Z")
Hi All, I've implemented scroll search on an index with 348,004 documents in it. Code: SearchSourceBuilder searchSourceBuilder = new SearchSourceBuilder().fetchSource(includes, null) .size(20000); searchSour… --- ## [Logstash не может распачрсить сообщение, а в grokdebugger парсит](https://discuss.elastic.co/t/logstash-grokdebugger/206660)
**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\ **Replies:** 18\ **Last updated:** [November 14, 2019, 2:39pm UTC](https://discuss.elastic.co/t/logstash-grokdebugger/206660 "2019-11-14T14:39:52Z")
Всем привет, есть конфиг: #recieve syslog on Ports input { tcp { port =\> 5044 type =\> syslog tags =\> "ise" } udp { port =\> 5044 type =\> syslog tags =\> "ise" } } filter { if "ise" in \[t… --- ## [Indexing txt file that has more than 1gb](https://discuss.elastic.co/t/indexing-txt-file-that-has-more-than-1gb/207908)
**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 1:59pm UTC](https://discuss.elastic.co/t/indexing-txt-file-that-has-more-than-1gb/207908 "2019-11-14T13:59:01Z")
Hello guys , im facing a problem here indexing txt file that has 8 million lines and 1.5 gb size , logstash only insert 4 million lines !! is it possible to indext txt file in elasticsearch with more than 1.5 gb in size … --- ## [Aggregation on long type is wrong](https://discuss.elastic.co/t/aggregation-on-long-type-is-wrong/207798)
**Author:** [@yuri9163](https://discuss.elastic.co/u/yuri9163)\ **Replies:** 3\ **Last updated:** [November 14, 2019, 1:57pm UTC](https://discuss.elastic.co/t/aggregation-on-long-type-is-wrong/207798 "2019-11-14T13:57:00Z")
Can any one explain me what is going on? I would like to aggregate and get the max value of duration by global\_fdid. I'm expecting to get max duration will be 6860 but it returns 7214.0 GET //\_mapping Result { … --- ## [Can Elasticsearch get logs from Logstash/Fluentd by itself?](https://discuss.elastic.co/t/can-elasticsearch-get-logs-from-logstash-fluentd-by-itself/207901)
**Author:** [@Eugene2](https://discuss.elastic.co/u/Eugene2)\ **Replies:** 3\ **Last updated:** [November 14, 2019, 1:55pm UTC](https://discuss.elastic.co/t/can-elasticsearch-get-logs-from-logstash-fluentd-by-itself/207901 "2019-11-14T13:55:08Z")
Hello I have Elasticsearch and instances with Fluentd/Logstach in different environments. Access to the env with Elastic is limited that's why Fluentd/Logstash can't push logs to the elasticsearch. But Elasticsearch has… --- ## [Add Elastic Search functionalities to the Topcoder Resources API](https://discuss.elastic.co/t/add-elastic-search-functionalities-to-the-topcoder-resources-api/207899)
**Author:** [@Rajendra\_Prasad](https://discuss.elastic.co/u/Rajendra_Prasad)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 1:02pm UTC](https://discuss.elastic.co/t/add-elastic-search-functionalities-to-the-topcoder-resources-api/207899 "2019-11-14T13:02:49Z")
Add Elastic Search functionalities to Resources API I have one resource api and wants to add Elastic Search functionalities please let me know how to do it? --- ## [Spark to elasticsearch data](https://discuss.elastic.co/t/spark-to-elasticsearch-data/207896)
**Author:** [@ParthM](https://discuss.elastic.co/u/ParthM)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 12:54pm UTC](https://discuss.elastic.co/t/spark-to-elasticsearch-data/207896 "2019-11-14T12:54:54Z")
Can elasticsearch store map coordinates which are in string to geo\_point directly. I have created index with a field having geo\_point datatype but it show error and I am new to ES --- ## [Conditional check grok and mutate a grok field](https://discuss.elastic.co/t/conditional-check-grok-and-mutate-a-grok-field/207895)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 12:54pm UTC](https://discuss.elastic.co/t/conditional-check-grok-and-mutate-a-grok-field/207895 "2019-11-14T12:54:19Z")
Hi, I need to check if the first column of data "os" contains the string "lnx" or "win", if contains the string "lnx" in the first column do this grok: grok { match =\> { "message" =\> "%{DATA:os}%{NUMBER:virt\_mem\_used}… --- ## [How can i update all the values in specific field using update\_by\_query?](https://discuss.elastic.co/t/how-can-i-update-all-the-values-in-specific-field-using-update-by-query/207875)
**Author:** [@lakmina\_chathurya](https://discuss.elastic.co/u/lakmina_chathurya)\ **Replies:** 2\ **Last updated:** [November 14, 2019, 12:19pm UTC](https://discuss.elastic.co/t/how-can-i-update-all-the-values-in-specific-field-using-update-by-query/207875 "2019-11-14T12:19:19Z")
POST /my\_metric/\_update\_by\_query { "query": { "bool": { "must": \[ { "term": {"timestamp": "1324987657365"} } … --- ## [Problems with creating a custom query builder which uses "percolate" or "has\_child" query inside](https://discuss.elastic.co/t/problems-with-creating-a-custom-query-builder-which-uses-percolate-or-has-child-query-inside/207884)
**Author:** [@mdyuldina](https://discuss.elastic.co/u/mdyuldina)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 12:18pm UTC](https://discuss.elastic.co/t/problems-with-creating-a-custom-query-builder-which-uses-percolate-or-has-child-query-inside/207884 "2019-11-14T12:18:08Z")
Hi, I am trying to create a custom query parser. I have created a simple plugin implementing SearchPlugin: public class CustomPlugin extends Plugin implements SearchPlugin { public List\\> getQueries() … --- ## [Cost of storing duplicate fields, but not indexing the duplicated field via \_dynamic=false](https://discuss.elastic.co/t/cost-of-storing-duplicate-fields-but-not-indexing-the-duplicated-field-via-dynamic-false/207880)
**Author:** [@harsimranb](https://discuss.elastic.co/u/harsimranb)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 12:05pm UTC](https://discuss.elastic.co/t/cost-of-storing-duplicate-fields-but-not-indexing-the-duplicated-field-via-dynamic-false/207880 "2019-11-14T12:05:09Z")
Hi, I am storing duplicate fields in my document (solution to an interesting use case). Using, \_dynamic=false, I am only indexing the one set of fields, not the duplicate ones. This helps keep my index small, but our \_… --- ## [Reindex data without compromising on data loss & search](https://discuss.elastic.co/t/reindex-data-without-compromising-on-data-loss-search/207879)
**Author:** [@Tapan](https://discuss.elastic.co/u/Tapan)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 11:55am UTC](https://discuss.elastic.co/t/reindex-data-without-compromising-on-data-loss-search/207879 "2019-11-14T11:55:52Z")
Problem statement: I would like to import data from one index to another index without compromising on data loss and impacting search from web. Approach taken I have an index development\_users\_en\_gb and would like to i… --- ## [How to include special characters in modified index pattern string. When using URL Format and 'value' label template](https://discuss.elastic.co/t/how-to-include-special-characters-in-modified-index-pattern-string-when-using-url-format-and-value-label-template/205284)
**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\ **Replies:** 8\ **Last updated:** [November 14, 2019, 11:46am UTC](https://discuss.elastic.co/t/how-to-include-special-characters-in-modified-index-pattern-string-when-using-url-format-and-value-label-template/205284 "2019-11-14T11:46:20Z")
Hello, On kibana and when editing the values on an Index Pattern, e.g. from the default 'string' to URL. When modifying the URL template to include a value, e.g. an email address, is there a way to take in this value to… --- ## [Getting information Aruba IAP-207](https://discuss.elastic.co/t/getting-information-aruba-iap-207/206024)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 7\ **Last updated:** [November 14, 2019, 11:28am UTC](https://discuss.elastic.co/t/getting-information-aruba-iap-207/206024 "2019-11-14T11:28:15Z")
Hi All, Good afternoon After adding filebeat and auditbeat to my linux host, now I wanted to try out getting details from access point "Aruba IAP-207" . Guidance requested for the any documentation URL which talks abo… --- ## [Elastic not working cold nodes with S3 (minio)](https://discuss.elastic.co/t/elastic-not-working-cold-nodes-with-s3-minio/207856)
**Author:** [@levatigra](https://discuss.elastic.co/u/levatigra)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 10:15am UTC](https://discuss.elastic.co/t/elastic-not-working-cold-nodes-with-s3-minio/207856 "2019-11-14T10:15:11Z")
Hello! My problem is that I'm trying to put a date on S3 (mini). The directory is mounted locally. The path is specified in the config file. But when you try to run a node, it produces the following error. \> \[2019-11-1… --- ## [Define custom analyzer for highlight](https://discuss.elastic.co/t/define-custom-analyzer-for-highlight/207853)
**Author:** [@avivlevizky](https://discuss.elastic.co/u/avivlevizky)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 10:03am UTC](https://discuss.elastic.co/t/define-custom-analyzer-for-highlight/207853 "2019-11-14T10:03:13Z")
After some study on the Lucene highlight that elastic search based on. I have an unanswered question. I want to use the standard tokenizer on the index/search stages (to utilize properly the token filters) and also to … --- ## [Logstash not able to create index on elastic search](https://discuss.elastic.co/t/logstash-not-able-to-create-index-on-elastic-search/207665)
**Author:** [@deepak9976](https://discuss.elastic.co/u/deepak9976)\ **Replies:** 1\ **Last updated:** [November 14, 2019, 9:32am UTC](https://discuss.elastic.co/t/logstash-not-able-to-create-index-on-elastic-search/207665 "2019-11-14T09:32:57Z")
I am not able to create index on the elasticsearch by logstash . I was able to create the index when I used it first time , but then I deleted the index, modified by logstash pipeline , and now I am not able to create. … --- ## [Elasticsearch innerhits difference between docvalue\_fields and include and exclude](https://discuss.elastic.co/t/elasticsearch-innerhits-difference-between-docvalue-fields-and-include-and-exclude/207849)
**Author:** [@sanju\_yadav](https://discuss.elastic.co/u/sanju_yadav)\ **Replies:** 0\ **Last updated:** [November 14, 2019, 9:30am UTC](https://discuss.elastic.co/t/elasticsearch-innerhits-difference-between-docvalue-fields-and-include-and-exclude/207849 "2019-11-14T09:30:34Z")
I have multiple nested fields in an index, while querying I need to find which documents match for which I was using inner\_hits with include in source fields which was having a performance hit, but as I moved to use docv… --- ## [Logstash syslog output: Weird message processing](https://discuss.elastic.co/t/logstash-syslog-output-weird-message-processing/207838)
**Author:** [@froto](https://discuss.elastic.co/u/froto)\ **Replies:** 2\ **Last updated:** [November 14, 2019, 9:29am UTC](https://discuss.elastic.co/t/logstash-syslog-output-weird-message-processing/207838 "2019-11-14T09:29:05Z")
Hey there! I've been trying to send a part of my events to another syslog receiver for further processing. I use the logstash-output-syslog plugin for this purpose. This is my configuration: \> output { \> if "flow" in… --- ## [No results for search in kibana](https://discuss.elastic.co/t/no-results-for-search-in-kibana/207739)
**Author:** [@Amos\_Shahar](https://discuss.elastic.co/u/Amos_Shahar)\ **Replies:** 1\ **Last updated:** [November 14, 2019, 9:07am UTC](https://discuss.elastic.co/t/no-results-for-search-in-kibana/207739 "2019-11-14T09:07:28Z")
hi, I am getting no results for my search term "collectionaccount" in the field "tableId\_lc" in Kibana. seems that for other docs all is working properly. not sure what am I missing: "analysis" : { "filter" : { "auto… --- ## [Delete index from logstash](https://discuss.elastic.co/t/delete-index-from-logstash/206555)
**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\ **Replies:** 8\ **Last updated:** [November 14, 2019, 8:49am UTC](https://discuss.elastic.co/t/delete-index-from-logstash/206555 "2019-11-14T08:49:13Z")
hi i have 1 summary index , which get refresh once in day . i want to delete all the data from index every day when logstash run i want to delete data from index or index itself . here i cant use id column to update … --- ## [Intersection between documents by specific property](https://discuss.elastic.co/t/intersection-between-documents-by-specific-property/207347)
**Author:** [@Stancheva](https://discuss.elastic.co/u/Stancheva)\ **Replies:** 4\ **Last updated:** [November 14, 2019, 8:30am UTC](https://discuss.elastic.co/t/intersection-between-documents-by-specific-property/207347 "2019-11-14T08:30:46Z")
I've got index with the following mapping: "properties": { "group\_id": { "type": "long" }, "user\_id": { "type": "long" } } Document id has the following structure {group\_id}-{user\_id}. … --- ## [Elastic SQL is not working with time bound data](https://discuss.elastic.co/t/elastic-sql-is-not-working-with-time-bound-data/207742)
**Author:** [@farrukh\_aziz](https://discuss.elastic.co/u/farrukh_aziz)\ **Replies:** 1\ **Last updated:** [November 14, 2019, 8:20am UTC](https://discuss.elastic.co/t/elastic-sql-is-not-working-with-time-bound-data/207742 "2019-11-14T08:20:47Z")
this search is working without time field how i can make it work with time bound. POST \_sql?format=txt { "query":"SELECT network,usage.total from clients where usage.total \<= 1000 AND '@timestamp' \< now() - INTERVAL 7… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1781) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1783)