# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1787 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1788 --- ## [Aggregate query count having count](https://discuss.elastic.co/t/aggregate-query-count-having-count/206769)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 3\ **Last updated:** [November 12, 2019, 3:43pm UTC](https://discuss.elastic.co/t/aggregate-query-count-having-count/206769 "2019-11-12T15:43:32Z")
I need to create visualisation 4 lines (I want to identify how many customers in time are using how many devices) count (unique customer) having count(uniqued deviceid) = 2 count (unique customer) having count(uniqu… --- ## [Top 5 cpu consuming queries](https://discuss.elastic.co/t/top-5-cpu-consuming-queries/206272)
**Author:** [@hurryup](https://discuss.elastic.co/u/hurryup)\ **Replies:** 1\ **Last updated:** [November 12, 2019, 3:36pm UTC](https://discuss.elastic.co/t/top-5-cpu-consuming-queries/206272 "2019-11-12T15:36:35Z")
Hello. Is it possible to somehow collect such information - top cpu consuming queries ? I can see that my cluster is heavily loaded but I can't find by which queries. --- ## [Beat version in index name](https://discuss.elastic.co/t/beat-version-in-index-name/207092)
**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Replies:** 3\ **Last updated:** [November 12, 2019, 3:11pm UTC](https://discuss.elastic.co/t/beat-version-in-index-name/207092 "2019-11-12T15:11:04Z")
Hi All, I am using ELK 6.8.0 and I want to add the beat version to the indexname I have configured in an Logstash output. I have configured it currently like this clog-%{\[beat\]\[version\]}-%{+YYYY.MM.dd} But that give… --- ## [Several time filters on a dashboard](https://discuss.elastic.co/t/several-time-filters-on-a-dashboard/207516)
**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\ **Replies:** 2\ **Last updated:** [November 12, 2019, 3:04pm UTC](https://discuss.elastic.co/t/several-time-filters-on-a-dashboard/207516 "2019-11-12T15:04:36Z")
Hello, I've a dashboard with the vizualizations from different indices. Can I filter it to several time intervals? E.g., get data from 23th October and 30th October (without data between these dates). --- ## [Webserver for Kibana](https://discuss.elastic.co/t/webserver-for-kibana/207521)
**Author:** [@Praveen\_Yallala](https://discuss.elastic.co/u/Praveen_Yallala)\ **Replies:** 1\ **Last updated:** [November 12, 2019, 2:58pm UTC](https://discuss.elastic.co/t/webserver-for-kibana/207521 "2019-11-12T14:58:23Z")
Hi I new to Kibana and elastic search. I have installed and configured both. Currently it is having HTTP. I want to add SSL certificate and make it https. Do I need any other webserver like Apache, tomcat to host the ki… --- ## [Impact of multiple concurrent scroll API on ElasticSearch](https://discuss.elastic.co/t/impact-of-multiple-concurrent-scroll-api-on-elasticsearch/206805)
**Author:** [@avinash9999](https://discuss.elastic.co/u/avinash9999)\ **Replies:** 2\ **Last updated:** [November 12, 2019, 12:01pm UTC](https://discuss.elastic.co/t/impact-of-multiple-concurrent-scroll-api-on-elasticsearch/206805 "2019-11-12T12:01:01Z")
I am using a large number of search API(using scroll = '1m') to search documents from it Average no of requests per minute = 500 Average time of hit = 100 ms Sometimes when hits are at peak I started getting error … --- ## [Replica mapper error](https://discuss.elastic.co/t/replica-mapper-error/207542)
**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\ **Replies:** 0\ **Last updated:** [November 12, 2019, 2:37pm UTC](https://discuss.elastic.co/t/replica-mapper-error/207542 "2019-11-12T14:37:27Z")
I am getting mapper \[countCalls\] of different type, current\_type \[long\], merged\_type \[text\] It is happening always only! around midnight and the error shows it's replica problem TransportReplicationAction$PrimaryShardRe… --- ## [NoClassDefFoundError exception with SpringBoot in Elasticsearch7.3](https://discuss.elastic.co/t/noclassdeffounderror-exception-with-springboot-in-elasticsearch7-3/207385)
**Author:** [@Ricardooooo](https://discuss.elastic.co/u/Ricardooooo)\ **Replies:** 4\ **Last updated:** [November 12, 2019, 2:28pm UTC](https://discuss.elastic.co/t/noclassdeffounderror-exception-with-springboot-in-elasticsearch7-3/207385 "2019-11-12T14:28:23Z")
Hi! I try to create document via high level rest client with: Map\ jsonMap = new HashMap\<\>(); jsonMap.put("name", "Bob"); jsonMap.put("id", "123456"); IndexRequest indexRequest = new IndexRequest("lead")… --- ## [API Console Auditing](https://discuss.elastic.co/t/api-console-auditing/207313)
**Author:** [@robrotheram](https://discuss.elastic.co/u/robrotheram)\ **Replies:** 3\ **Last updated:** [November 12, 2019, 2:19pm UTC](https://discuss.elastic.co/t/api-console-auditing/207313 "2019-11-12T14:19:41Z")
Hi there all deployments have a api console that uses the default elastic user to execute commands to the clusters. Is there any where that this is audited. IE something like user bob has executed command Post \_search o… --- ## [Cat indices not working plz help](https://discuss.elastic.co/t/cat-indices-not-working-plz-help/207536)
**Author:** [@shota](https://discuss.elastic.co/u/shota)\ **Replies:** 0\ **Last updated:** [November 12, 2019, 1:52pm UTC](https://discuss.elastic.co/t/cat-indices-not-working-plz-help/207536 "2019-11-12T13:52:38Z")
Hi all I have elasticsearch 6.8.3 and trying to get all indices from dev tools like this: GET \_cat/indices?v but I only get blank page: health status index uuid pri rep docs.count docs.deleted store.size pri.store.si… --- ## [Inconsistent unacknowledged reads from the same ES node](https://discuss.elastic.co/t/inconsistent-unacknowledged-reads-from-the-same-es-node/207509)
**Author:** [@ailin](https://discuss.elastic.co/u/ailin)\ **Replies:** 0\ **Last updated:** [November 12, 2019, 12:50pm UTC](https://discuss.elastic.co/t/inconsistent-unacknowledged-reads-from-the-same-es-node/207509 "2019-11-12T12:50:57Z")
Hi, community. Here's the situation I'm struggling with. Hope you could help me with it. I have 2 node ES cluster with index that has 2 shards. The first node is primary for both shards. To say it simply I send upda… --- ## [Related to regexp query](https://discuss.elastic.co/t/related-to-regexp-query/207304)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 5\ **Last updated:** [November 12, 2019, 1:05pm UTC](https://discuss.elastic.co/t/related-to-regexp-query/207304 "2019-11-12T13:05:55Z")
Hi, I am framing a query on attribute named distinguished name(dn) Example: "dn" : "cn=abc,ou=def,o=ig". i am looking for query where dn ends with o=ig and has only one child for example "dn": "cn=abc,o=ig" "dn": "cn… --- ## [Create a new field using painless](https://discuss.elastic.co/t/create-a-new-field-using-painless/207295)
**Author:** [@maju3634](https://discuss.elastic.co/u/maju3634)\ **Replies:** 1\ **Last updated:** [November 12, 2019, 12:42pm UTC](https://discuss.elastic.co/t/create-a-new-field-using-painless/207295 "2019-11-12T12:42:52Z")
Hello i want to convert my Date of Birth ("DateBirth") data to be Age data using scripted field. So how it possible ? Can you tell me how to convert it ? so this is my query: --- ## [\[Solved\] - How to create a replica node only to existing cluster](https://discuss.elastic.co/t/solved-how-to-create-a-replica-node-only-to-existing-cluster/207473)
**Author:** [@JH82](https://discuss.elastic.co/u/JH82)\ **Replies:** 5\ **Last updated:** [November 12, 2019, 12:38pm UTC](https://discuss.elastic.co/t/solved-how-to-create-a-replica-node-only-to-existing-cluster/207473 "2019-11-12T12:38:40Z")
Hello, Today I've only 1 node. (health is marked Yellow, because is not HA) is it possible to add a replica node only to a cluster ? I wish to have 1 node active and 1 datanode only for search with replica data from fi… --- ## [Featured results / Pinned query](https://discuss.elastic.co/t/featured-results-pinned-query/207391)
**Author:** [@fsh](https://discuss.elastic.co/u/fsh)\ **Replies:** 2\ **Last updated:** [November 12, 2019, 12:15pm UTC](https://discuss.elastic.co/t/featured-results-pinned-query/207391 "2019-11-12T12:15:15Z")
Hi, I'm stuck with a concept of 2 sets of search results combined into 1 set (that would make paginating simple). My simplified mapping looks like this: 'properties' =\> \[ 'featured' =\> \['type' =\> 'boolean'\]… --- ## [Unable to push data to ES from csv](https://discuss.elastic.co/t/unable-to-push-data-to-es-from-csv/207507)
**Author:** [@GuruTeja](https://discuss.elastic.co/u/GuruTeja)\ **Replies:** 0\ **Last updated:** [November 12, 2019, 12:05pm UTC](https://discuss.elastic.co/t/unable-to-push-data-to-es-from-csv/207507 "2019-11-12T12:05:49Z")
input{ file{ path =\> "F:/GuruTeja/KIBANA/LOGSTACS/adderss.csv" start\_position =\> "beginning" sincedb\_path =\> "NULL" } } output{ elasticsearch{ hosts =\> "http://localhost:9200" index =\> mytest } stdout{ } } … --- ## [Data Table Visualization :: Autosort and Display only Top N?](https://discuss.elastic.co/t/data-table-visualization-autosort-and-display-only-top-n/206867)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 3\ **Last updated:** [November 12, 2019, 11:49am UTC](https://discuss.elastic.co/t/data-table-visualization-autosort-and-display-only-top-n/206867 "2019-11-12T11:49:29Z")
Hi Kibana Gurus, I have a Data Table Visualization that works great. The full table contains hundreds of rows of data. When I look at the table, I can sort the table by a specific data field and limit the number of ro… --- ## [Http\_poller in logstash](https://discuss.elastic.co/t/http-poller-in-logstash/207504)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 0\ **Last updated:** [November 12, 2019, 11:45am UTC](https://discuss.elastic.co/t/http-poller-in-logstash/207504 "2019-11-12T11:45:20Z")
Hi, I am using http\_poller input plugin to get the data from the URL. I am receiving the data like below every 5 minutes. I want to visualize the data in Kibana in a line graph with timestamp in the x axis (every 5 mins… --- ## [Perform significant terms aggregation in Elastic search based on sum of a field rather than count if documents](https://discuss.elastic.co/t/perform-significant-terms-aggregation-in-elastic-search-based-on-sum-of-a-field-rather-than-count-if-documents/207247)
**Author:** [@vaibhav\_gupta1](https://discuss.elastic.co/u/vaibhav_gupta1)\ **Replies:** 1\ **Last updated:** [November 12, 2019, 11:44am UTC](https://discuss.elastic.co/t/perform-significant-terms-aggregation-in-elastic-search-based-on-sum-of-a-field-rather-than-count-if-documents/207247 "2019-11-12T11:44:56Z")
Suppose I have these three documents. I wish to apply significant terms on the token field. By default, significance would be calculated based on the count of foreground and background sets. E.g. For the term Annine, the… --- ## [Elasticsearch snapshot partialy fails due to "index shard snapshot failed exception"](https://discuss.elastic.co/t/elasticsearch-snapshot-partialy-fails-due-to-index-shard-snapshot-failed-exception/206788)
**Author:** [@Futerkowiec](https://discuss.elastic.co/u/Futerkowiec)\ **Replies:** 4\ **Last updated:** [November 12, 2019, 11:36am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-partialy-fails-due-to-index-shard-snapshot-failed-exception/206788 "2019-11-12T11:36:21Z")
Kibana version: 7.4.2 Elasticsearch version: 7.4.2 Original install method (e.g. download page, yum, deb, from source, etc.) and version: all components were downloaded from official elastic page. Fresh install or upg… --- ## [Could not index event to Elasticsearch reason failed to parse field \[rule\] of type \[text\] in document](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-reason-failed-to-parse-field-rule-of-type-text-in-document/207470)
**Author:** [@nghia\_huynh](https://discuss.elastic.co/u/nghia_huynh)\ **Replies:** 1\ **Last updated:** [November 12, 2019, 11:25am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-reason-failed-to-parse-field-rule-of-type-text-in-document/207470 "2019-11-12T11:25:38Z")
Hi everyone, Today, I check log from logstash-plain.log and I see many event was spam from one error like that: \[2019-11-12T16:03:53,696\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {… --- ## [Unable to mount previous data after enable x pack](https://discuss.elastic.co/t/unable-to-mount-previous-data-after-enable-x-pack/207499)
**Author:** [@Aditya\_Kar](https://discuss.elastic.co/u/Aditya_Kar)\ **Replies:** 0\ **Last updated:** [November 12, 2019, 11:08am UTC](https://discuss.elastic.co/t/unable-to-mount-previous-data-after-enable-x-pack/207499 "2019-11-12T11:08:42Z")
I have added x-pack security to my elastic search. but it is not mounting from my existing indexed data. Please suggest to me how my existing data will mount to x pack enabled elastic search. I am using version 7.4.1 v… --- ## [Use map field as index name](https://discuss.elastic.co/t/use-map-field-as-index-name/207494)
**Author:** [@Anuwa\_A](https://discuss.elastic.co/u/Anuwa_A)\ **Replies:** 0\ **Last updated:** [November 12, 2019, 11:00am UTC](https://discuss.elastic.co/t/use-map-field-as-index-name/207494 "2019-11-12T11:00:48Z")
In my logstash config file map\['first\_name'\] ||= event.get('first\_name') . when i try to use that as my index index =\> "%{first\_name}" index doesn't create. --- ## [Logstash is slow for mulitiple pipelines](https://discuss.elastic.co/t/logstash-is-slow-for-mulitiple-pipelines/207491)
**Author:** [@nuwancs](https://discuss.elastic.co/u/nuwancs)\ **Replies:** 0\ **Last updated:** [November 12, 2019, 10:41am UTC](https://discuss.elastic.co/t/logstash-is-slow-for-mulitiple-pipelines/207491 "2019-11-12T10:41:37Z")
Hi There, I am using two pipelines to process my data coming from same server but different set of files. let's say A and B. A has a very high tps and it goes over 1000EPS(events per sec) B has 40EPS max. They push data… --- ## [Shading high level Java rest client](https://discuss.elastic.co/t/shading-high-level-java-rest-client/207492)
**Author:** [@Abhishek\_S](https://discuss.elastic.co/u/Abhishek_S)\ **Replies:** 0\ **Last updated:** [November 12, 2019, 10:46am UTC](https://discuss.elastic.co/t/shading-high-level-java-rest-client/207492 "2019-11-12T10:46:02Z")
Hi, Can I shade high level rest client? bascially I want to use latest Elastic Search Rest client (7.4) and Lucene 5.3.0 (Legacy) in my project. Thanks, Abhishek --- ## [ECE + AWS load balancer: port configuration?](https://discuss.elastic.co/t/ece-aws-load-balancer-port-configuration/207129)
**Author:** [@mesiasc](https://discuss.elastic.co/u/mesiasc)\ **Replies:** 2\ **Last updated:** [November 12, 2019, 10:04am UTC](https://discuss.elastic.co/t/ece-aws-load-balancer-port-configuration/207129 "2019-11-12T10:04:48Z")
I have a load balancer in front of ECE to front the cluster URLs for kibana and elasticsearch. These all use port 9243 and the config in the ECE UI allows me to set a CNAME to be used instead of the ip.es.io service... T… --- ## [How to bind the public IP?](https://discuss.elastic.co/t/how-to-bind-the-public-ip/207318)
**Author:** [@Pinno\_Lin](https://discuss.elastic.co/u/Pinno_Lin)\ **Replies:** 3\ **Last updated:** [November 12, 2019, 9:58am UTC](https://discuss.elastic.co/t/how-to-bind-the-public-ip/207318 "2019-11-12T09:58:45Z")
Hi All, I have 4 node prepare to 1 master (172.20.9.45, 192.168.1.1) and 3 data node (192.168.1.11 ~13). The 172.20.9.x is public LAN, 192.168.1.x is private LAN by hub. The ES version : 7.4.0 these is my elasticsearch… --- ## [Why Are Bulk Insertions Not Being Round Robined?](https://discuss.elastic.co/t/why-are-bulk-insertions-not-being-round-robined/207461)
**Author:** [@thegrif](https://discuss.elastic.co/u/thegrif)\ **Replies:** 1\ **Last updated:** [November 12, 2019, 9:37am UTC](https://discuss.elastic.co/t/why-are-bulk-insertions-not-being-round-robined/207461 "2019-11-12T09:37:29Z")
This question is cross-posted from Amazon's Elasticsearch Forum. (link) I'm unsure whether it's an Elasticsearch or an AWS issue - but would welcome any help/feedback this community can offer. Bulk indexing requests poi… --- ## [Rename doc\_id in logstash output](https://discuss.elastic.co/t/rename-doc-id-in-logstash-output/207479)
**Author:** [@Anuwa\_A](https://discuss.elastic.co/u/Anuwa_A)\ **Replies:** 0\ **Last updated:** [November 12, 2019, 9:36am UTC](https://discuss.elastic.co/t/rename-doc-id-in-logstash-output/207479 "2019-11-12T09:36:35Z")
i want to sub-string id and ädd it in front of the id with \_ and store that as doc\_id in es out put. i tried below but doesn't work id = %{id}\[0..1\]+""+%{id} elasticsearch { document\_id =\> "%{id}\[0..1\]+""+%{id}" } --- ## [Spring data elastic 7.4 version](https://discuss.elastic.co/t/spring-data-elastic-7-4-version/207397)
**Author:** [@tfe2012](https://discuss.elastic.co/u/tfe2012)\ **Replies:** 5\ **Last updated:** [November 12, 2019, 9:28am UTC](https://discuss.elastic.co/t/spring-data-elastic-7-4-version/207397 "2019-11-12T09:28:58Z")
Hi, I update my cluster to 7.4.2 version But getting an error: Caused by: java.lang.ClassNotFoundException: org.elasticsearch.action.Action at java.net.URLClassLoader.findClass (URLClassLoader.java:436) at java.lang.… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1786) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1788)