# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1795 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1796 --- ## [Can't found the field "Suggest" in Nest](https://discuss.elastic.co/t/cant-found-the-field-suggest-in-nest/206990)
**Author:** [@lethienhoang](https://discuss.elastic.co/u/lethienhoang)\ **Replies:** 0\ **Last updated:** [November 7, 2019, 4:33pm UTC](https://discuss.elastic.co/t/cant-found-the-field-suggest-in-nest/206990 "2019-11-07T16:33:01Z")
I just define the model as below code client.Indices.Create("demo", c =\> c .Index\() .Map\(c =\> c .AutoMap() .Propert… --- ## [Syslog Input - Grok Error](https://discuss.elastic.co/t/syslog-input-grok-error/206752)
**Author:** [@gerard.ramos](https://discuss.elastic.co/u/gerard.ramos)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 4:28pm UTC](https://discuss.elastic.co/t/syslog-input-grok-error/206752 "2019-11-07T16:28:09Z")
Hello! I have this input: \<189\>date=2019-11-06 time=09:18:24 devname="FW" devid="FG200D4Q645" logid="0000000011" type="traffic" subtype="forward" level="notice" vd="josep" eventtime=1573045874 srcip=192.168.1.1 srcpor… --- ## [Error after v5.6 upgrade from v5.5](https://discuss.elastic.co/t/error-after-v5-6-upgrade-from-v5-5/205704)
**Author:** [@ronaldom](https://discuss.elastic.co/u/ronaldom)\ **Replies:** 3\ **Last updated:** [November 7, 2019, 3:48pm UTC](https://discuss.elastic.co/t/error-after-v5-6-upgrade-from-v5-5/205704 "2019-11-07T15:48:24Z")
Hi guys, We just recently upgrade our Elastic Stack from v5.5 to v5.6. We encountered the error below when we tried running logstash to populate the new v5.6 indices. Any idea what's going on here? We already re-install… --- ## [Replace empty strings with Ruby code](https://discuss.elastic.co/t/replace-empty-strings-with-ruby-code/206590)
**Author:** [@vinay.rao](https://discuss.elastic.co/u/vinay.rao)\ **Replies:** 5\ **Last updated:** [November 7, 2019, 3:47pm UTC](https://discuss.elastic.co/t/replace-empty-strings-with-ruby-code/206590 "2019-11-07T15:47:39Z")
Dear All, I am here seeking your help on the following. I have empty strings in fields and i need to replace it with NULL or NILL . Since am very new to Ruby, Can you help me with the complete query to achieve the abov… --- ## [Errors on fresh install](https://discuss.elastic.co/t/errors-on-fresh-install/206982)
**Author:** [@JH82](https://discuss.elastic.co/u/JH82)\ **Replies:** 0\ **Last updated:** [November 7, 2019, 3:43pm UTC](https://discuss.elastic.co/t/errors-on-fresh-install/206982 "2019-11-07T15:43:18Z")
Hello, I've build a new cluster with 2 nodes. All works fine without Xpack security. When I enabled security and when I try to check the communication with the second node I've this error : { "error" : { "root\_caus… --- ## [Monitoring query sent to Elasticsearch](https://discuss.elastic.co/t/monitoring-query-sent-to-elasticsearch/206849)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 4\ **Last updated:** [November 7, 2019, 3:37pm UTC](https://discuss.elastic.co/t/monitoring-query-sent-to-elasticsearch/206849 "2019-11-07T15:37:30Z")
hi guys, currently I have one cluster with v5.6.x and, even thought we have scheduled to upgrade it to v6.8, I have to dive deeper regarding the query sent to ES just to check what is happening in that moment. I found … --- ## [Elastic Rolling upgrade 6.6.0 to 6.8](https://discuss.elastic.co/t/elastic-rolling-upgrade-6-6-0-to-6-8/206967)
**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\ **Replies:** 3\ **Last updated:** [November 7, 2019, 3:33pm UTC](https://discuss.elastic.co/t/elastic-rolling-upgrade-6-6-0-to-6-8/206967 "2019-11-07T15:33:43Z")
Today, I tried to upgrade my 5 nodes cluster from 6.6.1 to 6.8. I planned to apply the rolling upgrade procedure I found here: https://www.elastic.co/guide/en/elasticsearch/reference/6.8/rolling-upgrades.html I then d… --- ## [Get "Objects in arrays are not well supported" with new schema in Kibana](https://discuss.elastic.co/t/get-objects-in-arrays-are-not-well-supported-with-new-schema-in-kibana/206905)
**Author:** [@Arab.Soheyl](https://discuss.elastic.co/u/Arab.Soheyl)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 3:16pm UTC](https://discuss.elastic.co/t/get-objects-in-arrays-are-not-well-supported-with-new-schema-in-kibana/206905 "2019-11-07T15:16:32Z")
I have a multi log type in my system. I want to aggregate this Log and index it into Elasticsearch. my final schema is below. { "id": 1, "name": 2, "history": \[ { "login": { … --- ## [Implications of deleting a non existing document (By document ID)](https://discuss.elastic.co/t/implications-of-deleting-a-non-existing-document-by-document-id/206912)
**Author:** [@itaydvir](https://discuss.elastic.co/u/itaydvir)\ **Replies:** 3\ **Last updated:** [November 7, 2019, 3:12pm UTC](https://discuss.elastic.co/t/implications-of-deleting-a-non-existing-document-by-document-id/206912 "2019-11-07T15:12:47Z")
Hello, Is there any Implications of deleting a non existing document? What happens when a DELETE call by document id arrives to a node and no such document id? for example DELETE /index/type/12345 especially i'm talk… --- ## [Why my date format is not working?](https://discuss.elastic.co/t/why-my-date-format-is-not-working/206308)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 11\ **Last updated:** [November 7, 2019, 3:07pm UTC](https://discuss.elastic.co/t/why-my-date-format-is-not-working/206308 "2019-11-07T15:07:34Z")
Here is the field I get from filebeat: PC\_Local\_Time\_1and the value it has is 2019-10-15T10:54:27.447Z. I tried to convert it to Date field in Elasticsearch pipeline as below: { "date": { "field": "PC\_Lo… --- ## [How to avoid "Phantom Read" problem of nested field](https://discuss.elastic.co/t/how-to-avoid-phantom-read-problem-of-nested-field/206878)
**Author:** [@tony21177](https://discuss.elastic.co/u/tony21177)\ **Replies:** 3\ **Last updated:** [November 7, 2019, 3:06pm UTC](https://discuss.elastic.co/t/how-to-avoid-phantom-read-problem-of-nested-field/206878 "2019-11-07T15:06:47Z")
Hi, I have a rdbms table design which are one to many relation. Under some consideration,we decide put the relation into elasticsearch index. I create a index(for parent table) and a nested field for the child table. … --- ## [How to parse XML?](https://discuss.elastic.co/t/how-to-parse-xml/206238)
**Author:** [@ja123](https://discuss.elastic.co/u/ja123)\ **Replies:** 7\ **Last updated:** [November 7, 2019, 2:58pm UTC](https://discuss.elastic.co/t/how-to-parse-xml/206238 "2019-11-07T14:58:56Z")
I'm trying to parse the following xml from an api through xml plugin. \ **Author:** [@RafaelPeggau](https://discuss.elastic.co/u/RafaelPeggau)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 2:52pm UTC](https://discuss.elastic.co/t/preparar-documento-para-indexar-no-elasticseach/206973 "2019-11-07T14:52:39Z") Montei uma estrutura, ELK. vou configurar o logstash com jdbc, para fazer consultas cron em uma base sql. E inserir no elastic, para depois montar alguns dashboards com o Kibana. Perfeito isso sei que funciona. Agora a… --- ## [Getting Error Kibana Server is not ready](https://discuss.elastic.co/t/getting-error-kibana-server-is-not-ready/206948)
**Author:** [@Shradha\_Bharti](https://discuss.elastic.co/u/Shradha_Bharti)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 2:00pm UTC](https://discuss.elastic.co/t/getting-error-kibana-server-is-not-ready/206948 "2019-11-07T14:00:10Z")
Hi , We have upgraded our ELK from 2.4.6 to 7.3.0 in centos here lot of files I have changed somehow i made it up all the ports related to ELK but when i ran kibana ..i got the error by saying that kibana is not read… --- ## [Simplify "host" field output from logstash](https://discuss.elastic.co/t/simplify-host-field-output-from-logstash/206850)
**Author:** [@thadc](https://discuss.elastic.co/u/thadc)\ **Replies:** 0\ **Last updated:** [November 6, 2019, 6:37pm UTC](https://discuss.elastic.co/t/simplify-host-field-output-from-logstash/206850 "2019-11-06T18:37:56Z")
Hello, The current output of the default host field from my logstash is: "host": { "name": " name\_of\_host " }, I have a need for the host to appear simply as: "host": " name\_of\_host " The reason for this needed ch… --- ## [Capture Changes (Updates/New) in my ElasticSearch Index and send to Kafka topic](https://discuss.elastic.co/t/capture-changes-updates-new-in-my-elasticsearch-index-and-send-to-kafka-topic/206959)
**Author:** [@giridhar\_varma](https://discuss.elastic.co/u/giridhar_varma)\ **Replies:** 0\ **Last updated:** [November 7, 2019, 1:12pm UTC](https://discuss.elastic.co/t/capture-changes-updates-new-in-my-elasticsearch-index-and-send-to-kafka-topic/206959 "2019-11-07T13:12:51Z")
Team - I am looking to send only updates occuring in my ES index to kafka topic, how to accomplish, can anyone help me please? --- ## [Percentiles aggregation yield different results between ES 1.7.x and 7.x](https://discuss.elastic.co/t/percentiles-aggregation-yield-different-results-between-es-1-7-x-and-7-x/206954)
**Author:** [@joneslee85](https://discuss.elastic.co/u/joneslee85)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 12:27pm UTC](https://discuss.elastic.co/t/percentiles-aggregation-yield-different-results-between-es-1-7-x-and-7-x/206954 "2019-11-07T12:27:18Z")
Let's create 3 products with sale\_counts field: PUT products/\_mapping { "properties": { "sales\_count": { "type": "integer" } } } POST products/\_doc/ { "sales\_count" : 323, } POST products/\_doc/ { … --- ## [Could not find java in JAVA\_HOME or bundled at elasticsearch-7.4.2/jdk/bin/java](https://discuss.elastic.co/t/could-not-find-java-in-java-home-or-bundled-at-elasticsearch-7-4-2-jdk-bin-java/206777)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 10:51am UTC](https://discuss.elastic.co/t/could-not-find-java-in-java-home-or-bundled-at-elasticsearch-7-4-2-jdk-bin-java/206777 "2019-11-07T10:51:32Z")
Hi all, I am trying to install elasticsearch 7.4.2. in documentation it says it comes bundled with jdk. but i get the this message, could not find java in JAVA\_HOME or bundled at /root/Downloads/elasticsearch-7.4.2/j… --- ## [Getting error while installing ELK](https://discuss.elastic.co/t/getting-error-while-installing-elk/206327)
**Author:** [@Shradha\_Bharti](https://discuss.elastic.co/u/Shradha_Bharti)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 10:37am UTC](https://discuss.elastic.co/t/getting-error-while-installing-elk/206327 "2019-11-07T10:37:23Z")
HI I am upgrading the elk version of my server ..previosuly it was 2.4.6 now ,we are doing 7.3.0 while installing all the rpms ,m getting below error in logstash \[2019-11-04T00:00:16,098\]\[ERROR\]\[logstash.plugins.regi… --- ## [Conditionals and processor Chains](https://discuss.elastic.co/t/conditionals-and-processor-chains/206938)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 0\ **Last updated:** [November 7, 2019, 9:43am UTC](https://discuss.elastic.co/t/conditionals-and-processor-chains/206938 "2019-11-07T09:43:06Z")
Hi, Is it possible to use conditionals inside a processor Chain? I use a copySubjectUser processor chain in order to copy the SubjectUser information in windows events. For most of the events Subject user information … --- ## [Elasticsearch crashes when using Completion suggester](https://discuss.elastic.co/t/elasticsearch-crashes-when-using-completion-suggester/206935)
**Author:** [@Leksh](https://discuss.elastic.co/u/Leksh)\ **Replies:** 0\ **Last updated:** [November 7, 2019, 9:35am UTC](https://discuss.elastic.co/t/elasticsearch-crashes-when-using-completion-suggester/206935 "2019-11-07T09:35:23Z")
We have Elasticsearch 6.6.2 running on a system with 32 core 128 GB RAM. We have around 400 million data in 10 indices which are running in one node with 5 shards. Also we set 32 GB heap memory for Elasticsearch. Recentl… --- ## [Invalid license found, requires a basic or a valid trial license and received Open source](https://discuss.elastic.co/t/invalid-license-found-requires-a-basic-or-a-valid-trial-license-and-received-open-source/206929)
**Author:** [@antonopo](https://discuss.elastic.co/u/antonopo)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 9:14am UTC](https://discuss.elastic.co/t/invalid-license-found-requires-a-basic-or-a-valid-trial-license-and-received-open-source/206929 "2019-11-07T09:14:07Z")
Hi, I have an ELK cluster with 6 nodes (5linux and 1windows). I am using the basic license. I tried to add one more linux node on my ELK cluster (Centos 7). I used exactly the same instructions to add the new node on t… --- ## [\[Elastic 7.2.1\] Problem creating a cluster from 3 single nodes](https://discuss.elastic.co/t/elastic-7-2-1-problem-creating-a-cluster-from-3-single-nodes/206798)
**Author:** [@lexav1978](https://discuss.elastic.co/u/lexav1978)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 9:11am UTC](https://discuss.elastic.co/t/elastic-7-2-1-problem-creating-a-cluster-from-3-single-nodes/206798 "2019-11-07T09:11:00Z")
Hello, I have 3 elastic servers initially in standalone mode, and I wanted to create a cluster with those 3 servers. I configure them but the cluster/health tells me that there is only one node in my cluster. The clus… --- ## [How to query the docs of an index having the time filter is null](https://discuss.elastic.co/t/how-to-query-the-docs-of-an-index-having-the-time-filter-is-null/206814)
**Author:** [@geethusureshkrishna](https://discuss.elastic.co/u/geethusureshkrishna)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 9:09am UTC](https://discuss.elastic.co/t/how-to-query-the-docs-of-an-index-having-the-time-filter-is-null/206814 "2019-11-07T09:09:13Z")
Some of the docs in an index having the time filter is null/none/no value. How to create a GET query to filter out those documents? --- ## [Red Health on Elasticsearch](https://discuss.elastic.co/t/red-health-on-elasticsearch/206927)
**Author:** [@antonopo](https://discuss.elastic.co/u/antonopo)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 9:05am UTC](https://discuss.elastic.co/t/red-health-on-elasticsearch/206927 "2019-11-07T09:05:18Z")
Hi, Everyday i am facing red health on Elasticsearch. Then i am chencking the indices under index management and i am seeing one or two red metricbeat indices. After i marked them and i deleted them the cluster health c… --- ## [Failed to start elasticsearch.service](https://discuss.elastic.co/t/failed-to-start-elasticsearch-service/206895)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 9:01am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-service/206895 "2019-11-07T09:01:09Z")
Hi, I am trying to start elasticsearch service using these commands, sudo /bin/systemctl daemon-reload sudo /bin/systemctl enable elasticsearch.service sudo systemctl start elasticsearch.service but i get this, Fail… --- ## [Logstash/beats keeps track files shipped](https://discuss.elastic.co/t/logstash-beats-keeps-track-files-shipped/206707)
**Author:** [@taos](https://discuss.elastic.co/u/taos)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 7:47am UTC](https://discuss.elastic.co/t/logstash-beats-keeps-track-files-shipped/206707 "2019-11-07T07:47:45Z")
Hi all, I have data/text files in directory generated by date -- path date, e.g 20191011. Q. Doese any way or plugins in that Logstash, beats keeps track files shipped to ELK in order to ignore them? Thanks --- ## [I want to get sequence information！](https://discuss.elastic.co/t/i-want-to-get-sequence-information/206910)
**Author:** [@smash](https://discuss.elastic.co/u/smash)\ **Replies:** 0\ **Last updated:** [November 7, 2019, 7:12am UTC](https://discuss.elastic.co/t/i-want-to-get-sequence-information/206910 "2019-11-07T07:12:48Z")
Hello After getting the number of arrays and storing them in a custom field To obtain array information using a custom field as an array parameter I don't know how to expand custom fields. Can anyone tell me? sample… --- ## [Add more data nodes or more RAM/disk space to existed nodes?](https://discuss.elastic.co/t/add-more-data-nodes-or-more-ram-disk-space-to-existed-nodes/206877)
**Author:** [@yiy](https://discuss.elastic.co/u/yiy)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 7:09am UTC](https://discuss.elastic.co/t/add-more-data-nodes-or-more-ram-disk-space-to-existed-nodes/206877 "2019-11-07T07:09:03Z")
This is how our current cluster setup on VMWARE: 3 master nodes: 8G RAM each, plus 2 data nodes: 8G RAM/ 500GB disk space, each on different physical disk for redundancy. Recently we just started collecting NetFlow da… --- ## [Per second aggregation across documents](https://discuss.elastic.co/t/per-second-aggregation-across-documents/205661)
**Author:** [@Madala](https://discuss.elastic.co/u/Madala)\ **Replies:** 5\ **Last updated:** [November 7, 2019, 6:52am UTC](https://discuss.elastic.co/t/per-second-aggregation-across-documents/205661 "2019-11-07T06:52:05Z")
Hi Team, We are using ES as analytics engine for our video platform. Users watch videos and we capture what second of the video is watched in every session. We have a use case where we need to plot a retention graph for… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1794) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1796)