# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1283 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1284 --- ## [Is it possible to set default number of replicas in elasticsearch](https://discuss.elastic.co/t/is-it-possible-to-set-default-number-of-replicas-in-elasticsearch/281215)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 8:44pm UTC](https://discuss.elastic.co/t/is-it-possible-to-set-default-number-of-replicas-in-elasticsearch/281215 "2021-08-12T20:44:19Z")
hello, Mine is a single node set up , and hence no replicas are assigned (i think ?) . Is it possible to set default replica number as 0 in elasticsearch.yml ? GET /\_cat/allocation?v shards disk.indices disk.used d… --- ## [Logstash.bat immediately errors out with \\Java\\jdk-11.0.12 was unexpected at this time](https://discuss.elastic.co/t/logstash-bat-immediately-errors-out-with-java-jdk-11-0-12-was-unexpected-at-this-time/281264)
**Author:** [@rjcpayne699](https://discuss.elastic.co/u/rjcpayne699)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 8:41pm UTC](https://discuss.elastic.co/t/logstash-bat-immediately-errors-out-with-java-jdk-11-0-12-was-unexpected-at-this-time/281264 "2021-08-12T20:41:55Z")
Just trying my first local run of logstash after installation on windows 10. I performed the first steps to validate jvm: PS C:\\logstash-7.14.0\> Write-Host $env:JAVA\_HOME C:\\Program Files (x86)\\Java\\jdk-11.0.12 PS C:\\… --- ## [Boolean Query causing server to crash without error message](https://discuss.elastic.co/t/boolean-query-causing-server-to-crash-without-error-message/281260)
**Author:** [@cstone1492](https://discuss.elastic.co/u/cstone1492)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 8:11pm UTC](https://discuss.elastic.co/t/boolean-query-causing-server-to-crash-without-error-message/281260 "2021-08-12T20:11:06Z")
Hi, I am using version 7.3. A boolean query I'm running (see code below) in a python script is causing the server script to crash without producing any form of error message. The query is within a for-loop, and the crash… --- ## [Painless Access array object](https://discuss.elastic.co/t/painless-access-array-object/281253)
**Author:** [@Aaish\_Sindwani](https://discuss.elastic.co/u/Aaish_Sindwani)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 7:28pm UTC](https://discuss.elastic.co/t/painless-access-array-object/281253 "2021-08-12T19:28:28Z")
HI Team, I am trying to access an array object within the source in the painless script but I am not able to with the error "failed\_shards" : \[ { "shard" : 0, "index" : "boxIndex", "node" … --- ## [Dashboards and Searches not importing using the Saved Objects API](https://discuss.elastic.co/t/dashboards-and-searches-not-importing-using-the-saved-objects-api/280690)
**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\ **Replies:** 2\ **Last updated:** [August 12, 2021, 7:21pm UTC](https://discuss.elastic.co/t/dashboards-and-searches-not-importing-using-the-saved-objects-api/280690 "2021-08-12T19:21:22Z")
I am using stack version 7.13.4 on Windows I created a system including Queries, Searches, Dashboards, Visualizations, Index Patterns. I exported these using the Kibana UI creating ndjson files for each category. I can … --- ## [Grok works on Grok debugger but got Grokparsefailure in logstash](https://discuss.elastic.co/t/grok-works-on-grok-debugger-but-got-grokparsefailure-in-logstash/281227)
**Author:** [@syunusic](https://discuss.elastic.co/u/syunusic)\ **Replies:** 5\ **Last updated:** [August 12, 2021, 6:55pm UTC](https://discuss.elastic.co/t/grok-works-on-grok-debugger-but-got-grokparsefailure-in-logstash/281227 "2021-08-12T18:55:34Z")
If I go to http://grokdebug.herokuapp.com/ or the GROK debugger in Kibana and use this sample and this grok, works fine.. but if I run it in logstash, I get a grokfailure tag: Sample: NSX 2281528 - \[nsx@6876 comp=\\"nsx… --- ## [How to use the iframe on an external page already authenticated](https://discuss.elastic.co/t/how-to-use-the-iframe-on-an-external-page-already-authenticated/280598)
**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 6:33pm UTC](https://discuss.elastic.co/t/how-to-use-the-iframe-on-an-external-page-already-authenticated/280598 "2021-08-12T18:33:26Z")
It would be possible, for example, from the tooth of another web tool, like: zabbix, to access a kibana dash. My intention is to get from within zabbix, create a page that opens a graphic of the kibana, without the pe… --- ## [Is it possible to use Angular Navbar Component in Kibana?](https://discuss.elastic.co/t/is-it-possible-to-use-angular-navbar-component-in-kibana/280587)
**Author:** [@raghosh](https://discuss.elastic.co/u/raghosh)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 6:22pm UTC](https://discuss.elastic.co/t/is-it-possible-to-use-angular-navbar-component-in-kibana/280587 "2021-08-12T18:22:41Z")
Basically we have common Navbar across all application which is built in angular and adapt , all forntend Microservices uses that. WE have Kibana as UI service but currently it doesnt have the navbar integrated . Is ther… --- ## [Error to send test email fron kibana connector](https://discuss.elastic.co/t/error-to-send-test-email-fron-kibana-connector/280567)
**Author:** [@perea870724](https://discuss.elastic.co/u/perea870724)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 6:17pm UTC](https://discuss.elastic.co/t/error-to-send-test-email-fron-kibana-connector/280567 "2021-08-12T18:17:58Z")
Hello, friends of the community, I am facing a problem when configuring the sending of email through connector, when I perform a test I get the following error: Action failed to run The following error was found: erro… --- ## [How to use the root of Spanish words for searches?](https://discuss.elastic.co/t/how-to-use-the-root-of-spanish-words-for-searches/280558)
**Author:** [@JavierArevalo](https://discuss.elastic.co/u/JavierArevalo)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 6:13pm UTC](https://discuss.elastic.co/t/how-to-use-the-root-of-spanish-words-for-searches/280558 "2021-08-12T18:13:39Z")
I need to search my documents by words, I want to obtain all the documents related to a word and its derivations in Spanish, for example: if I search for "flor" I want to obtain all the documents related to the words: "f… --- ## [How to disable attempts to connect to the package registry?](https://discuss.elastic.co/t/how-to-disable-attempts-to-connect-to-the-package-registry/280516)
**Author:** [@fadenb](https://discuss.elastic.co/u/fadenb)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 6:07pm UTC](https://discuss.elastic.co/t/how-to-disable-attempts-to-connect-to-the-package-registry/280516 "2021-08-12T18:07:04Z")
Hi, We are operating an Elastic stack in an environment that is intentionally unable to access the outside world/internet. When we browse to our Kibana dashboards, we see that our browsers are trying to fetch /api/flee… --- ## [Kibana canvas: how to add the values of 2 elements](https://discuss.elastic.co/t/kibana-canvas-how-to-add-the-values-of-2-elements/280166)
**Author:** [@gabor](https://discuss.elastic.co/u/gabor)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 5:53pm UTC](https://discuss.elastic.co/t/kibana-canvas-how-to-add-the-values-of-2-elements/280166 "2021-08-12T17:53:03Z")
Hi, I have two markdown elements on canvas showing the results of the same essql query but for 2 different IP addresses. I need a 3rd, which should hold the sum of the values from these 2 elements. I tried to create a … --- ## [Unable to Start Logstash with Elasticsearch - "Attempted to resurrect connection to dead ES instance"](https://discuss.elastic.co/t/unable-to-start-logstash-with-elasticsearch-attempted-to-resurrect-connection-to-dead-es-instance/281241)
**Author:** [@jdurga](https://discuss.elastic.co/u/jdurga)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 5:46pm UTC](https://discuss.elastic.co/t/unable-to-start-logstash-with-elasticsearch-attempted-to-resurrect-connection-to-dead-es-instance/281241 "2021-08-12T17:46:55Z")
I've followed these steps: https://github.com/virtualtechmeetup/0003\_howto\_elasticsearch\_kibana\_install\_ubuntu I would like to send Syslog traffic from Logstash to Datadog and Elasticsearch. Really just using Elasticse… --- ## [Logstash "if statement" not working for logs from winlogbeat 7.13.2 (works on older version)](https://discuss.elastic.co/t/logstash-if-statement-not-working-for-logs-from-winlogbeat-7-13-2-works-on-older-version/281179)
**Author:** [@heikis](https://discuss.elastic.co/u/heikis)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 9:57am UTC](https://discuss.elastic.co/t/logstash-if-statement-not-working-for-logs-from-winlogbeat-7-13-2-works-on-older-version/281179 "2021-08-12T09:57:05Z")
Hello. I have a weird problem with Logstash filtering. I am sending logs from several different winlogbeat agents to logstash for processing. I have winlogbeats agents with different versions- 7.9.1 and 7.13.2. Logsta… --- ## [Elasticsearch regexp for all fields](https://discuss.elastic.co/t/elasticsearch-regexp-for-all-fields/281237)
**Author:** [@ChinigamiHunter](https://discuss.elastic.co/u/ChinigamiHunter)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 5:26pm UTC](https://discuss.elastic.co/t/elasticsearch-regexp-for-all-fields/281237 "2021-08-12T17:26:02Z")
I need to write query to find regexp match any fields. i write a regexp match one field (laravel). $params = \[ 'index' =\> 'index', 'type' =\> '\_doc', 'body' =\> \[ … --- ## [Match phrase any query in elastic search](https://discuss.elastic.co/t/match-phrase-any-query-in-elastic-search/281236)
**Author:** [@vradder](https://discuss.elastic.co/u/vradder)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 5:25pm UTC](https://discuss.elastic.co/t/match-phrase-any-query-in-elastic-search/281236 "2021-08-12T17:25:05Z")
match phrase query will match full phrase. match phrase prefix query will match phrase as prefix. ex: "my\_field": "confidence ab" will match "confidence above" and "confidence about". is there query for "match phrase… --- ## [Logstash setup with Docker - \[exits after ~25s\]\[not able to find the problem\]](https://discuss.elastic.co/t/logstash-setup-with-docker-exits-after-25s-not-able-to-find-the-problem/281211)
**Author:** [@Jno\_Zrc](https://discuss.elastic.co/u/Jno_Zrc)\ **Replies:** 2\ **Last updated:** [August 12, 2021, 5:01pm UTC](https://discuss.elastic.co/t/logstash-setup-with-docker-exits-after-25s-not-able-to-find-the-problem/281211 "2021-08-12T17:01:09Z")
Hi all, I'm trying to insert a large csv file in Elasticsearch using Logstash. I manage to make it work, but after a while testing some different mutate transformations it stopped working. I even tried a minimal confi… --- ## [Transport Error Unauthorized](https://discuss.elastic.co/t/transport-error-unauthorized/280476)
**Author:** [@agentw](https://discuss.elastic.co/u/agentw)\ **Replies:** 11\ **Last updated:** [August 12, 2021, 4:33pm UTC](https://discuss.elastic.co/t/transport-error-unauthorized/280476 "2021-08-12T16:33:31Z")
I upgraded our cluster to 7.14, and after the update for Logstash I received "Pipeline error {:pipeline\_id=\>"main", :exception=\>#\ **Author:** [@Stanislav\_Livotov](https://discuss.elastic.co/u/Stanislav_Livotov)\ **Replies:** 3\ **Last updated:** [August 12, 2021, 4:15pm UTC](https://discuss.elastic.co/t/store-size-is-not-equal-to-primary-count-replica-count-pri-store-size/281190 "2021-08-12T16:15:15Z") Hi all, I have index configuration, with just 1 shard, 1 primary and 1 replica. When I’m invoking \_cat/indices I’m expecting to see that my store.size will be equal to 2 \*pri.store.size, however it is not so. health s… --- ## [Logstash degrading after a few days and restart solves the issue temporarily](https://discuss.elastic.co/t/logstash-degrading-after-a-few-days-and-restart-solves-the-issue-temporarily/281231)
**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 4:13pm UTC](https://discuss.elastic.co/t/logstash-degrading-after-a-few-days-and-restart-solves-the-issue-temporarily/281231 "2021-08-12T16:13:07Z")
Hi All, We are using a cluster of two logstash instances (7.13.4) to ingest data to a three-node cluster (7.13.4). We noticed that after a few days the ingest rate falls from 30K - 50K to less than 30K and the data are … --- ## [Découpage avec split ne fonctionne pas](https://discuss.elastic.co/t/decoupage-avec-split-ne-fonctionne-pas/281225)
**Author:** [@Christophe\_Dumont](https://discuss.elastic.co/u/Christophe_Dumont)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 3:46pm UTC](https://discuss.elastic.co/t/decoupage-avec-split-ne-fonctionne-pas/281225 "2021-08-12T15:46:50Z")
Bonjour, Je souhaite indexer des paquets réseau et en extraire certaines informations mais logstash envoi tout dans un champ unique. Voici le code logstash : input { kafka { bootstrap\_servers =\> "172.16.238.204:… --- ## ['Intelligently' cutting out results](https://discuss.elastic.co/t/intelligently-cutting-out-results/281194)
**Author:** [@slawosz](https://discuss.elastic.co/u/slawosz)\ **Replies:** 3\ **Last updated:** [August 12, 2021, 3:27pm UTC](https://discuss.elastic.co/t/intelligently-cutting-out-results/281194 "2021-08-12T15:27:04Z")
Hi, lets say I have products with serial numbers, and format is FOO-XXXXX where FOO is always there and XXXXX are digits. When I search for FOO-12345, the results are showing all products, for example (score in bracket… --- ## [How should I filter this date?](https://discuss.elastic.co/t/how-should-i-filter-this-date/281185)
**Author:** [@AbelAlejandro](https://discuss.elastic.co/u/AbelAlejandro)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 3:16pm UTC](https://discuss.elastic.co/t/how-should-i-filter-this-date/281185 "2021-08-12T15:16:50Z")
My logs are TSVs that look like the following: |timestamp\_fmt|timestamp\_ms|key|tictoc\_ms|mem\_jvm|mem\_phy\_os|tags|comment| |---|---|---|---|---|---|---|---| |2021-08-11T13-55-39.202|1628682939202|SCENARIO|TIC|4548715304|… --- ## [Kafka to logstash , with dynamic topic creation](https://discuss.elastic.co/t/kafka-to-logstash-with-dynamic-topic-creation/281181)
**Author:** [@navox\_nadhir](https://discuss.elastic.co/u/navox_nadhir)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 3:16pm UTC](https://discuss.elastic.co/t/kafka-to-logstash-with-dynamic-topic-creation/281181 "2021-08-12T15:16:43Z")
I have a question ; i need to know if logstash can handle the creation of topics kafka dynamically basing on feilds ! as un output ! the pipeline is kafka input --\> logstash --\> kafka output the use case is kubernet… --- ## [File Input codec =\> "json\_lines" won't work](https://discuss.elastic.co/t/file-input-codec-json-lines-wont-work/281196)
**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\ **Replies:** 2\ **Last updated:** [August 12, 2021, 3:05pm UTC](https://discuss.elastic.co/t/file-input-codec-json-lines-wont-work/281196 "2021-08-12T15:05:26Z")
I try to read from a json file but codec=\>"json\_lines" won't work, can't see any output. But when i try and set codec=\>"json" it works and parses the data and i see the output. So you ask me what is the format of the js… --- ## [SEO friendly URLs in React](https://discuss.elastic.co/t/seo-friendly-urls-in-react/281217)
**Author:** [@xubisid](https://discuss.elastic.co/u/xubisid)\ **Replies:** 2\ **Last updated:** [August 12, 2021, 2:40pm UTC](https://discuss.elastic.co/t/seo-friendly-urls-in-react/281217 "2021-08-12T14:40:41Z")
\#Hi, Can someone please share the sample in which our facets/filters will work on behalf of the SEO friendly URLs instead of the following URL http://localhost:3000/?size=n\_20\_n&filters\[0\]\[field\]=store&filters\[0\]\[value… --- ## [Kibana is helpful but interface is very horrible](https://discuss.elastic.co/t/kibana-is-helpful-but-interface-is-very-horrible/281117)
**Author:** [@bailarch](https://discuss.elastic.co/u/bailarch)\ **Replies:** 4\ **Last updated:** [August 12, 2021, 2:30pm UTC](https://discuss.elastic.co/t/kibana-is-helpful-but-interface-is-very-horrible/281117 "2021-08-12T14:30:20Z")
Hello, I've been using Kibana for months but something that really irritates me is the value limit for Lens. Dashboard lens is super intuitive and I love it but its very disappointing to see how the value limit is only … --- ## [Ansible Playbook - cluster.remote.connect Understanding and cross-cluster replication](https://discuss.elastic.co/t/ansible-playbook-cluster-remote-connect-understanding-and-cross-cluster-replication/281216)
**Author:** [@jthart](https://discuss.elastic.co/u/jthart)\ **Replies:** 0\ **Last updated:** [August 12, 2021, 2:23pm UTC](https://discuss.elastic.co/t/ansible-playbook-cluster-remote-connect-understanding-and-cross-cluster-replication/281216 "2021-08-12T14:23:10Z")
I have an elasticsearch deployment consisting of one cluster, and I want to create a second cluster for a primary/secondary setup with cross-cluster replication. Is there something I can be pointed to to understand all o… --- ## [What are the advantages and the disadvantages of running multiple instances of logstash in the same cluster?](https://discuss.elastic.co/t/what-are-the-advantages-and-the-disadvantages-of-running-multiple-instances-of-logstash-in-the-same-cluster/281087)
**Author:** [@xemyleex](https://discuss.elastic.co/u/xemyleex)\ **Replies:** 3\ **Last updated:** [August 12, 2021, 2:13pm UTC](https://discuss.elastic.co/t/what-are-the-advantages-and-the-disadvantages-of-running-multiple-instances-of-logstash-in-the-same-cluster/281087 "2021-08-12T14:13:21Z")
What are the advantages and the disadvantages of running multiple instances of logstash in the same cluster? --- ## [Drop events from metricbeat is not working](https://discuss.elastic.co/t/drop-events-from-metricbeat-is-not-working/281208)
**Author:** [@fpsouza](https://discuss.elastic.co/u/fpsouza)\ **Replies:** 2\ **Last updated:** [August 12, 2021, 1:51pm UTC](https://discuss.elastic.co/t/drop-events-from-metricbeat-is-not-working/281208 "2021-08-12T13:51:42Z")
Hello Folks, as you can see below, I'm not being able to drop event when doesn't have "system". Could u please let me know if if is possible to do that? I really appreciate your help and time processors: drop\_event… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1282) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1284)