# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1467 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1468 --- ## [Filebeat Module Suggestion](https://discuss.elastic.co/t/filebeat-module-suggestion/268426)
**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\ **Replies:** 2\ **Last updated:** [April 12, 2021, 1:33am UTC](https://discuss.elastic.co/t/filebeat-module-suggestion/268426 "2021-04-12T01:33:10Z")
Hi Elasticsearch Developers, This is kind of suggestion post, I want to integrate Versa-Network Logs into Elasticsearch. and it would be much easier if you include that module in Filebeat. Too much fields for ecs map… --- ## [What will happen if I install ELK stack with the unsupported version?](https://discuss.elastic.co/t/what-will-happen-if-i-install-elk-stack-with-the-unsupported-version/269659)
**Author:** [@BTH.S3](https://discuss.elastic.co/u/BTH.S3)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 1:32am UTC](https://discuss.elastic.co/t/what-will-happen-if-i-install-elk-stack-with-the-unsupported-version/269659 "2021-04-12T01:32:49Z")
I've noticed that installed Elasticsearch cluster and Kibana was installed on Ubuntu 20.04 LTS. (By one of my colleague) with unsupported version 6.2.4 (from the Elastic Support Matrix | Elasticsearch). But he said the … --- ## [java.nio.channels.OverlappingFileLockException: null](https://discuss.elastic.co/t/java-nio-channels-overlappingfilelockexception-null/269676)
**Author:** [@yangyong](https://discuss.elastic.co/u/yangyong)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 1:30am UTC](https://discuss.elastic.co/t/java-nio-channels-overlappingfilelockexception-null/269676 "2021-04-12T01:30:26Z")
some problems happened when i install es on my mac. es version: 7.12.0 what should i do? reboot machine? but it seems no effect~~! :sweat\_smile: \[2021-04-09T15:46:17,351\]\[INFO \]\[o.e.x.s.a.s.FileRolesStore\] \[MacdeMa… --- ## [How do I use multiple conditions in condition script watcher](https://discuss.elastic.co/t/how-do-i-use-multiple-conditions-in-condition-script-watcher/269677)
**Author:** [@Jeroen2](https://discuss.elastic.co/u/Jeroen2)\ **Replies:** 0\ **Last updated:** [April 9, 2021, 8:07am UTC](https://discuss.elastic.co/t/how-do-i-use-multiple-conditions-in-condition-script-watcher/269677 "2021-04-09T08:07:17Z")
If I create a watcher and I have a condition that looks like this: "condition": { "script": { "source": "return 5 / 100 \* 100 \> 5", "lang": "painless" } } it returns false (0). while when I have … --- ## [Updating mapping for CCR replica](https://discuss.elastic.co/t/updating-mapping-for-ccr-replica/269804)
**Author:** [@oskars](https://discuss.elastic.co/u/oskars)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 12:54am UTC](https://discuss.elastic.co/t/updating-mapping-for-ccr-replica/269804 "2021-04-12T00:54:22Z")
Hi ! We are looking to buy platinium license to use CCR functionality. We are stuck with old elastic version 6.8. (no way to upgrade). In our setup replication is needed for failover with hot indice (all data i sync t… --- ## [Log\_file\_path](https://discuss.elastic.co/t/log-file-path/267727)
**Author:** [@christos\_zivlas](https://discuss.elastic.co/u/christos_zivlas)\ **Replies:** 9\ **Last updated:** [April 12, 2021, 12:29am UTC](https://discuss.elastic.co/t/log-file-path/267727 "2021-04-12T00:29:09Z")
Hi i am using filebeat on windows to get some application logs. Messages are harvest using a wildcard path. messages coming in do not contain the path of the log, is there a way to place such a field in the log message? --- ## [Stale data until elasticsearch is restarted](https://discuss.elastic.co/t/stale-data-until-elasticsearch-is-restarted/269480)
**Author:** [@rwxr\_xr\_x](https://discuss.elastic.co/u/rwxr_xr_x)\ **Replies:** 3\ **Last updated:** [April 12, 2021, 12:24am UTC](https://discuss.elastic.co/t/stale-data-until-elasticsearch-is-restarted/269480 "2021-04-12T00:24:16Z")
Hello, I can't seem to find any posts about this. I have a cluster with one node, with "cluster health: yellow (60 of 115)". I'm using ES 7.10.2 From an application I send: POST http://ESURL/ALIAS\_NAME/\_doc/OBJECT\_ID … --- ## [Logstash Grok Filter Error Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \[A-Za-z0-9\_-\], '\\"', \\"'\\", \[A-Za-z\_\], \\"-\\", \[0-9\], \\"\[\\", \\"{\\"](https://discuss.elastic.co/t/logstash-grok-filter-error-expected-one-of-t-r-n-a-za-z0-9-a-za-z-0-9/269808)
**Author:** [@baklavadeseni](https://discuss.elastic.co/u/baklavadeseni)\ **Replies:** 3\ **Last updated:** [April 11, 2021, 11:42pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-error-expected-one-of-t-r-n-a-za-z0-9-a-za-z-0-9/269808 "2021-04-11T23:42:26Z")
Hello Logstash Community, I am trying to parse text below. I was able to filter it in grokdebug site. But however i can't filter in logstash. It throws this. "LogStash::ConfigurationError", :message=\>"Expected one of \[… --- ## [Metricbeat - mysql module - galera\_status metricset](https://discuss.elastic.co/t/metricbeat-mysql-module-galera-status-metricset/267508)
**Author:** [@AlexanderN](https://discuss.elastic.co/u/AlexanderN)\ **Replies:** 5\ **Last updated:** [April 11, 2021, 8:57pm UTC](https://discuss.elastic.co/t/metricbeat-mysql-module-galera-status-metricset/267508 "2021-04-11T20:57:02Z")
Hello! First time poster searching for an answer to a problem that google isn't helpful with. I am using Metricbeat with the mysql module to send metrics from my "5.7.30-log" mysql server with the "galera\_status" metri… --- ## [Mapping Conflict Issue](https://discuss.elastic.co/t/mapping-conflict-issue/269719)
**Author:** [@Shivani92](https://discuss.elastic.co/u/Shivani92)\ **Replies:** 1\ **Last updated:** [April 11, 2021, 6:23pm UTC](https://discuss.elastic.co/t/mapping-conflict-issue/269719 "2021-04-11T18:23:10Z")
If data type of field is changed in logstash configuration then is it required to create new index every time to get the changes apply? Ex. Field "pauseTime" is extracted using KV filter. Data type of the field is chang… --- ## [Best workflow to update integrations](https://discuss.elastic.co/t/best-workflow-to-update-integrations/269819)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 0\ **Last updated:** [April 11, 2021, 6:08pm UTC](https://discuss.elastic.co/t/best-workflow-to-update-integrations/269819 "2021-04-11T18:08:32Z")
Hey, When upgrading the stack, integrations aren't automatically updated. After updating the integration manually in fleet, all existing policies remain with their current integration version. What's the best way to up… --- ## [Whether multiple shard refresh is atomic state](https://discuss.elastic.co/t/whether-multiple-shard-refresh-is-atomic-state/269811)
**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\ **Replies:** 1\ **Last updated:** [April 11, 2021, 5:28pm UTC](https://discuss.elastic.co/t/whether-multiple-shard-refresh-is-atomic-state/269811 "2021-04-11T17:28:45Z")
Suppose I have 3 data nodes, in the process of refreshing, if a search occurs, will there be an intermediate state, for example, node A can search for the latest content, but nodes B and C see the same old content --- ## [Eval script inside field](https://discuss.elastic.co/t/eval-script-inside-field/269816)
**Author:** [@opak](https://discuss.elastic.co/u/opak)\ **Replies:** 0\ **Last updated:** [April 11, 2021, 3:29pm UTC](https://discuss.elastic.co/t/eval-script-inside-field/269816 "2021-04-11T15:29:46Z")
Hello, i have a question how to eval script which can be stored inside a field. For example, i want to define rules for calculation inside documents. Let's see on this mapping: index: rules { "properties": { "pr… --- ## [Getting Case insensitive Response in Hits](https://discuss.elastic.co/t/getting-case-insensitive-response-in-hits/269776)
**Author:** [@Sammeta\_David\_Raju](https://discuss.elastic.co/u/Sammeta_David_Raju)\ **Replies:** 8\ **Last updated:** [April 11, 2021, 2:05pm UTC](https://discuss.elastic.co/t/getting-case-insensitive-response-in-hits/269776 "2021-04-11T14:05:37Z")
Hi all I am getting case Insensitive Data in Hits(SearchResponse ) even I am having Case Sensitive Data in Elasticsearch index like index contains { customerName :"David", departmentName:"IT", applicantName:"Raju"} b… --- ## [Get xml node name](https://discuss.elastic.co/t/get-xml-node-name/269775)
**Author:** [@Petr\_Vancl\_Hochberge](https://discuss.elastic.co/u/Petr_Vancl_Hochberge)\ **Replies:** 3\ **Last updated:** [April 11, 2021, 2:35pm UTC](https://discuss.elastic.co/t/get-xml-node-name/269775 "2021-04-11T14:35:51Z")
Hello, I am little lost with one problem when parsing xml files to ES with Logstash. Due to unfortunate xml structure which I can't change, I need to get string name of specific nodes. Example of xml structure: \… --- ## [Kibana export issues (xpack.reporting.encryptionKey, timeout and data too large)](https://discuss.elastic.co/t/kibana-export-issues-xpack-reporting-encryptionkey-timeout-and-data-too-large/267408)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 4\ **Last updated:** [April 11, 2021, 2:30pm UTC](https://discuss.elastic.co/t/kibana-export-issues-xpack-reporting-encryptionkey-timeout-and-data-too-large/267408 "2021-04-11T14:30:07Z")
I have a three node cluster running in my homelab. It is a virtualised environment (ESXi) with Ubuntu server OS (LTS) & two nodes being data nodes & the third one being a voting only node. Both the data nodes run a Kiban… --- ## [Winlogbeats remove @metadata, agent and ecs fields](https://discuss.elastic.co/t/winlogbeats-remove-metadata-agent-and-ecs-fields/269764)
**Author:** [@witkacy](https://discuss.elastic.co/u/witkacy)\ **Replies:** 1\ **Last updated:** [April 11, 2021, 1:35pm UTC](https://discuss.elastic.co/t/winlogbeats-remove-metadata-agent-and-ecs-fields/269764 "2021-04-11T13:35:40Z")
Hello, Is it possible to not include in exported log fields: @metadata, agent and ecs? I added processor - drop\_fields: fields: \["host", "log", "event", "agent", "ecs", "winlog", "@metadata"\] and most of… --- ## [Elasticsearch syntax for e-commerce type project](https://discuss.elastic.co/t/elasticsearch-syntax-for-e-commerce-type-project/269793)
**Author:** [@Ugnius\_V](https://discuss.elastic.co/u/Ugnius_V)\ **Replies:** 2\ **Last updated:** [April 11, 2021, 1:04pm UTC](https://discuss.elastic.co/t/elasticsearch-syntax-for-e-commerce-type-project/269793 "2021-04-11T13:04:26Z")
Hello! First of all, I'm a beginner Elasticsearch. Now we are creating a web system that requires a search feature (yah, first time, earlier we created static content systems :grinning\_face\_with\_smiling\_eyes: ), so we ch… --- ## [Kubernetes pods stdout logs](https://discuss.elastic.co/t/kubernetes-pods-stdout-logs/269802)
**Author:** [@dogan](https://discuss.elastic.co/u/dogan)\ **Replies:** 0\ **Last updated:** [April 11, 2021, 11:03am UTC](https://discuss.elastic.co/t/kubernetes-pods-stdout-logs/269802 "2021-04-11T11:03:26Z")
Hello, I installed a kubernetes cluster. I want the stdout logs of these cluster pots to be sent to elasticsearch. how can I do it --- ## [Elastic search is not using data path setting](https://discuss.elastic.co/t/elastic-search-is-not-using-data-path-setting/269796)
**Author:** [@Selva\_kumar2](https://discuss.elastic.co/u/Selva_kumar2)\ **Replies:** 5\ **Last updated:** [April 11, 2021, 10:45am UTC](https://discuss.elastic.co/t/elastic-search-is-not-using-data-path-setting/269796 "2021-04-11T10:45:57Z")
I am trying to run 2 elastic search instances in single VM machine with the below configuration. Both are started successfully. But both are using same data store I have given the different path in data store but its n… --- ## [Ignore gobal filter not found](https://discuss.elastic.co/t/ignore-gobal-filter-not-found/269769)
**Author:** [@Lorenzo\_Allori](https://discuss.elastic.co/u/Lorenzo_Allori)\ **Replies:** 2\ **Last updated:** [April 11, 2021, 9:22am UTC](https://discuss.elastic.co/t/ignore-gobal-filter-not-found/269769 "2021-04-11T09:22:37Z")
Hi guys, I would like to have a dashboard with two maps (identical) on which I can indipendently slect filters from the + sign in one tooltip and have them filtered indipendently to compare visually what happens. Is it… --- ## [Elastic Search Single Node Cluster not working](https://discuss.elastic.co/t/elastic-search-single-node-cluster-not-working/269785)
**Author:** [@Selva\_kumar2](https://discuss.elastic.co/u/Selva_kumar2)\ **Replies:** 1\ **Last updated:** [April 10, 2021, 7:44pm UTC](https://discuss.elastic.co/t/elastic-search-single-node-cluster-not-working/269785 "2021-04-10T19:44:06Z")
I am trying to set up single node elastic search. But master node is not at all discovering. If I start with cluster.initial\_master\_nodes as one node. Master is elected but cluster formation is not happening and RemoteT… --- ## [Kibana error - Internal Server Error](https://discuss.elastic.co/t/kibana-error-internal-server-error/269780)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 1\ **Last updated:** [April 10, 2021, 6:36pm UTC](https://discuss.elastic.co/t/kibana-error-internal-server-error/269780 "2021-04-10T18:36:04Z")
Whenever I try to export data from Kibana, I am getting internal service error. Following is the log entry in kibana.log. Could I kindly request someone to help me resolve this please. {"type":"log","@timestamp":"2021-… --- ## [ElasticSearch stops working after sometime](https://discuss.elastic.co/t/elasticsearch-stops-working-after-sometime/269373)
**Author:** [@Devendra\_Deshmukh](https://discuss.elastic.co/u/Devendra_Deshmukh)\ **Replies:** 9\ **Last updated:** [April 10, 2021, 3:30pm UTC](https://discuss.elastic.co/t/elasticsearch-stops-working-after-sometime/269373 "2021-04-10T15:30:55Z")
My ElasticSearch server works fine for a few hours or a day and suddenly stops working. It has 1 shard and 1 replica on a single node installed on VPS along with the application server and has only 1 index with 30,000 do… --- ## [Case insensitive search on keyword](https://discuss.elastic.co/t/case-insensitive-search-on-keyword/269773)
**Author:** [@Tam2](https://discuss.elastic.co/u/Tam2)\ **Replies:** 3\ **Last updated:** [April 10, 2021, 3:24pm UTC](https://discuss.elastic.co/t/case-insensitive-search-on-keyword/269773 "2021-04-10T15:24:46Z")
My index looks something like this: { "mappings": { "properties": { "id": { "type": "integer" }, "clientId": { "type": "integer"}, "status": { "type": "keyword" }, "r… --- ## [How to print out %{host.ip} using line codec?](https://discuss.elastic.co/t/how-to-print-out-host-ip-using-line-codec/269750)
**Author:** [@hmiti](https://discuss.elastic.co/u/hmiti)\ **Replies:** 6\ **Last updated:** [April 10, 2021, 3:09pm UTC](https://discuss.elastic.co/t/how-to-print-out-host-ip-using-line-codec/269750 "2021-04-10T15:09:32Z")
I am using the line codec to output the logs into a text file. Requested to include only the IP and log entry itself. Tried different combination of %{host}.{ip} like this, nothing works so far. output { file { p… --- ## [Changing the Login screen logo and text](https://discuss.elastic.co/t/changing-the-login-screen-logo-and-text/269636)
**Author:** [@Dinesh\_Sharma](https://discuss.elastic.co/u/Dinesh_Sharma)\ **Replies:** 1\ **Last updated:** [April 10, 2021, 12:53pm UTC](https://discuss.elastic.co/t/changing-the-login-screen-logo-and-text/269636 "2021-04-10T12:53:26Z")
Hi, How can I change the login screen logo and text of kibana version 7.11. I tried with some already available post but they seems deprecated. --- ## [How to Sum two or more integer from different logs](https://discuss.elastic.co/t/how-to-sum-two-or-more-integer-from-different-logs/269767)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 4\ **Last updated:** [April 10, 2021, 11:56am UTC](https://discuss.elastic.co/t/how-to-sum-two-or-more-integer-from-different-logs/269767 "2021-04-10T11:56:11Z")
Hi I have 2logs: { "\_index": "monitoring", "\_type": "\_doc", "\_id": "1", "\_version": 1, "\_score": null, "\_source": { "jobtypedescription": "Monitor", "@version": "1", "jobtypeid": 1, "jobacti… --- ## [ElasticSearch - Nest - Mapping hits nested in lists and dictionaries](https://discuss.elastic.co/t/elasticsearch-nest-mapping-hits-nested-in-lists-and-dictionaries/269772)
**Author:** [@h4tle](https://discuss.elastic.co/u/h4tle)\ **Replies:** 0\ **Last updated:** [April 10, 2021, 11:51am UTC](https://discuss.elastic.co/t/elasticsearch-nest-mapping-hits-nested-in-lists-and-dictionaries/269772 "2021-04-10T11:51:46Z")
TLDR: How do I get the data I need to sit inside source like my timestamp and not inside a million lists and dictionaries? I'm trying to create Data objects from this Nest query. The data comes from MetricBeats and ends… --- ## [How to upload csv files with high speed to Elasticsearch ( bulk copy , block copy )](https://discuss.elastic.co/t/how-to-upload-csv-files-with-high-speed-to-elasticsearch-bulk-copy-block-copy/269770)
**Author:** [@siyavusak](https://discuss.elastic.co/u/siyavusak)\ **Replies:** 1\ **Last updated:** [April 10, 2021, 11:24am UTC](https://discuss.elastic.co/t/how-to-upload-csv-files-with-high-speed-to-elasticsearch-bulk-copy-block-copy/269770 "2021-04-10T11:24:43Z")
How to upload csv files with high speed / best performance to Elasticsearch ( bulk copy , block copy ) ? we have got csv format files every with 1TB size . regards [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1466) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1468)