# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1801 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1802 --- ## [Elasticsearch7.8 Could not create the Java Virtual Machine](https://discuss.elastic.co/t/elasticsearch7-8-could-not-create-the-java-virtual-machine/248825)
**Author:** [@HKN\_MZ](https://discuss.elastic.co/u/HKN_MZ)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 4:37am UTC](https://discuss.elastic.co/t/elasticsearch7-8-could-not-create-the-java-virtual-machine/248825 "2020-09-17T04:37:02Z")
--- ## [Helm3 chart version v7.9.1 Elasticsearch and Kibana both on the same Minikube profile](https://discuss.elastic.co/t/helm3-chart-version-v7-9-1-elasticsearch-and-kibana-both-on-the-same-minikube-profile/248655)
**Author:** [@vugar](https://discuss.elastic.co/u/vugar)\ **Replies:** 4\ **Last updated:** [September 17, 2020, 4:09am UTC](https://discuss.elastic.co/t/helm3-chart-version-v7-9-1-elasticsearch-and-kibana-both-on-the-same-minikube-profile/248655 "2020-09-17T04:09:12Z")
Hi there! Anyone had any luck with deploying both Elasticsearch and Kibana on the same Minikube profile with Helm3 ? It seems as if I can deploy only Elasticsearch or Kibana but not both... --- ## [How do I storage ES data into HDFS](https://discuss.elastic.co/t/how-do-i-storage-es-data-into-hdfs/248902)
**Author:** [@vpzlin](https://discuss.elastic.co/u/vpzlin)\ **Replies:** 4\ **Last updated:** [September 17, 2020, 3:42am UTC](https://discuss.elastic.co/t/how-do-i-storage-es-data-into-hdfs/248902 "2020-09-17T03:42:12Z")
Hello guys, I'm using ElasticSearch 6.6.0. Recently I recieved a requirement that ES data should storage into HDFS, because Solr can do this. So I mounted HDFS as a local path '/esdata' by HDFS NFS3 Gateway, and set dat… --- ## [Regular Expression Query DSL](https://discuss.elastic.co/t/regular-expression-query-dsl/246312)
**Author:** [@dandcp](https://discuss.elastic.co/u/dandcp)\ **Replies:** 8\ **Last updated:** [September 17, 2020, 3:19am UTC](https://discuss.elastic.co/t/regular-expression-query-dsl/246312 "2020-09-17T03:19:45Z")
I have what I think should be easy to do, but am struggling b.c of how REGEX is handled in a DSL query. I have records that look like this Main App Name sub-app1 - (Main App Name) sub-app2 - (Main App Name) sub-app3… --- ## [New install - unable to start Elasticsearch](https://discuss.elastic.co/t/new-install-unable-to-start-elasticsearch/248875)
**Author:** [@rcoote](https://discuss.elastic.co/u/rcoote)\ **Replies:** 5\ **Last updated:** [September 17, 2020, 2:56am UTC](https://discuss.elastic.co/t/new-install-unable-to-start-elasticsearch/248875 "2020-09-17T02:56:06Z")
Hello, Fresh install on Ubuntu server following along with Rob's video. When starting Elasticsearch for the first time it fails. admin@oeg-elk-01:~ sudo systemctl start elasticsearch Job for elasticsearch.service faile… --- ## [Nodes continuously leaving and rejoining the cluster in 7.1 cluster after master switch](https://discuss.elastic.co/t/nodes-continuously-leaving-and-rejoining-the-cluster-in-7-1-cluster-after-master-switch/248771)
**Author:** [@itiyamas](https://discuss.elastic.co/u/itiyamas)\ **Replies:** 7\ **Last updated:** [September 17, 2020, 2:26am UTC](https://discuss.elastic.co/t/nodes-continuously-leaving-and-rejoining-the-cluster-in-7-1-cluster-after-master-switch/248771 "2020-09-17T02:26:20Z")
Hi, I have a 51 node elasticsearch cluster with 48 data nodes and 3 master nodes. ES version is 7.1.1. In one of the cases, I saw that 4 nodes were continuously out of the cluster for a really long time just after maste… --- ## [How to disable http security with xpack enabled](https://discuss.elastic.co/t/how-to-disable-http-security-with-xpack-enabled/248872)
**Author:** [@vamsikrishna\_medeti](https://discuss.elastic.co/u/vamsikrishna_medeti)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 1:47am UTC](https://discuss.elastic.co/t/how-to-disable-http-security-with-xpack-enabled/248872 "2020-09-17T01:47:05Z")
Hi, I am setting up on-premise elastic stack with xpack enabled. As all the infrastructure is with in VPN, I would like to disable http security. But I am not able to use some features of xpack when http security is dis… --- ## [ELK on Cloud vs AWS Elastic search and Logstash](https://discuss.elastic.co/t/elk-on-cloud-vs-aws-elastic-search-and-logstash/248788)
**Author:** [@DG13](https://discuss.elastic.co/u/DG13)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 1:30am UTC](https://discuss.elastic.co/t/elk-on-cloud-vs-aws-elastic-search-and-logstash/248788 "2020-09-17T01:30:07Z")
Hi , Need forum members opinion based on their experience . I looked at two options AWS Elastic search + Logstash ( installed separetly ) ELK licensed installation on cloud Have considered follwing factors List i… --- ## [Curator support for RHEL8](https://discuss.elastic.co/t/curator-support-for-rhel8/248887)
**Author:** [@fragatina](https://discuss.elastic.co/u/fragatina)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 12:53am UTC](https://discuss.elastic.co/t/curator-support-for-rhel8/248887 "2020-09-17T00:53:53Z")
Hi! I'm using elasticsearch-curator in RHEL8 but it's giving this this error: Traceback (most recent call last): File "/home/buh/.local/lib/python3.6/site-packages/cx\_Freeze/initscripts/\_\_startup\_\_.py", line 14, in … --- ## [CSV Export wrong @timestamp](https://discuss.elastic.co/t/csv-export-wrong-timestamp/248259)
**Author:** [@kvtang](https://discuss.elastic.co/u/kvtang)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 12:35am UTC](https://discuss.elastic.co/t/csv-export-wrong-timestamp/248259 "2020-09-17T00:35:07Z")
Hi all, I have a date filter in logstash as below : date { match =\> \["\[@metadata\]\[timestamp\]", "ISO8601"\] timezone =\> "Asia/Kuala\_Lumpur" } However, when I try to export into CSV, the @timestamp field is always … --- ## [BIND dns with Beats](https://discuss.elastic.co/t/bind-dns-with-beats/247651)
**Author:** [@Gomeisa](https://discuss.elastic.co/u/Gomeisa)\ **Replies:** 11\ **Last updated:** [September 17, 2020, 12:22am UTC](https://discuss.elastic.co/t/bind-dns-with-beats/247651 "2020-09-17T00:22:44Z")
Hi, I want to use elastic siem for my DNS server logs, we are using a BIND DNS server, I don't want to install Packetbeat/Filebeat on the DNS server machine. we use syslog-ng to redirect DNS server logs to UDP port 514… --- ## [Multi\_match most\_fields doesn't divide score by number of clauses](https://discuss.elastic.co/t/multi-match-most-fields-doesnt-divide-score-by-number-of-clauses/248891)
**Author:** [@tochiai](https://discuss.elastic.co/u/tochiai)\ **Replies:** 0\ **Last updated:** [September 17, 2020, 12:08am UTC](https://discuss.elastic.co/t/multi-match-most-fields-doesnt-divide-score-by-number-of-clauses/248891 "2020-09-17T00:08:43Z")
Hi, I was trying to understand scores for the following multi\_match query using explain: true: GET /myindex/\_search { "size": 5, "explain": true, "\_source": false, "query": { "bool": { "minimum\_should… --- ## [Logstash restsart and no error logs](https://discuss.elastic.co/t/logstash-restsart-and-no-error-logs/248853)
**Author:** [@loxiaopohaiol](https://discuss.elastic.co/u/loxiaopohaiol)\ **Replies:** 1\ **Last updated:** [September 16, 2020, 11:58pm UTC](https://discuss.elastic.co/t/logstash-restsart-and-no-error-logs/248853 "2020-09-16T23:58:16Z")
I have install the logstash with the rpm package, the version is 6.0, and the vm is 2c 2g, the jdk version is 1.8.0(yum install), when I start the logstash service, it always restart , and no error log in the /var/log/me… --- ## [Extract Info from Field using Logstash](https://discuss.elastic.co/t/extract-info-from-field-using-logstash/248883)
**Author:** [@rsuper\_6616](https://discuss.elastic.co/u/rsuper_6616)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 11:25pm UTC](https://discuss.elastic.co/t/extract-info-from-field-using-logstash/248883 "2020-09-16T23:25:40Z")
Hi I have a field in ELK and I am using logstash v7 to extract the logs from Elastic to CSV and I have a field that part of it contains XML and Json how can I write a filter plugin that can get the XML Part or (JSON) it… --- ## [Logstash output plugin elastic\_app\_search not found](https://discuss.elastic.co/t/logstash-output-plugin-elastic-app-search-not-found/248617)
**Author:** [@Henry\_Pak](https://discuss.elastic.co/u/Henry_Pak)\ **Replies:** 1\ **Last updated:** [September 16, 2020, 10:32pm UTC](https://discuss.elastic.co/t/logstash-output-plugin-elastic-app-search-not-found/248617 "2020-09-16T22:32:08Z")
I've been scratching my head for the last couple of hours on this but I can't seem to figure out why Logstash can't find the elastic\_app\_search output plugin. I have a tar.gz install of Logstash 7.9.1 (running on a Mac)… --- ## [Send batch file output to Elasticsearch](https://discuss.elastic.co/t/send-batch-file-output-to-elasticsearch/248672)
**Author:** [@shiv97](https://discuss.elastic.co/u/shiv97)\ **Replies:** 5\ **Last updated:** [September 16, 2020, 9:20pm UTC](https://discuss.elastic.co/t/send-batch-file-output-to-elasticsearch/248672 "2020-09-16T21:20:14Z")
Hello Everyone, I am having one batch file, when I run batch file in command prompt it prints some output I want to ingest this output in Elasticsearch instance. kindly provide me help on this case!! --- ## [Unexpected reset of read\_only\_allow\_delete](https://discuss.elastic.co/t/unexpected-reset-of-read-only-allow-delete/248885)
**Author:** [@dwilches](https://discuss.elastic.co/u/dwilches)\ **Replies:** 0\ **Last updated:** [September 16, 2020, 9:17pm UTC](https://discuss.elastic.co/t/unexpected-reset-of-read-only-allow-delete/248885 "2020-09-16T21:17:55Z")
In some of my indices, I'm doing "index.blocks.read\_only\_allow\_delete": true by using the PUT /index/\_settings API call. But after around 10 seconds, the setting disappears and the index is writable again. I'm wondering… --- ## [ES 5.6 "name is already used for a field in other types"](https://discuss.elastic.co/t/es-5-6-name-is-already-used-for-a-field-in-other-types/248884)
**Author:** [@Chris\_Stone](https://discuss.elastic.co/u/Chris_Stone)\ **Replies:** 0\ **Last updated:** [September 16, 2020, 9:06pm UTC](https://discuss.elastic.co/t/es-5-6-name-is-already-used-for-a-field-in-other-types/248884 "2020-09-16T21:06:54Z")
Hi, I have one cluster still on 5.6 that has been seeing this error, I would like to resolve it before starting my upgrade to 6 and beyond: \[http\] is defined as an object in mapping \[cloud\_monitor\] but this name is alre… --- ## [What this error means: No implicit conversion to Float](https://discuss.elastic.co/t/what-this-error-means-no-implicit-conversion-to-float/248882)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 1\ **Last updated:** [September 16, 2020, 8:54pm UTC](https://discuss.elastic.co/t/what-this-error-means-no-implicit-conversion-to-float/248882 "2020-09-16T20:54:47Z")
I am trying to debug this error: Ruby exception occurred: no implicit conversion of Float into String But i don't know what exactly means, no information about de field or line. --- ## [How do I change winlogbeat's index name to anything other than winlogbeat?](https://discuss.elastic.co/t/how-do-i-change-winlogbeats-index-name-to-anything-other-than-winlogbeat/248878)
**Author:** [@Sylancer](https://discuss.elastic.co/u/Sylancer)\ **Replies:** 1\ **Last updated:** [September 16, 2020, 8:49pm UTC](https://discuss.elastic.co/t/how-do-i-change-winlogbeats-index-name-to-anything-other-than-winlogbeat/248878 "2020-09-16T20:49:45Z")
Hi, I can't seem to change the index pattern name for winlogbeat. This is what I'm trying to change: Here's my winlogbeat yml file ###################### Winlogbeat Configuration Example ######################## # T… --- ## [Not able to plot geo data on Kibana](https://discuss.elastic.co/t/not-able-to-plot-geo-data-on-kibana/248726)
**Author:** [@vpurushottam](https://discuss.elastic.co/u/vpurushottam)\ **Replies:** 3\ **Last updated:** [September 16, 2020, 6:41pm UTC](https://discuss.elastic.co/t/not-able-to-plot-geo-data-on-kibana/248726 "2020-09-16T18:41:34Z")
Hi Guys, So I have an issue with displaying the geolocation data on Kibana map visualization. Sorry if my description becomes too long but I will try to provide as much information as possible. Past: I am using logsta… --- ## [Tokenizing a Google Merchant Centre category field](https://discuss.elastic.co/t/tokenizing-a-google-merchant-centre-category-field/248844)
**Author:** [@Ryan\_Davey](https://discuss.elastic.co/u/Ryan_Davey)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 6:39pm UTC](https://discuss.elastic.co/t/tokenizing-a-google-merchant-centre-category-field/248844 "2020-09-16T18:39:24Z")
I'm a new Elastic Search user. I've been presented with a problem where I need to set up a tokenizer for a storefront category property that conforms to google merchant center category text strings For example: Appare… --- ## [How to get date time filter values in a markdown?](https://discuss.elastic.co/t/how-to-get-date-time-filter-values-in-a-markdown/247792)
**Author:** [@vinay26](https://discuss.elastic.co/u/vinay26)\ **Replies:** 5\ **Last updated:** [September 16, 2020, 6:34pm UTC](https://discuss.elastic.co/t/how-to-get-date-time-filter-values-in-a-markdown/247792 "2020-09-16T18:34:10Z")
I need to provide a hyperlink in kibana dashboard which navigates to an external site. At present, Created a TSVB and added a markdown to define the URL. Need to pass the selected date time range as query string to the… --- ## [How to turn a data node into a dedicated ML node?](https://discuss.elastic.co/t/how-to-turn-a-data-node-into-a-dedicated-ml-node/246340)
**Author:** [@Shubhangi](https://discuss.elastic.co/u/Shubhangi)\ **Replies:** 6\ **Last updated:** [September 16, 2020, 6:22pm UTC](https://discuss.elastic.co/t/how-to-turn-a-data-node-into-a-dedicated-ml-node/246340 "2020-09-16T18:22:46Z")
Hi, I've 8 data nodes right now in production. I want to test ML in production, how many dedicated nodes would ML require? Also, I won't be adding any new nodes, so, how can I make the existing data nodes, machine learn… --- ## [Debugging logstash indexing issue - trace output on index failure?](https://discuss.elastic.co/t/debugging-logstash-indexing-issue-trace-output-on-index-failure/248869)
**Author:** [@billkrauss3](https://discuss.elastic.co/u/billkrauss3)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 5:53pm UTC](https://discuss.elastic.co/t/debugging-logstash-indexing-issue-trace-output-on-index-failure/248869 "2020-09-16T17:53:20Z")
I'm using logstash to forward events in JSON format to Elasticsearch to enable adhoc log analysis. I need to identify and review the events/log messages that fail to be indexed. ("Could not index event to Elasticsearch",… --- ## [Filebeat Drop field doesnt work for json](https://discuss.elastic.co/t/filebeat-drop-field-doesnt-work-for-json/248432)
**Author:** [@niv](https://discuss.elastic.co/u/niv)\ **Replies:** 7\ **Last updated:** [September 16, 2020, 5:48pm UTC](https://discuss.elastic.co/t/filebeat-drop-field-doesnt-work-for-json/248432 "2020-09-16T17:48:49Z")
filebeat.inputs: - type: log enabled: true paths: - "\*.json" processors: - drop\_fields: fields: \["value"\] \`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\` That's my filebeat yml file. the drop fields d… --- ## [Creating Custom Log level with logstash like prints](https://discuss.elastic.co/t/creating-custom-log-level-with-logstash-like-prints/248870)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 0\ **Last updated:** [September 16, 2020, 5:32pm UTC](https://discuss.elastic.co/t/creating-custom-log-level-with-logstash-like-prints/248870 "2020-09-16T17:32:24Z")
Hi All I have created a custom plugin and in that plugin i have added lot of print/puts/milestone checks. Now when i run the pipeline i can see those prints in my command window. How can i customize my log level so th… --- ## [How to configure different indexes in logstash](https://discuss.elastic.co/t/how-to-configure-different-indexes-in-logstash/248752)
**Author:** [@pheathers](https://discuss.elastic.co/u/pheathers)\ **Replies:** 3\ **Last updated:** [September 16, 2020, 5:16pm UTC](https://discuss.elastic.co/t/how-to-configure-different-indexes-in-logstash/248752 "2020-09-16T17:16:59Z")
Hi, I'm trying to ingest multiple (two right now) different formatted logs via Filebeat into Logstash and have them sent to different indexes based on some criteria. The first thought was to use the source (path) to id… --- ## [Get Integer part of float number and round](https://discuss.elastic.co/t/get-integer-part-of-float-number-and-round/248245)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 9\ **Last updated:** [September 16, 2020, 4:51pm UTC](https://discuss.elastic.co/t/get-integer-part-of-float-number-and-round/248245 "2020-09-16T16:51:03Z")
Hello all, how can extract integer part of a float field with logstash "field\_fload" =\> 1.4573624 i want to get 1, only the integer part of the float number. And how can round up the float? "field\_fload" =\> 0.923454 … --- ## [Logstash Ruby Filter](https://discuss.elastic.co/t/logstash-ruby-filter/248863)
**Author:** [@Dede\_Pessu](https://discuss.elastic.co/u/Dede_Pessu)\ **Replies:** 0\ **Last updated:** [September 16, 2020, 4:50pm UTC](https://discuss.elastic.co/t/logstash-ruby-filter/248863 "2020-09-16T16:50:15Z")
I am trying to perform file operations through the ruby filter in logstash.. For example FileUtils.mv: to move a file FileUtils.chown: to change file ownership I am getting the following errors for trying to perform b… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1800) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1802)