# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1918 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1919 --- ## [How to search in full folder path?](https://discuss.elastic.co/t/how-to-search-in-full-folder-path/241811)
**Author:** [@jimw](https://discuss.elastic.co/u/jimw)\ **Replies:** 8\ **Last updated:** [July 20, 2020, 10:10am UTC](https://discuss.elastic.co/t/how-to-search-in-full-folder-path/241811 "2020-07-20T10:10:01Z")
I used ElasticSeaarch index filename with full path. for example, c:\\dir11\\dir12\\dir13\\dir14\\fn11.txt c:\\dir21\\dir22\\dir23\\dir24\\fn21.pdf c:\\dir31\\dir32\\dir33\\dir34\\fn31.doc c:\\dir41\\dir42\\dir43\\dir44\\fn41.ppt What … --- ## [Unable to access elastic search over network](https://discuss.elastic.co/t/unable-to-access-elastic-search-over-network/241265)
**Author:** [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\ **Replies:** 10\ **Last updated:** [July 20, 2020, 9:57am UTC](https://discuss.elastic.co/t/unable-to-access-elastic-search-over-network/241265 "2020-07-20T09:57:41Z")
Hi, I am trying to update elasticsearch.yml file to access elasticsearch over network. but when ever i can configurations and restart services it gives an error. Here are my configuration in YML file network.host = lo… --- ## [Getting a value in each document based on other fields calculation](https://discuss.elastic.co/t/getting-a-value-in-each-document-based-on-other-fields-calculation/241799)
**Author:** [@igorid70](https://discuss.elastic.co/u/igorid70)\ **Replies:** 1\ **Last updated:** [July 20, 2020, 9:31am UTC](https://discuss.elastic.co/t/getting-a-value-in-each-document-based-on-other-fields-calculation/241799 "2020-07-20T09:31:29Z")
Hi I need to get a value in each document which is a calculation based on some other metricbeat feilds. The problem is that I can't use scripted fields because I don't need it for visualization/Kibana but accessing thos… --- ## [Custom Metricbeat metricsets](https://discuss.elastic.co/t/custom-metricbeat-metricsets/241822)
**Author:** [@chathsuom](https://discuss.elastic.co/u/chathsuom)\ **Replies:** 1\ **Last updated:** [July 20, 2020, 9:30am UTC](https://discuss.elastic.co/t/custom-metricbeat-metricsets/241822 "2020-07-20T09:30:04Z")
Creating a custom metricset according to the document is not working in 7.8. It looks either documentation needs an update or something wrong with the Makefile https://www.elastic.co/guide/en/beats/devguide/7.8/creating… --- ## [Slow custom plugin](https://discuss.elastic.co/t/slow-custom-plugin/236481)
**Author:** [@p4paul](https://discuss.elastic.co/u/p4paul)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 10:05am UTC](https://discuss.elastic.co/t/slow-custom-plugin/236481 "2020-06-10T10:05:23Z")
I have written a custom plugin implementing FilterScript and noticed on large data sets it is quite slow; so I changed the execute method to simply return 'true' and removed all other computation. Then removed and reinst… --- ## [Split array with key+value fields to key: value - Follow up](https://discuss.elastic.co/t/split-array-with-key-value-fields-to-key-value-follow-up/240469)
**Author:** [@Rudolf\_Reddy\_Macejka](https://discuss.elastic.co/u/Rudolf_Reddy_Macejka)\ **Replies:** 2\ **Last updated:** [July 20, 2020, 9:28am UTC](https://discuss.elastic.co/t/split-array-with-key-value-fields-to-key-value-follow-up/240469 "2020-07-20T09:28:47Z")
Hello, I am trying to convert this input { "request": { "time": "2020-04-30T07:32:13.997Z", "size": "0", "headers": \[ { "key": "Correlation-Id", "value": "124f4cdf-… --- ## [How does dataset density affect retrieval? Master thesis project](https://discuss.elastic.co/t/how-does-dataset-density-affect-retrieval-master-thesis-project/241856)
**Author:** [@DonIgnacio](https://discuss.elastic.co/u/DonIgnacio)\ **Replies:** 0\ **Last updated:** [July 20, 2020, 8:31am UTC](https://discuss.elastic.co/t/how-does-dataset-density-affect-retrieval-master-thesis-project/241856 "2020-07-20T08:31:53Z")
Hi, I am implementing a search engine using ES for my master thesis. The dataset contains email documents, with metadata or features about the email conversations but also the body of the email conversations as parent-… --- ## [HTTP error 403 in pod - Metricbeat in Openshift](https://discuss.elastic.co/t/http-error-403-in-pod-metricbeat-in-openshift/241631)
**Author:** [@alexloz93](https://discuss.elastic.co/u/alexloz93)\ **Replies:** 2\ **Last updated:** [July 20, 2020, 8:09am UTC](https://discuss.elastic.co/t/http-error-403-in-pod-metricbeat-in-openshift/241631 "2020-07-20T08:09:25Z")
Hi. I'm trying to run the Kubernetes module in the Openshift metricbeat configuration. When I consult in kibana, it shows me the following error: "key": "HTTP error 403 in volume: 403 Forbidden", "doc\_count… --- ## [Stack Monitoring Not Stable](https://discuss.elastic.co/t/stack-monitoring-not-stable/236145)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 3\ **Last updated:** [July 20, 2020, 8:08am UTC](https://discuss.elastic.co/t/stack-monitoring-not-stable/236145 "2020-07-20T08:08:38Z")
I've just upgraded our cluster from 7.6.2 to 7.7.1. I've a 10 Node cluster, self monitored with metricbeat + logstash and kibana monitoring using "Stack Monitoring" feature. It worked quite well with 7.6.2 but with 7.7.1… --- ## [Only a fraction of the data get indexed when executing logstash via service](https://discuss.elastic.co/t/only-a-fraction-of-the-data-get-indexed-when-executing-logstash-via-service/241853)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [July 20, 2020, 8:03am UTC](https://discuss.elastic.co/t/only-a-fraction-of-the-data-get-indexed-when-executing-logstash-via-service/241853 "2020-07-20T08:03:13Z")
Im consuming data from a DB, When I run the pipelines separately they get all the data, but when I run them via logstash service or with the command /usr/share/logstash/bin/logstash --path.settings /etc/logstash to execu… --- ## [Can Metricbeat collect elasticsearch shard size?](https://discuss.elastic.co/t/can-metricbeat-collect-elasticsearch-shard-size/241579)
**Author:** [@CHU\_XU](https://discuss.elastic.co/u/CHU_XU)\ **Replies:** 5\ **Last updated:** [July 20, 2020, 7:55am UTC](https://discuss.elastic.co/t/can-metricbeat-collect-elasticsearch-shard-size/241579 "2020-07-20T07:55:49Z")
Hi experts, I'm considering use metricbeat to monitor my es cluster and for some reason I care about the shard size of our indices. Seems that Elasticsearch module of metricbeat does not collect such info. Any idea how … --- ## [Can I pass application logs to filebeat?](https://discuss.elastic.co/t/can-i-pass-application-logs-to-filebeat/241574)
**Author:** [@Bhavin\_Varsur](https://discuss.elastic.co/u/Bhavin_Varsur)\ **Replies:** 7\ **Last updated:** [July 20, 2020, 7:27am UTC](https://discuss.elastic.co/t/can-i-pass-application-logs-to-filebeat/241574 "2020-07-20T07:27:04Z")
I want to pass application logs to filebeat . Can I pass ? if yes then how should I pass? --- ## [Api call to calculate uptime in percentage over specific time](https://discuss.elastic.co/t/api-call-to-calculate-uptime-in-percentage-over-specific-time/241026)
**Author:** [@Sagar\_Dalvi](https://discuss.elastic.co/u/Sagar_Dalvi)\ **Replies:** 1\ **Last updated:** [July 20, 2020, 7:17am UTC](https://discuss.elastic.co/t/api-call-to-calculate-uptime-in-percentage-over-specific-time/241026 "2020-07-20T07:17:40Z")
Hi All, I want to calculate Uptime in percentage over specific time. I am using Heartbeat and able to create below data table visualisation: But this percentage column is not showing in csv report nor in query when … --- ## [Index balance in the cluster](https://discuss.elastic.co/t/index-balance-in-the-cluster/241371)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 12\ **Last updated:** [July 20, 2020, 7:04am UTC](https://discuss.elastic.co/t/index-balance-in-the-cluster/241371 "2020-07-20T07:04:27Z")
Hello All, I have noticed that I have 1 server out of 5 in the cluster, that stores the majority of the data/indices. Also, one of the nodes holds a lower number of shards. How can I balance the indices across the nod… --- ## [Value is not determining](https://discuss.elastic.co/t/value-is-not-determining/241838)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [July 20, 2020, 7:00am UTC](https://discuss.elastic.co/t/value-is-not-determining/241838 "2020-07-20T07:00:34Z")
i have a field and its type is ip but the problem is that i want to specify its type keyword and ip --- ## [About Bootstrap](https://discuss.elastic.co/t/about-bootstrap/240454)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 5\ **Last updated:** [July 20, 2020, 6:53am UTC](https://discuss.elastic.co/t/about-bootstrap/240454 "2020-07-20T06:53:52Z")
What is Bootstrap in elasticsearch and what it really does ? --- ## [One pipeline fail restarts Logstash, disrupting all other pipelines defined in pipelines.yml](https://discuss.elastic.co/t/one-pipeline-fail-restarts-logstash-disrupting-all-other-pipelines-defined-in-pipelines-yml/241845)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 0\ **Last updated:** [July 20, 2020, 6:46am UTC](https://discuss.elastic.co/t/one-pipeline-fail-restarts-logstash-disrupting-all-other-pipelines-defined-in-pipelines-yml/241845 "2020-07-20T06:46:50Z")
Hello, We have around 20 different pipelines defined in our pipelines.yml. One of them is outputing elastic query result to a file in a dedicated folder. Last weekend the owner of this folder changed to root, making Log… --- ## [Hide unused fields in Kibana Discover](https://discuss.elastic.co/t/hide-unused-fields-in-kibana-discover/239058)
**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\ **Replies:** 3\ **Last updated:** [July 20, 2020, 5:45am UTC](https://discuss.elastic.co/t/hide-unused-fields-in-kibana-discover/239058 "2020-07-20T05:45:32Z")
Hi, not sure if this is Kibana or something else, but when displaying the Filebeat index using Kibana Discover, all fields are shown, even empty fields with no value. It usually, only shows fields that have data. How d… --- ## [Regarding fo Elasticsearch 6](https://discuss.elastic.co/t/regarding-fo-elasticsearch-6/240274)
**Author:** [@Aarti\_Yadav](https://discuss.elastic.co/u/Aarti_Yadav)\ **Replies:** 4\ **Last updated:** [July 20, 2020, 5:38am UTC](https://discuss.elastic.co/t/regarding-fo-elasticsearch-6/240274 "2020-07-20T05:38:58Z")
Hello All, I am new in this community and I am looking to an online tutorial where I can learn this technology which is based on search and analytics engine and I want to use them in the application search point of view.… --- ## [Clustering of Kibana on Different Hosts](https://discuss.elastic.co/t/clustering-of-kibana-on-different-hosts/241611)
**Author:** [@ShashikanthKomandoor](https://discuss.elastic.co/u/ShashikanthKomandoor)\ **Replies:** 3\ **Last updated:** [July 20, 2020, 5:05am UTC](https://discuss.elastic.co/t/clustering-of-kibana-on-different-hosts/241611 "2020-07-20T05:05:53Z")
Hi Team, I have setup Elasticsearch with 7.8 version on 8 nodes with 3 master nodes and 5 data nodes and found that Elasticsearch is working if one Elasticsearch went down. Also, I am using Logstash as my log processor… --- ## [Really slow speed search ES 7.8](https://discuss.elastic.co/t/really-slow-speed-search-es-7-8/241191)
**Author:** [@Shryx\_Cetus](https://discuss.elastic.co/u/Shryx_Cetus)\ **Replies:** 9\ **Last updated:** [July 20, 2020, 2:22am UTC](https://discuss.elastic.co/t/really-slow-speed-search-es-7-8/241191 "2020-07-20T02:22:29Z")
hi guys, i just starting with ES 7.8 and i'm getting really slow search perfoming, i'm loading data from mysql to ES with this structure: https://paste.ofcode.org/pmYEUVmWGKGvwxr2FEJZvz and i'm trying to read it from p… --- ## [Query result brings expected data but I get the error "Cannot read property '...' of undefined"](https://discuss.elastic.co/t/query-result-brings-expected-data-but-i-get-the-error-cannot-read-property-of-undefined/241027)
**Author:** [@SClovesgtx](https://discuss.elastic.co/u/SClovesgtx)\ **Replies:** 1\ **Last updated:** [July 20, 2020, 12:38am UTC](https://discuss.elastic.co/t/query-result-brings-expected-data-but-i-get-the-error-cannot-read-property-of-undefined/241027 "2020-07-20T00:38:47Z")
I started to encounter the "Cannot read property '...' of undefined" error for the following document fields: operators: is an array of objects and I expected to access this value when applying the transformation usin… --- ## [Error connecting to Kibana: fail to get the Kibana version](https://discuss.elastic.co/t/error-connecting-to-kibana-fail-to-get-the-kibana-version/241775)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 1\ **Last updated:** [July 19, 2020, 11:38pm UTC](https://discuss.elastic.co/t/error-connecting-to-kibana-fail-to-get-the-kibana-version/241775 "2020-07-19T23:38:27Z")
I have elasticsearch and kibana setup in my kubernetes cluster using ECK. I'm also trying to get filebeat setup. Im having trouble with getting filebeat to connect to kibana. in the filebeat logs i can see the following … --- ## [Concatenate two fields](https://discuss.elastic.co/t/concatenate-two-fields/241817)
**Author:** [@Jasmin](https://discuss.elastic.co/u/Jasmin)\ **Replies:** 1\ **Last updated:** [July 19, 2020, 10:39pm UTC](https://discuss.elastic.co/t/concatenate-two-fields/241817 "2020-07-19T22:39:00Z")
hi , i am using mutate add\_field to concatenate two fileds to make them a unique id , but ouptut give me this : { "\_index" : "sql", "\_type" : "\_doc", "\_id" : " %{GL\_ETABLISSEMENT} %{GL\_NUMERO} ", "\_score" : 1.0, … --- ## [High load of cpu when highlight](https://discuss.elastic.co/t/high-load-of-cpu-when-highlight/241818)
**Author:** [@pilo](https://discuss.elastic.co/u/pilo)\ **Replies:** 0\ **Last updated:** [July 19, 2020, 10:06pm UTC](https://discuss.elastic.co/t/high-load-of-cpu-when-highlight/241818 "2020-07-19T22:06:32Z")
Hello everyone, I'm having an issue when i use highlight in query. Currently, we are using elasticsearch for full text search on 1 index, around 10gb of documents. This index is running on a single node. Its technical … --- ## [Logstash and elasticsearch mismatch](https://discuss.elastic.co/t/logstash-and-elasticsearch-mismatch/241758)
**Author:** [@elk6](https://discuss.elastic.co/u/elk6)\ **Replies:** 5\ **Last updated:** [July 19, 2020, 6:17pm UTC](https://discuss.elastic.co/t/logstash-and-elasticsearch-mismatch/241758 "2020-07-19T18:17:50Z")
I'm trying to ship logs from a server with filebeat to another server that hosts logstash and elasticsearch. Everything is latest and greatest (7.8.0). Problem is, I'm getting an error from logstash. This is the error I… --- ## [Error in system log filter](https://discuss.elastic.co/t/error-in-system-log-filter/241788)
**Author:** [@MikyTVA](https://discuss.elastic.co/u/MikyTVA)\ **Replies:** 1\ **Last updated:** [July 19, 2020, 6:09pm UTC](https://discuss.elastic.co/t/error-in-system-log-filter/241788 "2020-07-19T18:09:47Z")
I'm creating the ELK stack and I'm new to ELK stack. I'm using Logstash 6.8.10 on CentOS 7. I want process system logs and I'm realized that it doesn't work. Seeing the log I found that error \[ERROR\]\[logstash.agent … --- ## [Getiing this error 403 forbidden erro in "logstash-plain.log](https://discuss.elastic.co/t/getiing-this-error-403-forbidden-erro-in-logstash-plain-log/241796)
**Author:** [@rama543](https://discuss.elastic.co/u/rama543)\ **Replies:** 1\ **Last updated:** [July 19, 2020, 6:04pm UTC](https://discuss.elastic.co/t/getiing-this-error-403-forbidden-erro-in-logstash-plain-log/241796 "2020-07-19T18:04:09Z")
Getting below Error message in logstash-plain. log I am using AWS managed ElasticSearch ,Kibana . Logstash i have installed in amazon ec2 instance . Please help to get resolve the issue Attempted to resurrect connect… --- ## ["\_msearch" still does not accept same parameters supported by "\_search"](https://discuss.elastic.co/t/msearch-still-does-not-accept-same-parameters-supported-by-search/241803)
**Author:** [@SoroushTaheri](https://discuss.elastic.co/u/SoroushTaheri)\ **Replies:** 0\ **Last updated:** [July 19, 2020, 3:14pm UTC](https://discuss.elastic.co/t/msearch-still-does-not-accept-same-parameters-supported-by-search/241803 "2020-07-19T15:14:13Z")
As many of you may know, the fact that "\_msearch" does not support the same headers as "\_search" command has been a thing for a long time and I personally have wanted this issue to be fixed asap. Today I read a couple o… --- ## [Issue with multi range queries in elastic search](https://discuss.elastic.co/t/issue-with-multi-range-queries-in-elastic-search/241581)
**Author:** [@CDu2020](https://discuss.elastic.co/u/CDu2020)\ **Replies:** 1\ **Last updated:** [July 19, 2020, 2:21pm UTC](https://discuss.elastic.co/t/issue-with-multi-range-queries-in-elastic-search/241581 "2020-07-19T14:21:40Z")
I am trying to boost query for the most recent posts on my classified website. When I add this code there were no results, I am not sure why. //boost recent posts $date0 = new \\DateTime("NOW"); $date1 = new \\DateTime("… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1917) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1919)