# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1948 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1949 --- ## [Logstash Events Stats API](https://discuss.elastic.co/t/logstash-events-stats-api/239212)
**Author:** [@Rahul\_Kumar4](https://discuss.elastic.co/u/Rahul_Kumar4)\ **Replies:** 4\ **Last updated:** [July 7, 2020, 9:57am UTC](https://discuss.elastic.co/t/logstash-events-stats-api/239212 "2020-07-07T09:57:07Z")
What do the fields duration\_in\_millis and queue\_push\_duration\_in\_millis in Logstash's Events Stats API response in the link below mean? https://www.elastic.co/guide/en/logstash/current/node-stats-api.html#event-stats --- ## [How gracefully clear DLQ? Is it possible?](https://discuss.elastic.co/t/how-gracefully-clear-dlq-is-it-possible/240137)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 9:54am UTC](https://discuss.elastic.co/t/how-gracefully-clear-dlq-is-it-possible/240137 "2020-07-07T09:54:00Z")
I configured DLQ on my logstash, the problem is, DLQ is getting full very often. I know, there is issue about DLQ HERE . I can delete data from DLQ after it is processed, but then I have to restart logstash - pretty usel… --- ## [The difference between using script in pipeline and using normal script to update document](https://discuss.elastic.co/t/the-difference-between-using-script-in-pipeline-and-using-normal-script-to-update-document/239951)
**Author:** [@FFFro](https://discuss.elastic.co/u/FFFro)\ **Replies:** 2\ **Last updated:** [July 7, 2020, 9:30am UTC](https://discuss.elastic.co/t/the-difference-between-using-script-in-pipeline-and-using-normal-script-to-update-document/239951 "2020-07-07T09:30:46Z")
Now I'd like to update documents with parent-child relationships. When I use script to update, prompt me "field"\[\_ routing\] is a metadata field and cannot be added inside a document. Use the index API request parameters.… --- ## [Elasticsearch simple scripted similarity performance issues](https://discuss.elastic.co/t/elasticsearch-simple-scripted-similarity-performance-issues/240134)
**Author:** [@kamils468](https://discuss.elastic.co/u/kamils468)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 9:30am UTC](https://discuss.elastic.co/t/elasticsearch-simple-scripted-similarity-performance-issues/240134 "2020-07-07T09:30:39Z")
I have created simple similarity which all it does is returning doc.freq . { "similarity": { "custom\_similarity\_score": { "type": "scripted", "script": { "source": "return doc.freq;" } … --- ## [Huge delay in logs to ES from Kafka/Logstash](https://discuss.elastic.co/t/huge-delay-in-logs-to-es-from-kafka-logstash/239948)
**Author:** [@biswajit\_list](https://discuss.elastic.co/u/biswajit_list)\ **Replies:** 4\ **Last updated:** [July 7, 2020, 9:26am UTC](https://discuss.elastic.co/t/huge-delay-in-logs-to-es-from-kafka-logstash/239948 "2020-07-07T09:26:12Z")
New for ELK Have 2 Kafka , 2 Logstash , 3 master ES and 2 Data nodes my logstash config is input { kafka { bootstrap\_servers =\> "kafka01:9092, kafka02:9092" topics =\> \["filebeat"\] codec =\> json heartbeat\_interval… --- ## [Logstash, Could not index event to Elasticsearch](https://discuss.elastic.co/t/logstash-could-not-index-event-to-elasticsearch/240123)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 9:23am UTC](https://discuss.elastic.co/t/logstash-could-not-index-event-to-elasticsearch/240123 "2020-07-07T09:23:05Z")
Hi, I am trying to index some data with logstash. My config: input { redis{ host =\> "localhost" data\_type =\> "list" key =\> "timeset1" threads =\> 4 } } filter { date { match =\> \[ "timestamp" , "yyyy-MM-… --- ## [Cross field search with different analyzers](https://discuss.elastic.co/t/cross-field-search-with-different-analyzers/239765)
**Author:** [@rathcke](https://discuss.elastic.co/u/rathcke)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 9:04am UTC](https://discuss.elastic.co/t/cross-field-search-with-different-analyzers/239765 "2020-07-07T09:04:12Z")
I have the following (simplified) mapping: { "settings": { "index": { "number\_of\_shards": "2", "number\_of\_replicas": "1" }, "analysis": { "analyzer": { "rebuilt\_whitespace… --- ## [Nodes don't connect until keyboard interrupt is sent](https://discuss.elastic.co/t/nodes-dont-connect-until-keyboard-interrupt-is-sent/240125)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 9:02am UTC](https://discuss.elastic.co/t/nodes-dont-connect-until-keyboard-interrupt-is-sent/240125 "2020-07-07T09:02:21Z")
Hi, I have a cluster of 3 nodes. I had the problem that I turned off one node and when I turned in back on it didn't connect until I sent a keyboard interrupt (CTRL+C) in the terminal on a second node. After that they s… --- ## [Getting error when try to install kibana plugin](https://discuss.elastic.co/t/getting-error-when-try-to-install-kibana-plugin/240110)
**Author:** [@Mahathir\_Mohammad](https://discuss.elastic.co/u/Mahathir_Mohammad)\ **Replies:** 9\ **Last updated:** [July 7, 2020, 8:44am UTC](https://discuss.elastic.co/t/getting-error-when-try-to-install-kibana-plugin/240110 "2020-07-07T08:44:15Z")
I'm trying to install "opendistro\_security\_kibana\_plugin-1.8.0.0.zip" package for kibana. I tried to install with sudo : sudo bin/kibana-plugin install https://d3g5vo6xdbdb9a.cloudfront.net/downloads/kibana-plugins/ope… --- ## [How to return highlight as an html instead of string?](https://discuss.elastic.co/t/how-to-return-highlight-as-an-html-instead-of-string/239892)
**Author:** [@NikolaP93](https://discuss.elastic.co/u/NikolaP93)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 8:32am UTC](https://discuss.elastic.co/t/how-to-return-highlight-as-an-html-instead-of-string/239892 "2020-07-07T08:32:14Z")
So I have a problem , I created a custom highlight like so: customHighlight={() =\> ({ highlight: { pre\_tags: \['\'\], … --- ## [Custom kibana home](https://discuss.elastic.co/t/custom-kibana-home/238427)
**Author:** [@Shikhar\_Dixit](https://discuss.elastic.co/u/Shikhar_Dixit)\ **Replies:** 9\ **Last updated:** [July 7, 2020, 8:19am UTC](https://discuss.elastic.co/t/custom-kibana-home/238427 "2020-07-07T08:19:38Z")
Hi, can anyone help in the customization of the homepage of kibana ui I want to remove all the cards and add a pic in the background --- ## [Get saved object id through Search API of Kibana](https://discuss.elastic.co/t/get-saved-object-id-through-search-api-of-kibana/239424)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 8:17am UTC](https://discuss.elastic.co/t/get-saved-object-id-through-search-api-of-kibana/239424 "2020-07-07T08:17:44Z")
Hi! Is there any query I can make in console of Kibana that I can get the id of a specific Dashboard, visualization, index-pattern and search? For example with : GET .kibana/\_search { "\_source": \["dashboard.title"\], … --- ## [Elastic Node - Failed to execute watch](https://discuss.elastic.co/t/elastic-node-failed-to-execute-watch/239520)
**Author:** [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\ **Replies:** 4\ **Last updated:** [July 7, 2020, 7:58am UTC](https://discuss.elastic.co/t/elastic-node-failed-to-execute-watch/239520 "2020-07-07T07:58:16Z")
Hello, I am hoping that someone in the ElasticSearch Forum would kindly help me with an issue I am facing. I am seeing this in my elasticsearch log: Had a read through and doing some research, can't seem to get the r… --- ## [Snapshot failure missing file](https://discuss.elastic.co/t/snapshot-failure-missing-file/240097)
**Author:** [@michaelv](https://discuss.elastic.co/u/michaelv)\ **Replies:** 2\ **Last updated:** [July 7, 2020, 7:57am UTC](https://discuss.elastic.co/t/snapshot-failure-missing-file/240097 "2020-07-07T07:57:32Z")
Hi All, This is running ELK 7.7.8 on Ubuntu 18.04.4 LTS I had created a NFS mount on my 3 old node cluster and new 3 node cluster I did manage to make a snapshot from old and restore to new cluster. However, I decide… --- ## [Elasticsearch v2.2 Java version](https://discuss.elastic.co/t/elasticsearch-v2-2-java-version/239990)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 5\ **Last updated:** [July 7, 2020, 7:51am UTC](https://discuss.elastic.co/t/elasticsearch-v2-2-java-version/239990 "2020-07-07T07:51:22Z")
Hi everybody, I know that Elasticsearch v.2.2 is out of support, it is dead and so on but I was using for a small project. I have a plan to create it from scratch with a new version while for the moment I would like to … --- ## [Does elastic search allow aggregations within a document? Or is there another way to do same](https://discuss.elastic.co/t/does-elastic-search-allow-aggregations-within-a-document-or-is-there-another-way-to-do-same/239637)
**Author:** [@charvi23](https://discuss.elastic.co/u/charvi23)\ **Replies:** 6\ **Last updated:** [July 7, 2020, 7:46am UTC](https://discuss.elastic.co/t/does-elastic-search-allow-aggregations-within-a-document-or-is-there-another-way-to-do-same/239637 "2020-07-07T07:46:58Z")
I am new to elastic search, I have a elastic search index example as follows: Category is my index and insight is field having array of elements. "category": { "insight": { \[ { "topic":"xyz", "id":"10" } , { "… --- ## [How to migrate from multi node cluster to singe node cluster](https://discuss.elastic.co/t/how-to-migrate-from-multi-node-cluster-to-singe-node-cluster/240104)
**Author:** [@klokkie](https://discuss.elastic.co/u/klokkie)\ **Replies:** 4\ **Last updated:** [July 7, 2020, 7:43am UTC](https://discuss.elastic.co/t/how-to-migrate-from-multi-node-cluster-to-singe-node-cluster/240104 "2020-07-07T07:43:16Z")
Hi Is there some sort of work instruction how to migrate from a 5 node cluster (all data nodes) with 3 eligable masters to a single node cluster? Regards, Tim --- ## [I am curious when sending data from logstash to elasticsearch](https://discuss.elastic.co/t/i-am-curious-when-sending-data-from-logstash-to-elasticsearch/240073)
**Author:** [@111349](https://discuss.elastic.co/u/111349)\ **Replies:** 7\ **Last updated:** [July 7, 2020, 7:40am UTC](https://discuss.elastic.co/t/i-am-curious-when-sending-data-from-logstash-to-elasticsearch/240073 "2020-07-07T07:40:07Z")
I pass custom logs to elastocsearch using logstash For example, the string "A+B=AB" contains the field name in "fields1". If I search for "A+B=AB" literally, other fields containing A,B,AB are partially searched. This … --- ## [DHCP audit using ELK stack](https://discuss.elastic.co/t/dhcp-audit-using-elk-stack/239962)
**Author:** [@zkhanfur](https://discuss.elastic.co/u/zkhanfur)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 7:35am UTC](https://discuss.elastic.co/t/dhcp-audit-using-elk-stack/239962 "2020-07-07T07:35:37Z")
We were interested in monitoring DHCP leases in our environment using ELK stack. As we do currently not have Beats, we are forced to use Windows logs and either forward these or copy these. We found a very good blog desc… --- ## [Any ideas why the ILM policy with WARM phase is not working?](https://discuss.elastic.co/t/any-ideas-why-the-ilm-policy-with-warm-phase-is-not-working/240107)
**Author:** [@Viktor\_Markvardt](https://discuss.elastic.co/u/Viktor_Markvardt)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 7:32am UTC](https://discuss.elastic.co/t/any-ideas-why-the-ilm-policy-with-warm-phase-is-not-working/240107 "2020-07-07T07:32:18Z")
Hi guys, My goal is: move old documents to read-only indexes. Please see details below via the link: --- ## [Searching on " for inches](https://discuss.elastic.co/t/searching-on-for-inches/240100)
**Author:** [@DaveG](https://discuss.elastic.co/u/DaveG)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 6:49am UTC](https://discuss.elastic.co/t/searching-on-for-inches/240100 "2020-07-07T06:49:24Z")
Hi All, I wish to be able to search on: 10 " 10 inches etc where " is a synonym for inches. I saw post : Synonym analyzer issue in elastic search but no reply. I do not know what a good strategy for this is given … --- ## [TVSB visualization filter parameter does not take effect](https://discuss.elastic.co/t/tvsb-visualization-filter-parameter-does-not-take-effect/240101)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 6:59am UTC](https://discuss.elastic.co/t/tvsb-visualization-filter-parameter-does-not-take-effect/240101 "2020-07-07T06:59:10Z")
Condition k8s\_container\_name: osc-ali-prd filters out all information, leaving only the information containing osc.xxxx.cn is correct, but the filter is not successful. --- ## [Searching text with reserved characters with fuzzy](https://discuss.elastic.co/t/searching-text-with-reserved-characters-with-fuzzy/240099)
**Author:** [@DaveG](https://discuss.elastic.co/u/DaveG)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 6:39am UTC](https://discuss.elastic.co/t/searching-text-with-reserved-characters-with-fuzzy/240099 "2020-07-07T06:39:34Z")
Hi All, I have queries where I want to allow searching on part numbers/help ticket numbers and the like with reserved characters in them. For example: SR-1234 SR/1234 The fields are analyzed with the standard analyz… --- ## [Ilm-history system index does not start with a dot](https://discuss.elastic.co/t/ilm-history-system-index-does-not-start-with-a-dot/239335)
**Author:** [@ypid-geberit](https://discuss.elastic.co/u/ypid-geberit)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 6:30am UTC](https://discuss.elastic.co/t/ilm-history-system-index-does-not-start-with-a-dot/239335 "2020-07-07T06:30:16Z")
Hi Here are the typical system indices found when using the Elastic Stack 7.6 (ES and Kibana are relevant here): GET \_cat/indices?h=i&s=i .apm-agent-configuration .kibana\_1 .kibana\_task\_manager\_1 .monitoring-alerts-7 .… --- ## [Node failed to join](https://discuss.elastic.co/t/node-failed-to-join/239515)
**Author:** [@aakashR](https://discuss.elastic.co/u/aakashR)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 5:59am UTC](https://discuss.elastic.co/t/node-failed-to-join/239515 "2020-07-07T05:59:26Z")
Hi I am relatively new to elasticsearch. I installed elasticsearch oss 7.7.0 a couple of days ago on two Ubuntu 18.04.3. I want to form a test cluster with 2 nodes - one master and ingest and the other only data. I conf… --- ## [\[indices:data/write/bulk\[s\]\] is unauthorized for user \[loader-user\]"})](https://discuss.elastic.co/t/indices-data-write-bulk-s-is-unauthorized-for-user-loader-user/239169)
**Author:** [@eemtzc](https://discuss.elastic.co/u/eemtzc)\ **Replies:** 2\ **Last updated:** [July 7, 2020, 5:55am UTC](https://discuss.elastic.co/t/indices-data-write-bulk-s-is-unauthorized-for-user-loader-user/239169 "2020-07-07T05:55:46Z")
Hello, I am starting a new pipeline on one of my logstash servers, but when I start the service I get this error. Jun 29 10:50:00 mryt2ls02 logstash: \[2020-06-29T10:50:00,449\]\[INFO \]\[logstash.outputs.elasticsearch\]\[Tre… --- ## [Unable to install Elastic Search on Windows](https://discuss.elastic.co/t/unable-to-install-elastic-search-on-windows/240091)
**Author:** [@Ram\_Vashista](https://discuss.elastic.co/u/Ram_Vashista)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 5:42am UTC](https://discuss.elastic.co/t/unable-to-install-elastic-search-on-windows/240091 "2020-07-07T05:42:05Z")
Hi there, I am in the need to create elastic search server to save my UiPath robots logs. I followed below installation guide from UiPath https://docs.uipath.com/orchestrator/v2018.2/docs/prerequisites-for-installation#… --- ## [It's not working in "mark / force / links"](https://discuss.elastic.co/t/its-not-working-in-mark-force-links/236957)
**Author:** [@thegyoo](https://discuss.elastic.co/u/thegyoo)\ **Replies:** 2\ **Last updated:** [July 7, 2020, 4:03am UTC](https://discuss.elastic.co/t/its-not-working-in-mark-force-links/236957 "2020-07-07T04:03:24Z")
i try the above example in kibana with 2 indices.(node index, link index) but it's not working in "mark / force / links". i found the case in google, "https://github.com/vega/vega-force/issues/2". the update.json… --- ## [Error: Port 5601 is already in use. Another instance of Kibana may be running!](https://discuss.elastic.co/t/error-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running/240070)
**Author:** [@Splunk](https://discuss.elastic.co/u/Splunk)\ **Replies:** 5\ **Last updated:** [July 7, 2020, 1:44am UTC](https://discuss.elastic.co/t/error-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running/240070 "2020-07-07T01:44:06Z")
bin kibana log \[22:25:12.491\] \[warning\]\[plugins-discovery\] Expect plugin "id" in camelCase, but found: apm\_oss log \[22:25:12.504\] \[warning\]\[plugins-discovery\] Expect plugin "id" in camelCase, but found: triggers\_a… --- ## [Network traffic between Elastic Cloud and my infrastructure](https://discuss.elastic.co/t/network-traffic-between-elastic-cloud-and-my-infrastructure/236319)
**Author:** [@bg\_aad](https://discuss.elastic.co/u/bg_aad)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 1:30am UTC](https://discuss.elastic.co/t/network-traffic-between-elastic-cloud-and-my-infrastructure/236319 "2020-07-07T01:30:32Z")
Good morning, I would like to know if the network traffic generate sending logs between my infrastructure in GCP and Elastic Cloud it will be internal (VPC Peering) or external (Internet). In my case, this will mean a… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1947) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1949)