# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1976 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1977 --- ## [Clustering two nodes with different data](https://discuss.elastic.co/t/clustering-two-nodes-with-different-data/238474)
**Author:** [@Alvaro\_Sanz](https://discuss.elastic.co/u/Alvaro_Sanz)\ **Replies:** 2\ **Last updated:** [June 24, 2020, 1:56pm UTC](https://discuss.elastic.co/t/clustering-two-nodes-with-different-data/238474 "2020-06-24T13:56:00Z")
Hello, I am trying to form a cluster of two elasticsearch nodes. The both nodes have been in production environment for a while, and they both have different data. Is it possible to make a cluster of both nodes? In case… --- ## [Unassigned replica shards with reason as INDEX\_CREATED](https://discuss.elastic.co/t/unassigned-replica-shards-with-reason-as-index-created/237845)
**Author:** [@Aliasgar\_Choolawala](https://discuss.elastic.co/u/Aliasgar_Choolawala)\ **Replies:** 4\ **Last updated:** [June 24, 2020, 1:48pm UTC](https://discuss.elastic.co/t/unassigned-replica-shards-with-reason-as-index-created/237845 "2020-06-24T13:48:28Z")
can anyone please help me ? i have a 7 data node elasticsearch cluster(5 master nodes) for an index, i have the following settings for routing: "routing" : { "allocation" : { "require" : { … --- ## [Is it possible to create alarts in kibana 7.6.1 (ELK 7.6.1)](https://discuss.elastic.co/t/is-it-possible-to-create-alarts-in-kibana-7-6-1-elk-7-6-1/238444)
**Author:** [@Nitin\_Khatri](https://discuss.elastic.co/u/Nitin_Khatri)\ **Replies:** 2\ **Last updated:** [June 24, 2020, 1:46pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-alarts-in-kibana-7-6-1-elk-7-6-1/238444 "2020-06-24T13:46:59Z")
I am looking for a way to create alerts whenever a condition is met in kibana, I am using Basic License. Thanks in advance --- ## [How can we make field optional in elasticsearch?](https://discuss.elastic.co/t/how-can-we-make-field-optional-in-elasticsearch/238419)
**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\ **Replies:** 3\ **Last updated:** [June 24, 2020, 1:41pm UTC](https://discuss.elastic.co/t/how-can-we-make-field-optional-in-elasticsearch/238419 "2020-06-24T13:41:16Z")
i am trying to ingested csv file into elasticsearch via logstash and i have a dedicated schema for it. my data gets ingested for date fields where format is not specified and with format specified , it throws that into … --- ## [Freezed indices don't load](https://discuss.elastic.co/t/freezed-indices-dont-load/236353)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 6\ **Last updated:** [June 24, 2020, 1:40pm UTC](https://discuss.elastic.co/t/freezed-indices-dont-load/236353 "2020-06-24T13:40:23Z")
Hi, I started freezing older daily indices that are used less frequently, but now those aren't loading at all. Shouldn't those be available for reading (e.g., Kibana)? Thanks! --- ## [NoClassDefFoundError: org/elasticsearch/cluster/metadata/MetaData$Custom](https://discuss.elastic.co/t/noclassdeffounderror-org-elasticsearch-cluster-metadata-metadata-custom/238490)
**Author:** [@dinit](https://discuss.elastic.co/u/dinit)\ **Replies:** 0\ **Last updated:** [June 24, 2020, 1:39pm UTC](https://discuss.elastic.co/t/noclassdeffounderror-org-elasticsearch-cluster-metadata-metadata-custom/238490 "2020-06-24T13:39:02Z")
Hey, I was updating my ElasticSearch from 7.6.1 to 7.8 and now my elastic process isn't startig any more. The Stacktrace is: \[2020-06-24T15:31:01,925\]\[INFO \]\[o.e.n.Node \] \[ALL\] JVM arguments \[-Xms6g,… --- ## [Logstash 7.8.0 keystore via symlink not work](https://discuss.elastic.co/t/logstash-7-8-0-keystore-via-symlink-not-work/238485)
**Author:** [@zeleznypa](https://discuss.elastic.co/u/zeleznypa)\ **Replies:** 0\ **Last updated:** [June 24, 2020, 1:30pm UTC](https://discuss.elastic.co/t/logstash-7-8-0-keystore-via-symlink-not-work/238485 "2020-06-24T13:30:27Z")
We have configured a shared folder between servers, that contain common configuration files for all of our logstash servers. This folder contains also the logstash.keystore file. When I copy the file logstash.keystore t… --- ## [Leader\_check - time out?](https://discuss.elastic.co/t/leader-check-time-out/238459)
**Author:** [@PeterG](https://discuss.elastic.co/u/PeterG)\ **Replies:** 0\ **Last updated:** [June 24, 2020, 12:32pm UTC](https://discuss.elastic.co/t/leader-check-time-out/238459 "2020-06-24T12:32:12Z")
Hi, We have a 3 node search cluster running on 3 vms. We run version 7.4.2 We run all the 3 nodes with the same config: discovery.seed\_hosts: \["grtzpse1-7.bla", "grtzpse2-7.bla", "grtzpse3-7.bla"\] cluster.initial\_mas… --- ## [Json parse error, original data now in message field ParserError: Unexpected end of input within/between array entries](https://discuss.elastic.co/t/json-parse-error-original-data-now-in-message-field-parsererror-unexpected-end-of-input-within-between-array-entries/238471)
**Author:** [@mbilal](https://discuss.elastic.co/u/mbilal)\ **Replies:** 0\ **Last updated:** [June 24, 2020, 1:03pm UTC](https://discuss.elastic.co/t/json-parse-error-original-data-now-in-message-field-parsererror-unexpected-end-of-input-within-between-array-entries/238471 "2020-06-24T13:03:22Z")
JSOn data: { "EventID":1, "MachineName":''ABC', EntryType" :"Error", "Message" : "Stopped", "Source":"ABC", "TimeGenerated":"06/23/2020 06:50:40", "TimeWritten":"06/23/2020 06:50:40", "UserName": "", "Site": "" … --- ## [Search in Canvas pages](https://discuss.elastic.co/t/search-in-canvas-pages/238467)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 1\ **Last updated:** [June 24, 2020, 12:50pm UTC](https://discuss.elastic.co/t/search-in-canvas-pages/238467 "2020-06-24T12:50:00Z")
Hello, Created a nice presentation in Canvas over the last days in Kibana 7.7.1. One feature I missed in Canvas is a searchbox. As I have 75+ pages in my workpad, I sometimes need to go back to a specific page, containg… --- ## [Search data in kibana using a html search bar](https://discuss.elastic.co/t/search-data-in-kibana-using-a-html-search-bar/238275)
**Author:** [@suibgui](https://discuss.elastic.co/u/suibgui)\ **Replies:** 1\ **Last updated:** [June 24, 2020, 12:47pm UTC](https://discuss.elastic.co/t/search-data-in-kibana-using-a-html-search-bar/238275 "2020-06-24T12:47:41Z")
hi team, i want to search data in kibana using a HTML search bar . thanks --- ## [Elastic joda to java time update - Illegal pattern component: uuuu](https://discuss.elastic.co/t/elastic-joda-to-java-time-update-illegal-pattern-component-uuuu/237830)
**Author:** [@krrz](https://discuss.elastic.co/u/krrz)\ **Replies:** 5\ **Last updated:** [June 24, 2020, 12:36pm UTC](https://discuss.elastic.co/t/elastic-joda-to-java-time-update-illegal-pattern-component-uuuu/237830 "2020-06-24T12:36:02Z")
I'm trying update joda time to java time in pipeline. And after copy sample from java-time-migration-update-ingest-pipelines I get "Illegal pattern component: uuuu" error. Some examples working, but changed index\_na… --- ## [Logstash pipeline fails to start when log sending app is online](https://discuss.elastic.co/t/logstash-pipeline-fails-to-start-when-log-sending-app-is-online/238075)
**Author:** [@FanteG](https://discuss.elastic.co/u/FanteG)\ **Replies:** 1\ **Last updated:** [June 24, 2020, 12:25pm UTC](https://discuss.elastic.co/t/logstash-pipeline-fails-to-start-when-log-sending-app-is-online/238075 "2020-06-24T12:25:18Z")
Hello everyone. Recently I've stuck upon following issue - logstash cant start pipeline with following error Summary\[ERROR\]\[logstash.javapipeline \]\[strat\] Pipeline aborted due to error {:pipeline\_id=\>"strat&… --- ## [Discrepancy between source and destination host reported packet count in packetbeat](https://discuss.elastic.co/t/discrepancy-between-source-and-destination-host-reported-packet-count-in-packetbeat/238454)
**Author:** [@mdyson](https://discuss.elastic.co/u/mdyson)\ **Replies:** 0\ **Last updated:** [June 24, 2020, 12:07pm UTC](https://discuss.elastic.co/t/discrepancy-between-source-and-destination-host-reported-packet-count-in-packetbeat/238454 "2020-06-24T12:07:23Z")
Created a Kibana visualization counting the sum of packets from a source.ip to a destination.ip over time. There are documents from each host.hostname (source and destination) in the data set. When analyzing the counts i… --- ## [Elasticsearch 7.8.0 Metricbeat index conflict](https://discuss.elastic.co/t/elasticsearch-7-8-0-metricbeat-index-conflict/237749)
**Author:** [@fadjar340](https://discuss.elastic.co/u/fadjar340)\ **Replies:** 2\ **Last updated:** [June 24, 2020, 12:02pm UTC](https://discuss.elastic.co/t/elasticsearch-7-8-0-metricbeat-index-conflict/237749 "2020-06-24T12:02:39Z")
Hi.. Since the 7.8.0 released, I just tried it and suddenly the metricbeat index have a conflict field. The field that have conflict is kubernetes.service.ingress\_hostname Any workaround to solve this? Regards, F… --- ## [How can I write multiple search with grater that less than query?](https://discuss.elastic.co/t/how-can-i-write-multiple-search-with-grater-that-less-than-query/238429)
**Author:** [@Yusuf\_Karatoprak](https://discuss.elastic.co/u/Yusuf_Karatoprak)\ **Replies:** 1\ **Last updated:** [June 24, 2020, 12:01pm UTC](https://discuss.elastic.co/t/how-can-i-write-multiple-search-with-grater-that-less-than-query/238429 "2020-06-24T12:01:05Z")
How can I use grater than and less than with should match query in elasticsearch ? { "query": { "range" : { "rate" : { "gte" : 0.6, "lte" : 1, … --- ## [ElasticSearch ODBC Driver support for CRUD](https://discuss.elastic.co/t/elasticsearch-odbc-driver-support-for-crud/236398)
**Author:** [@onkark](https://discuss.elastic.co/u/onkark)\ **Replies:** 2\ **Last updated:** [June 24, 2020, 12:00pm UTC](https://discuss.elastic.co/t/elasticsearch-odbc-driver-support-for-crud/236398 "2020-06-24T12:00:30Z")
Hi Team, I'm using ElasticSearch ODBC Driver in order to connect my CPP code with ElasticSearch to perform CRUD operations. I can retrieve records from elasticsearch very well. I just want to know why I'm unable update… --- ## [How to point logstash to my elasticcloud instance](https://discuss.elastic.co/t/how-to-point-logstash-to-my-elasticcloud-instance/238443)
**Author:** [@Martijn\_van\_Iersel](https://discuss.elastic.co/u/Martijn_van_Iersel)\ **Replies:** 0\ **Last updated:** [June 24, 2020, 11:22am UTC](https://discuss.elastic.co/t/how-to-point-logstash-to-my-elasticcloud-instance/238443 "2020-06-24T11:22:20Z")
Hello, I signed up for an elasticcloud trial and I'm trying to configure logstash to send my apache logs to my elasticcloud/elasticsearch instance. I'm super confused about how to configure logstash. The example here s… --- ## [Optimizing setup which contains a single cold-node](https://discuss.elastic.co/t/optimizing-setup-which-contains-a-single-cold-node/238006)
**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\ **Replies:** 3\ **Last updated:** [June 24, 2020, 11:31am UTC](https://discuss.elastic.co/t/optimizing-setup-which-contains-a-single-cold-node/238006 "2020-06-24T11:31:42Z")
Hey there, We currently have the following setup: Two hot-nodes ingesting live data. After x amount of days ILM will rollover the indices and then move the indices to a cold-node where we close the indices after 7 days… --- ## [DELETE api vs \_delete\_by\_query against index alias](https://discuss.elastic.co/t/delete-api-vs-delete-by-query-against-index-alias/238439)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 1\ **Last updated:** [June 24, 2020, 11:07am UTC](https://discuss.elastic.co/t/delete-api-vs-delete-by-query-against-index-alias/238439 "2020-06-24T11:07:46Z")
Hi Elastic 6.8.4 When I have 2 indices, A and B. I have created alias X for these. For index B is\_write\_index: true Both of these indexes has doc with \_id: 5 When I do DELETE /X/\_doc/5 Then the doc is deleted only … --- ## [Support for ESXi and vCenter 6.7?](https://discuss.elastic.co/t/support-for-esxi-and-vcenter-6-7/237743)
**Author:** [@rehanp707](https://discuss.elastic.co/u/rehanp707)\ **Replies:** 1\ **Last updated:** [June 24, 2020, 11:04am UTC](https://discuss.elastic.co/t/support-for-esxi-and-vcenter-6-7/237743 "2020-06-24T11:04:50Z")
As per elastic documentation here, https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-module-vsphere.html#metricbeat-module-vsphere vSphere module library is built for and tested against ESXi and vCente… --- ## [Confuse about 'index.translog.durability'](https://discuss.elastic.co/t/confuse-about-index-translog-durability/237494)
**Author:** [@KellyK313](https://discuss.elastic.co/u/KellyK313)\ **Replies:** 6\ **Last updated:** [June 24, 2020, 10:55am UTC](https://discuss.elastic.co/t/confuse-about-index-translog-durability/237494 "2020-06-24T10:55:52Z")
Hey guys,I'm learning the index.translog.durability parameter and got confused. In my opinion,when I change this parameter to async ,it means ElasticSearch use Buffer I/O,data is cached in pagecache and index.translog.s… --- ## [Need help to setup Metricbeat](https://discuss.elastic.co/t/need-help-to-setup-metricbeat/238309)
**Author:** [@Anshumanabhishek](https://discuss.elastic.co/u/Anshumanabhishek)\ **Replies:** 2\ **Last updated:** [June 24, 2020, 10:53am UTC](https://discuss.elastic.co/t/need-help-to-setup-metricbeat/238309 "2020-06-24T10:53:25Z")
I have installed Elasticsearch and Kibana on EC2 server with docker compose. Its version is 7.6. When I try the metricbeat on the Minikube on my localmachine, it working fine and get all the data. But issue arise when … --- ## [Max\_bucket and Kibana queries](https://discuss.elastic.co/t/max-bucket-and-kibana-queries/238407)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 0\ **Last updated:** [June 24, 2020, 8:52am UTC](https://discuss.elastic.co/t/max-bucket-and-kibana-queries/238407 "2020-06-24T08:52:10Z")
Hi, I have about 30 indices in ElasticSearch with about 10.000.000 documents and they are under one index pattern of Kibana. One index of them ( data\_A ) , which has about 10.000 distinct values in the field "c\_displa… --- ## [Connecting the Visualization with discover page logs detail. Like the Splunk feature](https://discuss.elastic.co/t/connecting-the-visualization-with-discover-page-logs-detail-like-the-splunk-feature/238314)
**Author:** [@TUSHAR\_Sinha](https://discuss.elastic.co/u/TUSHAR_Sinha)\ **Replies:** 8\ **Last updated:** [June 24, 2020, 10:30am UTC](https://discuss.elastic.co/t/connecting-the-visualization-with-discover-page-logs-detail-like-the-splunk-feature/238314 "2020-06-24T10:30:16Z")
Hi all, I want to know whether it is possible to connect my visualization with the discover search? For example, I have a pie chart or any other visualization having different exception details. Now if I click on any on… --- ## [What would make cpu usage differs too excessively between nodes?](https://discuss.elastic.co/t/what-would-make-cpu-usage-differs-too-excessively-between-nodes/238405)
**Author:** [@Morriaty](https://discuss.elastic.co/u/Morriaty)\ **Replies:** 3\ **Last updated:** [June 24, 2020, 10:12am UTC](https://discuss.elastic.co/t/what-would-make-cpu-usage-differs-too-excessively-between-nodes/238405 "2020-06-24T10:12:36Z")
We have a cluster of three nodes with same hardwares. We have made some http benchmark test on: one index of 4 million docs, 5 shards, 1 replica use golang client gopkg.in/olivere/elastic.v6 connect to all three nodes.… --- ## [Filebeat Netflow module doesn't load](https://discuss.elastic.co/t/filebeat-netflow-module-doesnt-load/237267)
**Author:** [@ahiyaz](https://discuss.elastic.co/u/ahiyaz)\ **Replies:** 13\ **Last updated:** [June 24, 2020, 10:09am UTC](https://discuss.elastic.co/t/filebeat-netflow-module-doesnt-load/237267 "2020-06-24T10:09:25Z")
hi ive installed filebeat ver 7.7.0 using arm repository. udp input and logstash output work fine. only when im configuring netflow input filebeat fail to start. appreciate your help. bellow is the out put of debug: … --- ## [Unable to convert winlogbeat output data format from json to inflex](https://discuss.elastic.co/t/unable-to-convert-winlogbeat-output-data-format-from-json-to-inflex/238423)
**Author:** [@kumarbn](https://discuss.elastic.co/u/kumarbn)\ **Replies:** 1\ **Last updated:** [June 24, 2020, 9:47am UTC](https://discuss.elastic.co/t/unable-to-convert-winlogbeat-output-data-format-from-json-to-inflex/238423 "2020-06-24T09:47:28Z")
unable to convert winlogbeat output data format from json to inflex --- ## [Question about es shards](https://discuss.elastic.co/t/question-about-es-shards/238421)
**Author:** [@jerry-chen-315](https://discuss.elastic.co/u/jerry-chen-315)\ **Replies:** 1\ **Last updated:** [June 24, 2020, 9:43am UTC](https://discuss.elastic.co/t/question-about-es-shards/238421 "2020-06-24T09:43:40Z")
Hello: Q1.Do the shards auto relocate to other nodes when a node failure or shutdown? Q2.How can I monitor the unassigned shards progress of allocation? Thanks for all your help --- ## [Where is File Data Visualizer? How to upload CSV in Kibana?](https://discuss.elastic.co/t/where-is-file-data-visualizer-how-to-upload-csv-in-kibana/238404)
**Author:** [@Lan\_Lynn](https://discuss.elastic.co/u/Lan_Lynn)\ **Replies:** 2\ **Last updated:** [June 24, 2020, 9:41am UTC](https://discuss.elastic.co/t/where-is-file-data-visualizer-how-to-upload-csv-in-kibana/238404 "2020-06-24T09:41:29Z")
Hello ES community. I've learned on the Kibana documentation that it can load CSV files by this method: here is the link of this documentation: https://www.elastic.co/guide/en/kibana/7.7/connect-to-elasticsearch.html… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1975) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1977)