# Latest **URL:** https://discuss.elastic.co/latest.md?page=1589 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1590 --- ## [Logstash config for nested log](https://discuss.elastic.co/t/logstash-config-for-nested-log/277680)
**Author:** [@kriss332](https://discuss.elastic.co/u/kriss332)\ **Replies:** 10\ **Last updated:** [July 4, 2021, 1:55pm UTC](https://discuss.elastic.co/t/logstash-config-for-nested-log/277680 "2021-07-04T13:55:45Z")
Hello everyone... I have multiple event logs from windows. Converted them to csv using EvtxEcmd.exe. I combined lots of event logs into one csv file. I need to upload it to ELK. below are the column names- RecordNumb… --- ## [Search with nested Fields on multi index](https://discuss.elastic.co/t/search-with-nested-fields-on-multi-index/277403)
**Author:** [@12345](https://discuss.elastic.co/u/12345)\ **Replies:** 2\ **Last updated:** [July 5, 2021, 4:04am UTC](https://discuss.elastic.co/t/search-with-nested-fields-on-multi-index/277403 "2021-07-05T04:04:36Z")
I am using ES 7.1.I have my design in such a way each index contains single document type.For example - Suppose I have Order and some products in it. Order data is stored in one index and Products data in other index. I… --- ## [Esrally error in k8s cluster and not able to deploy](https://discuss.elastic.co/t/esrally-error-in-k8s-cluster-and-not-able-to-deploy/277143)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 9\ **Last updated:** [July 5, 2021, 3:55am UTC](https://discuss.elastic.co/t/esrally-error-in-k8s-cluster-and-not-able-to-deploy/277143 "2021-07-05T03:55:45Z")
Hi All, I am trying to deploy esrally in kubernetes cluster and below is the manifest I have created, --- kind: PersistentVolumeClaim apiVersion: v1 metadata: name: esrally-claim spec: storageClassName: db access… --- ## [Security Management in Kibana](https://discuss.elastic.co/t/security-management-in-kibana/277756)
**Author:** [@Widhera\_Yoza](https://discuss.elastic.co/u/Widhera_Yoza)\ **Replies:** 4\ **Last updated:** [July 5, 2021, 3:33am UTC](https://discuss.elastic.co/t/security-management-in-kibana/277756 "2021-07-05T03:33:57Z")
Hello everyone. I want to ask some questions about user management in KIBANA. Can we set a password rule such as the password must have a minimum length of 8 characters and have symbols? Can we ban users who do not cha… --- ## [Understand this simple search query](https://discuss.elastic.co/t/understand-this-simple-search-query/277759)
**Author:** [@KS\_123](https://discuss.elastic.co/u/KS_123)\ **Replies:** 1\ **Last updated:** [July 5, 2021, 3:07am UTC](https://discuss.elastic.co/t/understand-this-simple-search-query/277759 "2021-07-05T03:07:43Z")
this is probably a very basic question but I have 2 searches below. search 1 returns 4 values, I just want it to return 1 value(DeviceCommandEvent). how do I do this? search 2 retruns 3 values which I would expect, tha… --- ## [Using custom rally config while running esrally cli](https://discuss.elastic.co/t/using-custom-rally-config-while-running-esrally-cli/277621)
**Author:** [@purushothamkdr143](https://discuss.elastic.co/u/purushothamkdr143)\ **Replies:** 1\ **Last updated:** [July 5, 2021, 2:35am UTC](https://discuss.elastic.co/t/using-custom-rally-config-while-running-esrally-cli/277621 "2021-07-05T02:35:02Z")
Hi All, I am using esrally for benchmakring elasticsearch. rally by default looks for config at this location i.e /rally/.rally/rally.ini, is it possible to specify the custom path while running the race for example: es… --- ## [A question on ILM configuration](https://discuss.elastic.co/t/a-question-on-ilm-configuration/277549)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 1\ **Last updated:** [July 5, 2021, 2:27am UTC](https://discuss.elastic.co/t/a-question-on-ilm-configuration/277549 "2021-07-05T02:27:56Z")
Hi, I want to keep the index size to 50GB (since this is recommended size) and keep 10 such indices in the hot phase. After that they should move to warm phase. I am finding it difficult to achieve this. I have kept t… --- ## [Elastic search rest client version 7.10.2 not pulling dependencies in maven automatically during compile](https://discuss.elastic.co/t/elastic-search-rest-client-version-7-10-2-not-pulling-dependencies-in-maven-automatically-during-compile/277580)
**Author:** [@reddroid](https://discuss.elastic.co/u/reddroid)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 4:30pm UTC](https://discuss.elastic.co/t/elastic-search-rest-client-version-7-10-2-not-pulling-dependencies-in-maven-automatically-during-compile/277580 "2021-07-01T16:30:40Z")
Hi Team , I'm currently using Elastic search rest client in maven like this \7.10.2\ \8.7.0\ \ \org.e… --- ## [ElasticsSearch performnce consideration](https://discuss.elastic.co/t/elasticssearch-performnce-consideration/277584)
**Author:** [@arctica82](https://discuss.elastic.co/u/arctica82)\ **Replies:** 1\ **Last updated:** [July 5, 2021, 2:23am UTC](https://discuss.elastic.co/t/elasticssearch-performnce-consideration/277584 "2021-07-05T02:23:09Z")
Hi Everyone, I am new to ElaticSearch and we have some projects to move some our existing Databases from SQL SERVER to ElaticSearch. We are going to use ElasticSearch service provided in AWS. We are planing to use two … --- ## [Performance management in CCR](https://discuss.elastic.co/t/performance-management-in-ccr/277637)
**Author:** [@jamesgorrie](https://discuss.elastic.co/u/jamesgorrie)\ **Replies:** 4\ **Last updated:** [July 5, 2021, 2:18am UTC](https://discuss.elastic.co/t/performance-management-in-ccr/277637 "2021-07-05T02:18:31Z")
We currently have CCR setup between two deployments within Elastic Cloud. The main reason for having this configuration is that we write heavily to the leader, and don't mind a search performance hit there, but would li… --- ## [Documentation suggestion](https://discuss.elastic.co/t/documentation-suggestion/277673)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 1\ **Last updated:** [July 5, 2021, 2:17am UTC](https://discuss.elastic.co/t/documentation-suggestion/277673 "2021-07-05T02:17:42Z")
Many fields are now complex, like winlog.event\_data.IpAddress, but few if any of the doc examples use any more than a simple field name: { "remove": { "field": "user\_agent" } } Finding when to use the dots vs w… --- ## [Modify Index name in Response](https://discuss.elastic.co/t/modify-index-name-in-response/277346)
**Author:** [@daksh0225](https://discuss.elastic.co/u/daksh0225)\ **Replies:** 2\ **Last updated:** [July 5, 2021, 2:13am UTC](https://discuss.elastic.co/t/modify-index-name-in-response/277346 "2021-07-05T02:13:55Z")
Hello!! I have made some changes to the codebase to modify the index name for certain types of requests. However, I don't want the user to know about any such changes that I have made. So, I want to modify the index nam… --- ## [OCI compute for GCP elasicsearch](https://discuss.elastic.co/t/oci-compute-for-gcp-elasicsearch/277718)
**Author:** [@Sayantan\_Chakraborty](https://discuss.elastic.co/u/Sayantan_Chakraborty)\ **Replies:** 1\ **Last updated:** [July 5, 2021, 2:13am UTC](https://discuss.elastic.co/t/oci-compute-for-gcp-elasicsearch/277718 "2021-07-05T02:13:32Z")
hi i want to use elasticsearch services of GCP in OCI with Magento2.4.x. previously I tried to connect them using vcp to vcn connectivity on AWS but it did not work as Route 53 did not detect elastic search as a resourc… --- ## [Wordpress /woocomerce with AWS elasticsearch](https://discuss.elastic.co/t/wordpress-woocomerce-with-aws-elasticsearch/277725)
**Author:** [@Sayantan\_Chakraborty](https://discuss.elastic.co/u/Sayantan_Chakraborty)\ **Replies:** 1\ **Last updated:** [July 5, 2021, 2:11am UTC](https://discuss.elastic.co/t/wordpress-woocomerce-with-aws-elasticsearch/277725 "2021-07-05T02:11:03Z")
hi it will be great if anyone can share some instructions for the integration of AWS elasticsearch with wordpress and woocommerce. thx sayantan --- ## [Extra memory required to accomodate extra buckets](https://discuss.elastic.co/t/extra-memory-required-to-accomodate-extra-buckets/277186)
**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\ **Replies:** 5\ **Last updated:** [July 5, 2021, 2:06am UTC](https://discuss.elastic.co/t/extra-memory-required-to-accomodate-extra-buckets/277186 "2021-07-05T02:06:10Z")
We are getting too many buckets exception error in viewing the visualization. The default limit for max.buckets is 10000 if we want to increase this parameter to 20000 to resolve the exception so how much would be the e… --- ## [Snapshot on fast changing clusters](https://discuss.elastic.co/t/snapshot-on-fast-changing-clusters/276468)
**Author:** [@nadler](https://discuss.elastic.co/u/nadler)\ **Replies:** 5\ **Last updated:** [July 5, 2021, 2:01am UTC](https://discuss.elastic.co/t/snapshot-on-fast-changing-clusters/276468 "2021-07-05T02:01:15Z")
Hey, So, in the last two weeks i have encountered a problem with one of our clusters. I have a daily backup procedure running on it and often, while the snapshot procedure is running, we get the following exception: I… --- ## [Log fields are not parsing as expected using grok filter](https://discuss.elastic.co/t/log-fields-are-not-parsing-as-expected-using-grok-filter/277746)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 5\ **Last updated:** [July 4, 2021, 11:35pm UTC](https://discuss.elastic.co/t/log-fields-are-not-parsing-as-expected-using-grok-filter/277746 "2021-07-04T23:35:22Z")
Hi All, I am using below configuration and expecting it to get parse as per below fields. below is the pipeline.conf file. input { beats { port =\> "5044" } } filter { grok { match =\> { "mes… --- ## [Extract data from CSV column](https://discuss.elastic.co/t/extract-data-from-csv-column/277745)
**Author:** [@anon33720113](https://discuss.elastic.co/u/anon33720113)\ **Replies:** 3\ **Last updated:** [July 4, 2021, 8:49pm UTC](https://discuss.elastic.co/t/extract-data-from-csv-column/277745 "2021-07-04T20:49:44Z")
Hey I have logs as CSV and one column which is in string and has multiple values that need to extracted and stored as new fields. The column name is comment and it's value is VPN token auth failed. Destination was: 62.… --- ## [Can't add sample data to Kibana](https://discuss.elastic.co/t/cant-add-sample-data-to-kibana/277726)
**Author:** [@Chenlrv](https://discuss.elastic.co/u/Chenlrv)\ **Replies:** 3\ **Last updated:** [July 4, 2021, 7:03pm UTC](https://discuss.elastic.co/t/cant-add-sample-data-to-kibana/277726 "2021-07-04T19:03:33Z")
Hi, I created a new space and trying to add sample data to it. The "Add data" button is disabled for all of the 3 options, and there's a tooltip "Unable to verify dataset status, error: Response Error" How can I sol… --- ## [Logstash kafka input consumer group not finding all partitions](https://discuss.elastic.co/t/logstash-kafka-input-consumer-group-not-finding-all-partitions/277741)
**Author:** [@Bakkali\_Amine](https://discuss.elastic.co/u/Bakkali_Amine)\ **Replies:** 0\ **Last updated:** [July 4, 2021, 4:09pm UTC](https://discuss.elastic.co/t/logstash-kafka-input-consumer-group-not-finding-all-partitions/277741 "2021-07-04T16:09:30Z")
I have a topic with two partitions but logstash consume only one of them. "Adding newly assigned partitions: partition-0", it is missing the other partition. And when I delete my logstash pod (I'm on kubernetes) it rand… --- ## [Why is TermQuery so much faster than PointRangeQuery?](https://discuss.elastic.co/t/why-is-termquery-so-much-faster-than-pointrangequery/277740)
**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\ **Replies:** 0\ **Last updated:** [July 4, 2021, 2:42pm UTC](https://discuss.elastic.co/t/why-is-termquery-so-much-faster-than-pointrangequery/277740 "2021-07-04T14:42:25Z")
I have 1 index with data volume around 80 million. I had 1 slow query before, which was 3 conditions, including 1 date equivalent query as well as 2 numeric column equivalent queries, and the query time was at least 5 se… --- ## [Index Shrinking?](https://discuss.elastic.co/t/index-shrinking/277739)
**Author:** [@herzel.sapago](https://discuss.elastic.co/u/herzel.sapago)\ **Replies:** 1\ **Last updated:** [July 4, 2021, 2:18pm UTC](https://discuss.elastic.co/t/index-shrinking/277739 "2021-07-04T14:18:37Z")
Hi We are implementing elastic in our company. As the person who responsible for it, I had been ask from my manager to check for grow of index each day and report it to group of managers. well I did it, finding that … --- ## [Elasticsearch-7.9.2-amd64.deb exit status 78](https://discuss.elastic.co/t/elasticsearch-7-9-2-amd64-deb-exit-status-78/277717)
**Author:** [@Sayantan\_Chakraborty](https://discuss.elastic.co/u/Sayantan_Chakraborty)\ **Replies:** 8\ **Last updated:** [July 4, 2021, 1:29pm UTC](https://discuss.elastic.co/t/elasticsearch-7-9-2-amd64-deb-exit-status-78/277717 "2021-07-04T13:29:29Z")
hi, i am facing a few issues for the Magento2.4.x installation. The process' exit code is 'exited' and its exit status is 78. Jul 04 02:12:40 somehost systemd\[1\]: elasticsearch.service: Failed with result\> -- Subject: U… --- ## [Impact of increasing index.max\_result\_window size to 10 million?](https://discuss.elastic.co/t/impact-of-increasing-index-max-result-window-size-to-10-million/277241)
**Author:** [@StringerBell](https://discuss.elastic.co/u/StringerBell)\ **Replies:** 2\ **Last updated:** [July 4, 2021, 1:34pm UTC](https://discuss.elastic.co/t/impact-of-increasing-index-max-result-window-size-to-10-million/277241 "2021-07-04T13:34:24Z")
I have a scenario where I want to increase the index.max\_result\_window size to about 10 million. My query only cares about fetching the sort order and not the actual \_source field. Does changing the max\_result\_window si… --- ## [Elasticsearch-plugin install PLUGIN hangs](https://discuss.elastic.co/t/elasticsearch-plugin-install-plugin-hangs/277732)
**Author:** [@mlrodrigo](https://discuss.elastic.co/u/mlrodrigo)\ **Replies:** 0\ **Last updated:** [July 4, 2021, 11:09am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-install-plugin-hangs/277732 "2021-07-04T11:09:02Z")
Installing an Elasticsearch plugin hangs after a few tries due to (likely) a lack of entropy in /dev/random: bin/elasticsearch-plugin install analysis-smartcn --verbose -\> Installing analysis-smartcn Checking if url exi… --- ## [Elasticsearch Query Expansion problem, multi-field search](https://discuss.elastic.co/t/elasticsearch-query-expansion-problem-multi-field-search/277729)
**Author:** [@Federico\_Bottarelli](https://discuss.elastic.co/u/Federico_Bottarelli)\ **Replies:** 0\ **Last updated:** [July 4, 2021, 10:16am UTC](https://discuss.elastic.co/t/elasticsearch-query-expansion-problem-multi-field-search/277729 "2021-07-04T10:16:17Z")
Hi guys. I'm trying to expand some queries via Blind Relevance Feedback for an Information Retrieval project using TREC evaluation system, (CORD-19 database) I would like to use prefixes of the best terms instead of who… --- ## [\[Solved\] Elastic agent as fleet server auto shutdown for no reason in K8S](https://discuss.elastic.co/t/solved-elastic-agent-as-fleet-server-auto-shutdown-for-no-reason-in-k8s/277724)
**Author:** [@SaigyoujiYuyuko233](https://discuss.elastic.co/u/SaigyoujiYuyuko233)\ **Replies:** 2\ **Last updated:** [July 4, 2021, 9:26am UTC](https://discuss.elastic.co/t/solved-elastic-agent-as-fleet-server-auto-shutdown-for-no-reason-in-k8s/277724 "2021-07-04T09:26:05Z")
Contextualization I'm trying to run a fleet server using elastic agent in k8s Using docker img: docker.elastic.co/beats/elastic-agent:7.13.2 Elasticsearch Ver: 7.13.2 Kibana Ver: 7.13.2 What happened When the fleet s… --- ## [How to integrate CAS auth in Kibana?](https://discuss.elastic.co/t/how-to-integrate-cas-auth-in-kibana/277647)
**Author:** [@tong6462](https://discuss.elastic.co/u/tong6462)\ **Replies:** 3\ **Last updated:** [July 4, 2021, 9:12am UTC](https://discuss.elastic.co/t/how-to-integrate-cas-auth-in-kibana/277647 "2021-07-04T09:12:55Z")
Hi. I need to integrate CAS Auth in Kibana CAS URL: https://mydomain.com/sso/login Verify ticket: https://mydomain.com/sso/p3/serviceValidate? Can anyone help me please? --- ## [Imap Input - Java OutOfMemoryError](https://discuss.elastic.co/t/imap-input-java-outofmemoryerror/277720)
**Author:** [@RoteEdition](https://discuss.elastic.co/u/RoteEdition)\ **Replies:** 0\ **Last updated:** [July 4, 2021, 4:54am UTC](https://discuss.elastic.co/t/imap-input-java-outofmemoryerror/277720 "2021-07-04T04:54:17Z")
Hi there, i am trying to import about ~1000 Mails from my Inbox. I marked the first e-mail as unread, got the UID and activated uid\_tracking. The first ~60 mails got fetched like intended. I don't think it's my configu… --- ## [HEXADECIMAL string to Binary and Binary to decimal in log-stash using ruby filter](https://discuss.elastic.co/t/hexadecimal-string-to-binary-and-binary-to-decimal-in-log-stash-using-ruby-filter/277715)
**Author:** [@Kamikaze\_K](https://discuss.elastic.co/u/Kamikaze_K)\ **Replies:** 2\ **Last updated:** [July 4, 2021, 2:30am UTC](https://discuss.elastic.co/t/hexadecimal-string-to-binary-and-binary-to-decimal-in-log-stash-using-ruby-filter/277715 "2021-07-04T02:30:05Z")
I am working with logstash and I am using ruby filter to change HEX to decimal which works fine for one set of data. What I use for this is ; ruby{ code =\> "event.set('xxx', event.get('xx').hex)" } I am looking for s… [Previous page](https://discuss.elastic.co/latest.md?page=1588) [Next page](https://discuss.elastic.co/latest.md?page=1590)