# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1001 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1002 --- ## [Kibana alert on index threshold](https://discuss.elastic.co/t/kibana-alert-on-index-threshold/268221)
**Author:** [@sireesha\_m](https://discuss.elastic.co/u/sireesha_m)\ **Replies:** 7\ **Last updated:** [March 26, 2021, 12:53am UTC](https://discuss.elastic.co/t/kibana-alert-on-index-threshold/268221 "2021-03-26T00:53:18Z")
I have created an index 'foo'. I created an alert of type index threshold to send emails when any info is written in this index. But I see that the alert has not changed to 'active' state. It stays in 'ok' and I see no … --- ## [Write queue size in elasticsearch 6.8.5](https://discuss.elastic.co/t/write-queue-size-in-elasticsearch-6-8-5/268311)
**Author:** [@Bengagi\_Foued](https://discuss.elastic.co/u/Bengagi_Foued)\ **Replies:** 1\ **Last updated:** [March 25, 2021, 11:56pm UTC](https://discuss.elastic.co/t/write-queue-size-in-elasticsearch-6-8-5/268311 "2021-03-25T23:56:21Z")
settings : thread\_pool.write.queue\_size: 500 , default value is 200 exception thrown : failed to execute pipeline for a bulk request org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execut… --- ## [Getting to geo\_point types for maps](https://discuss.elastic.co/t/getting-to-geo-point-types-for-maps/268405)
**Author:** [@snobysmake](https://discuss.elastic.co/u/snobysmake)\ **Replies:** 2\ **Last updated:** [March 25, 2021, 11:54pm UTC](https://discuss.elastic.co/t/getting-to-geo-point-types-for-maps/268405 "2021-03-25T23:54:02Z")
I'm trying to create a template before creating the index so that we can get to display location on maps. We have multiple AWS Load Balancer and want to look from where traffic is coming from. We use ElasticSearch Vers… --- ## [Configuring Monitoring for MongoDB instance](https://discuss.elastic.co/t/configuring-monitoring-for-mongodb-instance/268376)
**Author:** [@amitv-elasticsearch](https://discuss.elastic.co/u/amitv-elasticsearch)\ **Replies:** 0\ **Last updated:** [March 25, 2021, 3:39pm UTC](https://discuss.elastic.co/t/configuring-monitoring-for-mongodb-instance/268376 "2021-03-25T15:39:29Z")
Hi Team , I want to configure the alert mechanism for our mongoDB instance which is running on seperate linux server on default port. I need to configure if the mongo db service is not working on linux server we should… --- ## [Can't Remove Broken Runner](https://discuss.elastic.co/t/cant-remove-broken-runner/268414)
**Author:** [@theron](https://discuss.elastic.co/u/theron)\ **Replies:** 0\ **Last updated:** [March 25, 2021, 9:32pm UTC](https://discuss.elastic.co/t/cant-remove-broken-runner/268414 "2021-03-25T21:32:38Z")
I made a very minor typo which has placed one of my training instances in a broken state which I have been unable to recover. I am taking the "Installing and Scaling ECE" training. When I went to add the third instance… --- ## [Performance and storage of the dense\_vector type](https://discuss.elastic.co/t/performance-and-storage-of-the-dense-vector-type/265850)
**Author:** [@Jacek\_Wolkowicz](https://discuss.elastic.co/u/Jacek_Wolkowicz)\ **Replies:** 2\ **Last updated:** [March 25, 2021, 8:20pm UTC](https://discuss.elastic.co/t/performance-and-storage-of-the-dense-vector-type/265850 "2021-03-25T20:20:53Z")
While testing the dense\_vector type for 'indexing' of deep n-n embeddings, I came up with a very confusing outcome. I have been testing the impact and performance of the following part of the mapping: { ... 'embeddi… --- ## [Aggs returning more Cardinality than Source documents](https://discuss.elastic.co/t/aggs-returning-more-cardinality-than-source-documents/268142)
**Author:** [@LeeBear](https://discuss.elastic.co/u/LeeBear)\ **Replies:** 3\ **Last updated:** [March 25, 2021, 6:57pm UTC](https://discuss.elastic.co/t/aggs-returning-more-cardinality-than-source-documents/268142 "2021-03-25T18:57:08Z")
I am running: { "size": 0, "track\_total\_hits": true, "query": { "bool": { "must": \[ {"match": {"prgx\_email\_join": {"query": "attachmentChild" } } } \] } }, "aggs": { "attachment\_count" : { "cardi… --- ## [Remove multiple similar prefix events from a json variable](https://discuss.elastic.co/t/remove-multiple-similar-prefix-events-from-a-json-variable/268402)
**Author:** [@rgreen](https://discuss.elastic.co/u/rgreen)\ **Replies:** 1\ **Last updated:** [March 25, 2021, 6:46pm UTC](https://discuss.elastic.co/t/remove-multiple-similar-prefix-events-from-a-json-variable/268402 "2021-03-25T18:46:01Z")
How can I remove multiple events from a json variable with a prefix such as "customer\_" ? I have used the json plugin to pull the data into a variable json { source =\> "message" target =\> "\[@metadata\]\[json\]" } Now i a… --- ## [Thread Pools/Hot Thread Help](https://discuss.elastic.co/t/thread-pools-hot-thread-help/268266)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 5\ **Last updated:** [March 25, 2021, 6:40pm UTC](https://discuss.elastic.co/t/thread-pools-hot-thread-help/268266 "2021-03-25T18:40:00Z")
I am trying to get additional information on thread pools/hot threads. I am currently looking for any documentation that may give some more detailed information on what these terms/stats mean in the out put. If I run t… --- ## [Suricata](https://discuss.elastic.co/t/suricata/268366)
**Author:** [@Travolta](https://discuss.elastic.co/u/Travolta)\ **Replies:** 4\ **Last updated:** [March 25, 2021, 6:23pm UTC](https://discuss.elastic.co/t/suricata/268366 "2021-03-25T18:23:58Z")
Добрый день. Не так давно начал изучать эластик. Есть сервер с Suricata и отдельный сервер ELK + Logstash + Kibana + Filebeat. Никак не могу разобраться как логи с суриката отправлять на сервер эластика. Подскажите, пож… --- ## [How to split index by field value?](https://discuss.elastic.co/t/how-to-split-index-by-field-value/268055)
**Author:** [@Rahmat\_Agung\_W](https://discuss.elastic.co/u/Rahmat_Agung_W)\ **Replies:** 9\ **Last updated:** [March 25, 2021, 6:15pm UTC](https://discuss.elastic.co/t/how-to-split-index-by-field-value/268055 "2021-03-25T18:15:07Z")
I have a VM. There are 2 similiar apps (docker apps) inside it, staging and development. They use 1 filebeat to push log to logstash. On these log, I have field container.labels.com\_docker\_compose\_project. I want to crea… --- ## [Should I run multiple pipelines with http input or a single one?](https://discuss.elastic.co/t/should-i-run-multiple-pipelines-with-http-input-or-a-single-one/268337)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 1\ **Last updated:** [March 25, 2021, 5:53pm UTC](https://discuss.elastic.co/t/should-i-run-multiple-pipelines-with-http-input-or-a-single-one/268337 "2021-03-25T17:53:48Z")
I have a 16GB machine solely dedicated for running logstash. I will be using the http input. I will have different sources whose data will be stored in different indices. I have a choice of running separate pipelines f… --- ## [How to connect Sybase Sql Anywhere 9 with logstash](https://discuss.elastic.co/t/how-to-connect-sybase-sql-anywhere-9-with-logstash/268390)
**Author:** [@AltC](https://discuss.elastic.co/u/AltC)\ **Replies:** 1\ **Last updated:** [March 25, 2021, 5:45pm UTC](https://discuss.elastic.co/t/how-to-connect-sybase-sql-anywhere-9-with-logstash/268390 "2021-03-25T17:45:24Z")
I'm new to using Elasticsearh components, and I'm having trouble connecting the Sybase SqlAnywhere database to LogStash. Below the configuration file to connect LogStash to SqlAnywhere is showing an error, I have already… --- ## [Create a new node](https://discuss.elastic.co/t/create-a-new-node/267782)
**Author:** [@Weathmious](https://discuss.elastic.co/u/Weathmious)\ **Replies:** 7\ **Last updated:** [March 25, 2021, 4:49pm UTC](https://discuss.elastic.co/t/create-a-new-node/267782 "2021-03-25T16:49:20Z")
Hello I currently have my elasticsearch service that has only one node, and I would like to do a second one (on the same server), but I really can’t figure out how to do it. The goal would be to add a "hot" node and a … --- ## [Sleeping for \[3m\] after modifying repository](https://discuss.elastic.co/t/sleeping-for-3m-after-modifying-repository/268370)
**Author:** [@dwilches](https://discuss.elastic.co/u/dwilches)\ **Replies:** 6\ **Last updated:** [March 25, 2021, 4:41pm UTC](https://discuss.elastic.co/t/sleeping-for-3m-after-modifying-repository/268370 "2021-03-25T16:41:56Z")
We started receiving the Sleeping for \[3m\] after modifying repository .... because it contains snapshots older than version \[7.6.0\] in production after upgrading from 7.5.2 to 7.10.2, so we created new repos and started … --- ## [Can logstash parse same type of multiple log files?](https://discuss.elastic.co/t/can-logstash-parse-same-type-of-multiple-log-files/268024)
**Author:** [@sourabhjain104](https://discuss.elastic.co/u/sourabhjain104)\ **Replies:** 4\ **Last updated:** [March 25, 2021, 4:40pm UTC](https://discuss.elastic.co/t/can-logstash-parse-same-type-of-multiple-log-files/268024 "2021-03-25T16:40:11Z")
Hello, I have a question regarding the multiple log files (of similar type) parsing by logstash. Scenario :- My application generate log files every day,(2 log files in a day) by the name of intranet-YYYY-MM-DD-PORT.l… --- ## [Is there a way to export the CSV Formatted report of a dashboard (visualization) in Kibana programmatically?](https://discuss.elastic.co/t/is-there-a-way-to-export-the-csv-formatted-report-of-a-dashboard-visualization-in-kibana-programmatically/268294)
**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Replies:** 3\ **Last updated:** [March 25, 2021, 3:55pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-export-the-csv-formatted-report-of-a-dashboard-visualization-in-kibana-programmatically/268294 "2021-03-25T15:55:23Z")
Hi Experts, I have created a visualization with required fields using Data Table visualization. It gives Export: Raw and Formatted options at the left bottom. How can I export(download) using API or programmatically o… --- ## [Match all in js sdk does not return values, while curl does](https://discuss.elastic.co/t/match-all-in-js-sdk-does-not-return-values-while-curl-does/268322)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 7\ **Last updated:** [March 25, 2021, 3:47pm UTC](https://discuss.elastic.co/t/match-all-in-js-sdk-does-not-return-values-while-curl-does/268322 "2021-03-25T15:47:27Z")
Hi elastic wizards. I have strange issue with elasticsearch (7.11). I have an index called "test\_index", and when I query it using curl and "match\_all" it returns a value, but when I use the node js client, it does not… --- ## [ElasticSearch Split API - excessive use of disk space](https://discuss.elastic.co/t/elasticsearch-split-api-excessive-use-of-disk-space/268326)
**Author:** [@Landong.Zuo](https://discuss.elastic.co/u/Landong.Zuo)\ **Replies:** 3\ **Last updated:** [March 25, 2021, 3:47pm UTC](https://discuss.elastic.co/t/elasticsearch-split-api-excessive-use-of-disk-space/268326 "2021-03-25T15:47:49Z")
Hello, I've installed ElasticSearch 7.11.2 on a 3 node cluster on AWS EC2 linux 2. I need to split a big index (100GB on disk, 1 primary shard and 1 replica shard) to 6 primary shards and 6 replica shards using the spl… --- ## [Logstash cannot run one of the pipelines](https://discuss.elastic.co/t/logstash-cannot-run-one-of-the-pipelines/268369)
**Author:** [@Ishaan](https://discuss.elastic.co/u/Ishaan)\ **Replies:** 0\ **Last updated:** [March 25, 2021, 3:04pm UTC](https://discuss.elastic.co/t/logstash-cannot-run-one-of-the-pipelines/268369 "2021-03-25T15:04:01Z")
Hello, One of the logstash pipelines is not working and I can run the pipeline in the debug mode because it is centrally managed in kibana UI. How can debug the config? How can I look for errors? --- ## [ElasticSearch for realtime metrics/KPIs of a system](https://discuss.elastic.co/t/elasticsearch-for-realtime-metrics-kpis-of-a-system/267845)
**Author:** [@Nuno\_Centeio](https://discuss.elastic.co/u/Nuno_Centeio)\ **Replies:** 8\ **Last updated:** [March 25, 2021, 2:38pm UTC](https://discuss.elastic.co/t/elasticsearch-for-realtime-metrics-kpis-of-a-system/267845 "2021-03-25T14:38:41Z")
Hi! I need an advice. This is a very simplified version of what I have. I've developed an API that returns some metrics of things that happens on my system. For example, how many time the user is logged, the number of … --- ## [Logstash filter "if" condition to check if field exist or not](https://discuss.elastic.co/t/logstash-filter-if-condition-to-check-if-field-exist-or-not/268336)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 1\ **Last updated:** [March 25, 2021, 2:20pm UTC](https://discuss.elastic.co/t/logstash-filter-if-condition-to-check-if-field-exist-or-not/268336 "2021-03-25T14:20:14Z")
Is there any way in Logstash to check if a certain field exists or not? My use-case: I want to add a field "status: missing" when the field "httpStatus" doesn't come in the log document. --- ## [Unable to Start Elasticsearch 7.12 in Ubuntu 18.04](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-12-in-ubuntu-18-04/268330)
**Author:** [@chinkleet](https://discuss.elastic.co/u/chinkleet)\ **Replies:** 3\ **Last updated:** [March 25, 2021, 2:09pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-12-in-ubuntu-18-04/268330 "2021-03-25T14:09:05Z")
I have installed "elasticsearch" 7.12 version on Ubuntu 18.04 machine. when trying to start the "elasticsearch" service getting below error: (base) extramarks@extramarks-Latitude-3400:~/Downloads$ systemctl status ela… --- ## [Filter for each output in multiple outputs](https://discuss.elastic.co/t/filter-for-each-output-in-multiple-outputs/268358)
**Author:** [@Charith\_sattiva](https://discuss.elastic.co/u/Charith_sattiva)\ **Replies:** 0\ **Last updated:** [March 25, 2021, 2:04pm UTC](https://discuss.elastic.co/t/filter-for-each-output-in-multiple-outputs/268358 "2021-03-25T14:04:12Z")
Hello, I would like to send logs to multiple hosts in the output plugin of logstash. Is there a way I can filter logs for each output separately using the filter plugin? Thanks in advance --- ## [Kibana show Images](https://discuss.elastic.co/t/kibana-show-images/268349)
**Author:** [@rildo](https://discuss.elastic.co/u/rildo)\ **Replies:** 1\ **Last updated:** [March 25, 2021, 1:33pm UTC](https://discuss.elastic.co/t/kibana-show-images/268349 "2021-03-25T13:33:56Z")
I have a doubt . I have a table x that contains a column called images (type jsonb) in my postgresql database. I migrated this data to elasticsearch, however, only the image metadata appears, I would like to know if it i… --- ## [Search IP fields](https://discuss.elastic.co/t/search-ip-fields/268223)
**Author:** [@Skeeve](https://discuss.elastic.co/u/Skeeve)\ **Replies:** 2\ **Last updated:** [March 25, 2021, 12:47pm UTC](https://discuss.elastic.co/t/search-ip-fields/268223 "2021-03-25T12:47:50Z")
I have an field called "ip" being of type "ip". When I search using the API, I can enter GET mbp\_ip/\_search { "query": { "term": { "ip": "88.198.248.0/24" } } } But I … --- ## [Logstash input file plugin feature proposal - possibility to disable file truncation detection](https://discuss.elastic.co/t/logstash-input-file-plugin-feature-proposal-possibility-to-disable-file-truncation-detection/268339)
**Author:** [@maciejfranek](https://discuss.elastic.co/u/maciejfranek)\ **Replies:** 0\ **Last updated:** [March 25, 2021, 12:34pm UTC](https://discuss.elastic.co/t/logstash-input-file-plugin-feature-proposal-possibility-to-disable-file-truncation-detection/268339 "2021-03-25T12:34:20Z")
Hello everyone, I've been using logstash with azure files, but I reached nasty problem with it - logstash produced a lot of duplicated log events in the output due to file truncation detection. I've already created iss… --- ## [Change top left Elastic logo on opendistro kibana](https://discuss.elastic.co/t/change-top-left-elastic-logo-on-opendistro-kibana/268334)
**Author:** [@\_Tekle](https://discuss.elastic.co/u/_Tekle)\ **Replies:** 1\ **Last updated:** [March 25, 2021, 12:28pm UTC](https://discuss.elastic.co/t/change-top-left-elastic-logo-on-opendistro-kibana/268334 "2021-03-25T12:28:10Z")
hello team, how can I change the top left elasic logo in opendistro, I want to use my logo here. please help me. --- ## [How to insert date type column of a csv file in the format "dd:MM:YYYY HH:mm:ss" into elasticsearch through logstash config](https://discuss.elastic.co/t/how-to-insert-date-type-column-of-a-csv-file-in-the-format-ddyyyy-hhss-into-elasticsearch-through-logstash-config/268189)
**Author:** [@DEEPTHI\_SONA\_G](https://discuss.elastic.co/u/DEEPTHI_SONA_G)\ **Replies:** 4\ **Last updated:** [March 25, 2021, 11:30am UTC](https://discuss.elastic.co/t/how-to-insert-date-type-column-of-a-csv-file-in-the-format-ddyyyy-hhss-into-elasticsearch-through-logstash-config/268189 "2021-03-25T11:30:11Z")
I'm trying to insert data from a csv file into elasticsearch using logstash. I have tried adding date { match =\> \["SIGHTING\_TIME", "dd-MM-YYYY HH:mm:ss"\] target =\>"SIGHTING\_TIME" } in … --- ## [How can I match multimatch with NEST in elasticsearch?](https://discuss.elastic.co/t/how-can-i-match-multimatch-with-nest-in-elasticsearch/268304)
**Author:** [@Celal\_Poyraz](https://discuss.elastic.co/u/Celal_Poyraz)\ **Replies:** 3\ **Last updated:** [March 25, 2021, 11:23am UTC](https://discuss.elastic.co/t/how-can-i-match-multimatch-with-nest-in-elasticsearch/268304 "2021-03-25T11:23:44Z")
I want to search with RegisterNumber and Title at the same time. But how can I match both at the same time? Also, when I press the space character, I cannot make calls after the space. How can I solve this? Currently sea… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1000) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1002)