# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1008 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1009 --- ## [Kibana : internal server error](https://discuss.elastic.co/t/kibana-internal-server-error/267790)
**Author:** [@Salvatore\_Minervini](https://discuss.elastic.co/u/Salvatore_Minervini)\ **Replies:** 1\ **Last updated:** [March 19, 2021, 4:07pm UTC](https://discuss.elastic.co/t/kibana-internal-server-error/267790 "2021-03-19T16:07:32Z")
hi all, I'm new on kubernates and ELK and "i beg your pardon" if i wil lask something stupid, i googled a while for a solution but i found nothing so i decide to ask help.... in our configuration on kubernates, we hav… --- ## [\_index field filter performance VS index name in url](https://discuss.elastic.co/t/index-field-filter-performance-vs-index-name-in-url/266572)
**Author:** [@Abbass](https://discuss.elastic.co/u/Abbass)\ **Replies:** 4\ **Last updated:** [March 19, 2021, 3:33pm UTC](https://discuss.elastic.co/t/index-field-filter-performance-vs-index-name-in-url/266572 "2021-03-19T15:33:18Z")
From performance perspective, does filtering on \_index field behave as if i've set the index name in the URL? GET log-\*/\_doc/\_search { "query": { "bool": { "must": \[ { "term": { … --- ## [Logstash CSV adding multiple rows by splitting a column value](https://discuss.elastic.co/t/logstash-csv-adding-multiple-rows-by-splitting-a-column-value/267766)
**Author:** [@venkat\_s](https://discuss.elastic.co/u/venkat_s)\ **Replies:** 2\ **Last updated:** [March 19, 2021, 3:22pm UTC](https://discuss.elastic.co/t/logstash-csv-adding-multiple-rows-by-splitting-a-column-value/267766 "2021-03-19T15:22:54Z")
Hello, I am importing csv file to elasticsearch using logstash. I need to duplicate a row based on a comma separated column values. This is how the data looks. I want to add multiple rows based on the number of valu… --- ## ["No Added Sugar" and "Added Sugar" term match](https://discuss.elastic.co/t/no-added-sugar-and-added-sugar-term-match/267730)
**Author:** [@Alan88](https://discuss.elastic.co/u/Alan88)\ **Replies:** 3\ **Last updated:** [March 19, 2021, 3:17pm UTC](https://discuss.elastic.co/t/no-added-sugar-and-added-sugar-term-match/267730 "2021-03-19T15:17:01Z")
I'm looking for a way to tell elasticsearch that "no added sugar" and "added sugar" are separate phrases and should be indexed accordingly. I do not want them to conflate or conflict with each other. Docs example: "Col… --- ## [Logstash file input/output with multiline codec](https://discuss.elastic.co/t/logstash-file-input-output-with-multiline-codec/267552)
**Author:** [@liuke](https://discuss.elastic.co/u/liuke)\ **Replies:** 8\ **Last updated:** [March 19, 2021, 3:03pm UTC](https://discuss.elastic.co/t/logstash-file-input-output-with-multiline-codec/267552 "2021-03-19T15:03:50Z")
Hello, i'm new in logstash and i'm encountering some troubles on building a config that works properly with my needings. What i want to do is: -Input files from multiples folders (application logs, so with java excepti… --- ## [Add local json file into elasticsearch](https://discuss.elastic.co/t/add-local-json-file-into-elasticsearch/267819)
**Author:** [@feyn\_mak](https://discuss.elastic.co/u/feyn_mak)\ **Replies:** 1\ **Last updated:** [March 19, 2021, 2:48pm UTC](https://discuss.elastic.co/t/add-local-json-file-into-elasticsearch/267819 "2021-03-19T14:48:13Z")
Hi, how do i add a json file e.g { "0": "passage 1", "1":"passage 2", "2":"passage 3" } into elasticsearch? Thank you so much for your help! --- ## [Multiple spliting in a single string using logstash](https://discuss.elastic.co/t/multiple-spliting-in-a-single-string-using-logstash/267817)
**Author:** [@Kiran\_Gupta](https://discuss.elastic.co/u/Kiran_Gupta)\ **Replies:** 0\ **Last updated:** [March 19, 2021, 2:12pm UTC](https://discuss.elastic.co/t/multiple-spliting-in-a-single-string-using-logstash/267817 "2021-03-19T14:12:37Z")
I had a string called regions\_of\_interest which holds the following value "California - San Diego,New Zealand - Auckland,Asia - Hong Kong" I want to split this string multiple times, First with the comma(,) and then wit… --- ## [Search in all given filed but it return only match filed. so i can send those value on front end](https://discuss.elastic.co/t/search-in-all-given-filed-but-it-return-only-match-filed-so-i-can-send-those-value-on-front-end/267770)
**Author:** [@mayank\_hardiya](https://discuss.elastic.co/u/mayank_hardiya)\ **Replies:** 0\ **Last updated:** [March 19, 2021, 9:16am UTC](https://discuss.elastic.co/t/search-in-all-given-filed-but-it-return-only-match-filed-so-i-can-send-those-value-on-front-end/267770 "2021-03-19T09:16:53Z")
My query - client.search({ index: indexname, body: { query: { multi\_match: { query: req.query.search, fields: \["description","name","hostname","username","category\_name"\], } }, } }, it return - \[ { "\_index"… --- ## [Data tiering (hot, warm and cold storage)](https://discuss.elastic.co/t/data-tiering-hot-warm-and-cold-storage/267814)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 0\ **Last updated:** [March 19, 2021, 1:29pm UTC](https://discuss.elastic.co/t/data-tiering-hot-warm-and-cold-storage/267814 "2021-03-19T13:29:35Z")
Hello, I am a self-funded student with a homelab wherein I am capturing honeypot logs. I have a workstation with SSD storage wherein one disk holds the VMs OS (Ubuntu server 20.04.2 LTS), and the second SSD contains a da… --- ## [Modsecurity Json log parsing](https://discuss.elastic.co/t/modsecurity-json-log-parsing/267807)
**Author:** [@mirko.spezie](https://discuss.elastic.co/u/mirko.spezie)\ **Replies:** 4\ **Last updated:** [March 19, 2021, 1:35pm UTC](https://discuss.elastic.co/t/modsecurity-json-log-parsing/267807 "2021-03-19T13:35:01Z")
Hi, I'm trying to parse with no success the modsecurity json log. This is the output: { "\_index": "modsecurity-2021.03.17", "\_type": "\_doc", "\_id": "oQRWQngB6w34lfYfAQp6", "\_version": 1, … --- ## [Control visualization is not working as expected](https://discuss.elastic.co/t/control-visualization-is-not-working-as-expected/264602)
**Author:** [@Treki](https://discuss.elastic.co/u/Treki)\ **Replies:** 4\ **Last updated:** [March 19, 2021, 1:14pm UTC](https://discuss.elastic.co/t/control-visualization-is-not-working-as-expected/264602 "2021-03-19T13:14:07Z")
Hello everybody, I am comparing the same control visualisation for two different timespans. No other filter is being applied. With control visualisation, I mean this visualisation type: At first, I choose a timespa… --- ## [Can elasticsearch help in seo](https://discuss.elastic.co/t/can-elasticsearch-help-in-seo/267622)
**Author:** [@fatheyabelslam](https://discuss.elastic.co/u/fatheyabelslam)\ **Replies:** 3\ **Last updated:** [March 19, 2021, 12:10pm UTC](https://discuss.elastic.co/t/can-elasticsearch-help-in-seo/267622 "2021-03-19T12:10:39Z")
Hi, I working with yoast.js The main use of it is to analyze content and return score of content based on google requirements for best content structure And i think :thinking: that elasticsearch is the best in unders… --- ## [How to restrict access to specific indices when the user get the space privilege](https://discuss.elastic.co/t/how-to-restrict-access-to-specific-indices-when-the-user-get-the-space-privilege/266876)
**Author:** [@empire](https://discuss.elastic.co/u/empire)\ **Replies:** 3\ **Last updated:** [March 19, 2021, 11:39am UTC](https://discuss.elastic.co/t/how-to-restrict-access-to-specific-indices-when-the-user-get-the-space-privilege/266876 "2021-03-19T11:39:19Z")
Hi, I have a role defined as below. would like to know if the indices restriction still work when the user is allowed to get access to the "vulcano" space. e.g will the user in this role still be restricted to only hav… --- ## [Watcher Script for Monitoring Shard Size](https://discuss.elastic.co/t/watcher-script-for-monitoring-shard-size/267761)
**Author:** [@Learner4](https://discuss.elastic.co/u/Learner4)\ **Replies:** 0\ **Last updated:** [March 19, 2021, 7:53am UTC](https://discuss.elastic.co/t/watcher-script-for-monitoring-shard-size/267761 "2021-03-19T07:53:17Z")
I'm trying to create a Watcher Script to monitor the Shard size for all the indices. Example - If shard size reaches more than 30 GB, an alert should get trigger from Watcher \*\*GET \_cat/shards?v&s=store:desc&format=json&… --- ## [BEATS input: org.logstash.FieldReference$IllegalSyntaxException: Invalid FieldReference: \`string\[\]\`](https://discuss.elastic.co/t/beats-input-org-logstash-fieldreference-illegalsyntaxexception-invalid-fieldreference-string/267781)
**Author:** [@zarak](https://discuss.elastic.co/u/zarak)\ **Replies:** 0\ **Last updated:** [March 19, 2021, 9:46am UTC](https://discuss.elastic.co/t/beats-input-org-logstash-fieldreference-illegalsyntaxexception-invalid-fieldreference-string/267781 "2021-03-19T09:46:57Z")
Hello, I've setup a basic filebeat to logstash infra, but I keep on getting this kind of error in logstash' logs: Mar 19 10:42:33 logstash\[5912\]: \[2021-03-19T10:42:33,892\]\[INFO \]\[org.logstash.beats.BeatsHandler\]\[http-i… --- ## [Is it possible to Return only one filed with Id](https://discuss.elastic.co/t/is-it-possible-to-return-only-one-filed-with-id/267664)
**Author:** [@mayank\_hardiya](https://discuss.elastic.co/u/mayank_hardiya)\ **Replies:** 2\ **Last updated:** [March 19, 2021, 9:03am UTC](https://discuss.elastic.co/t/is-it-possible-to-return-only-one-filed-with-id/267664 "2021-03-19T09:03:18Z")
\[ { "\_index": "onlive", "\_type": "\_doc", "\_id": "584", "\_score": 1, "\_source": { "description": "Free group Yoga session !!! for all levels Experience authentic Yoga from ancient scriptures", "name": "Free Yoga 1… --- ## [Is the below sizing fits for mentioned use case?](https://discuss.elastic.co/t/is-the-below-sizing-fits-for-mentioned-use-case/266855)
**Author:** [@Jax\_dev](https://discuss.elastic.co/u/Jax_dev)\ **Replies:** 12\ **Last updated:** [March 19, 2021, 9:01am UTC](https://discuss.elastic.co/t/is-the-below-sizing-fits-for-mentioned-use-case/266855 "2021-03-19T09:01:39Z")
I have been reading many documents to understand about sizing about elastic search... Data load: 9k transactions per second Each transaction contains around 1kb of data. Per second, 9k inserts and 50k search queries w… --- ## [Got error "No processor type exists with name \[attachment\]](https://discuss.elastic.co/t/got-error-no-processor-type-exists-with-name-attachment/267741)
**Author:** [@lxia](https://discuss.elastic.co/u/lxia)\ **Replies:** 4\ **Last updated:** [March 19, 2021, 8:57am UTC](https://discuss.elastic.co/t/got-error-no-processor-type-exists-with-name-attachment/267741 "2021-03-19T08:57:20Z")
have installed ingest-attachment on the host, and also restart the service "sudo systemctl restart elasticsearch.service". and get the message on the host: elasticsearch@CNSHZ-Amarisoft-OptiPlex-7050:/usr/local/elastic… --- ## [ClusterBlockException : All shards failed](https://discuss.elastic.co/t/clusterblockexception-all-shards-failed/267755)
**Author:** [@onkark](https://discuss.elastic.co/u/onkark)\ **Replies:** 4\ **Last updated:** [March 19, 2021, 8:34am UTC](https://discuss.elastic.co/t/clusterblockexception-all-shards-failed/267755 "2021-03-19T08:34:09Z")
Hi, I am getting the error like org.elasticsearch.cluster.block.ClusterBlockException : blocked by : \[SERVICE\_UNAVAILABLE/1/state not recovered/initialized\] where the cluster health status is YELLOW and primary shards … --- ## [Synonyms and/or synonym graph for mapping product names to other names](https://discuss.elastic.co/t/synonyms-and-or-synonym-graph-for-mapping-product-names-to-other-names/267678)
**Author:** [@Robert\_SL](https://discuss.elastic.co/u/Robert_SL)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 2:05pm UTC](https://discuss.elastic.co/t/synonyms-and-or-synonym-graph-for-mapping-product-names-to-other-names/267678 "2021-03-18T14:05:56Z")
(Elastic Cloud 6.8) I have a requirement when searching for a product name to also return a different product that will replace it in the future. For example, when the user searches for "Product ABC", I also want to re… --- ## [How to implement join-fields with Spring Data Elasticsearch 4.0.0](https://discuss.elastic.co/t/how-to-implement-join-fields-with-spring-data-elasticsearch-4-0-0/267661)
**Author:** [@matt4](https://discuss.elastic.co/u/matt4)\ **Replies:** 2\ **Last updated:** [March 19, 2021, 7:50am UTC](https://discuss.elastic.co/t/how-to-implement-join-fields-with-spring-data-elasticsearch-4-0-0/267661 "2021-03-19T07:50:49Z")
Hi, I am using Spring Data Elasticsearch 4.0.0 and I would like to establish a parent-child-relationship between my entities. I found out that @JoinTypeRelation comes with version 4.1.X, but unfortunately, I am stuck wi… --- ## [Help please: logstash start error](https://discuss.elastic.co/t/help-please-logstash-start-error/267630)
**Author:** [@toufiq\_khan](https://discuss.elastic.co/u/toufiq_khan)\ **Replies:** 2\ **Last updated:** [March 19, 2021, 8:08am UTC](https://discuss.elastic.co/t/help-please-logstash-start-error/267630 "2021-03-19T08:08:15Z")
logstash showing this error Using bundled JDK: /usr/share/logstash/jdk OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release. WARNING:… --- ## [No results found in kabana discover page](https://discuss.elastic.co/t/no-results-found-in-kabana-discover-page/267242)
**Author:** [@Ravikumar.P](https://discuss.elastic.co/u/Ravikumar.P)\ **Replies:** 2\ **Last updated:** [March 19, 2021, 8:05am UTC](https://discuss.elastic.co/t/no-results-found-in-kabana-discover-page/267242 "2021-03-19T08:05:05Z")
Hi I am new to elastic search and kibana I am facing the below issues. When I select 30days time range only I could see the data until February 19th 2021, 14:01:51. How to get the latest data --- ## [Include/Exclude for cardinality aggregation](https://discuss.elastic.co/t/include-exclude-for-cardinality-aggregation/267759)
**Author:** [@robmartin11](https://discuss.elastic.co/u/robmartin11)\ **Replies:** 0\ **Last updated:** [March 19, 2021, 7:50am UTC](https://discuss.elastic.co/t/include-exclude-for-cardinality-aggregation/267759 "2021-03-19T07:50:01Z")
I have a terms aggregation with an IncludeExclude filter: { "size": 0, "query": { ... }, "aggregations": { "facets": { "terms": { "field": "type\_id", "size": 20, "order": \[ … --- ## [inputで取得したjsonの特定の要素をElasticsearchに登録したい](https://discuss.elastic.co/t/input-json-elasticsearch/267733)
**Author:** [@Ryosuke.mm](https://discuss.elastic.co/u/Ryosuke.mm)\ **Replies:** 2\ **Last updated:** [March 19, 2021, 7:36am UTC](https://discuss.elastic.co/t/input-json-elasticsearch/267733 "2021-03-19T07:36:59Z")
logstashに関して、inputで取得したjsonが以下のような形式の場合に、issuesの1要素を Elasticsearchの1ドキュメントとして登録したいと考えております。 Blockquote { "issues": \[ { "id": 1, "FieldA": "1" }, { "id": 2, "FieldA": "2" }, \], "total\_count": "2", "timesta… --- ## [Upgrading Elasticsearch in Kubernetes using Helm](https://discuss.elastic.co/t/upgrading-elasticsearch-in-kubernetes-using-helm/267752)
**Author:** [@am\_Pg](https://discuss.elastic.co/u/am_Pg)\ **Replies:** 0\ **Last updated:** [March 19, 2021, 5:52am UTC](https://discuss.elastic.co/t/upgrading-elasticsearch-in-kubernetes-using-helm/267752 "2021-03-19T05:52:53Z")
Hello! Is it possible to upgrade Elasticsearch in Kubernetes using Helm from version 5.4.2 to 6.8? I saw this guide from Elastic https://www.elastic.co/guide/en/elasticsearch/reference/6.8/rolling-upgrades.html. I was w… --- ## [Kibana でのリバースプロキシ設定](https://discuss.elastic.co/t/kibana/267627)
**Author:** [@vavan](https://discuss.elastic.co/u/vavan)\ **Replies:** 1\ **Last updated:** [March 19, 2021, 4:11am UTC](https://discuss.elastic.co/t/kibana/267627 "2021-03-19T04:11:12Z")
現在、 kibanaへのアクセスを 80ポートで行うためにリバースプロキシ設定をしようとしています。 kibanaは 7.8.１＋apache 2.4を利用しています。 ちょうど下記サイトがビンゴな内容だったので、この通りの設定にしているのですが、 ここで http://hostname/kibana にアクセスすると、Login画面にリダイレクトするのですが、 --- ## [Create a Automation Between List API and Github Repo](https://discuss.elastic.co/t/create-a-automation-between-list-api-and-github-repo/267434)
**Author:** [@austinsonger](https://discuss.elastic.co/u/austinsonger)\ **Replies:** 6\ **Last updated:** [March 19, 2021, 4:10am UTC](https://discuss.elastic.co/t/create-a-automation-between-list-api-and-github-repo/267434 "2021-03-19T04:10:29Z")
I want to create a automation using the List API like the image below and a github repo so whenever I update the github repo that it will automatically update the corresponding lists in Elastic. How would I got about t… --- ## [Delete by query not working](https://discuss.elastic.co/t/delete-by-query-not-working/267652)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 4\ **Last updated:** [March 19, 2021, 3:10am UTC](https://discuss.elastic.co/t/delete-by-query-not-working/267652 "2021-03-19T03:10:24Z")
Hi all, I have an index with documents of username : 220987,220388,1218383. I want to delete all documents with username starting with 22. So i used below code: POST /snmp-ser-my-thyalytics-com/\_delete\_by\_query { … --- ## [X-ndjson build request from .NET error](https://discuss.elastic.co/t/x-ndjson-build-request-from-net-error/267681)
**Author:** [@roman.pavliuk](https://discuss.elastic.co/u/roman.pavliuk)\ **Replies:** 1\ **Last updated:** [March 19, 2021, 3:06am UTC](https://discuss.elastic.co/t/x-ndjson-build-request-from-net-error/267681 "2021-03-19T03:06:58Z")
I am sending content-Type/x-ndjson from my .net core app, but I have got error with incorrect header, or 400(bad request) or error below! { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1007) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1009)