# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1036 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1037 --- ## [7.11 APIs who don't need a body now return an error when provided with one](https://discuss.elastic.co/t/7-11-apis-who-dont-need-a-body-now-return-an-error-when-provided-with-one/265324)
**Author:** [@Malec](https://discuss.elastic.co/u/Malec)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 1:34pm UTC](https://discuss.elastic.co/t/7-11-apis-who-dont-need-a-body-now-return-an-error-when-provided-with-one/265324 "2021-02-24T13:34:57Z")
Hi, I have been upgrading one of my clusters to 7.11.1 and much to my surprise there is a behavior change that I haven't been able to find in the breaking changes or in the "what's new" page for this release. GET \_cat/… --- ## [Logstash doesn't parse logs if i don't define start\_position](https://discuss.elastic.co/t/logstash-doesnt-parse-logs-if-i-dont-define-start-position/265329)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 1:22pm UTC](https://discuss.elastic.co/t/logstash-doesnt-parse-logs-if-i-dont-define-start-position/265329 "2021-02-24T13:22:06Z")
Below is my code. When I try to run this pipeline. Pipeline is starting but not parsing the logs. I have deleted .sincedb files at (data/plugins/inputs/file). input { file { path =\> ".../directory/\*.log" … --- ## [XML Filter example](https://discuss.elastic.co/t/xml-filter-example/264698)
**Author:** [@Rabin\_Bhattacharya](https://discuss.elastic.co/u/Rabin_Bhattacharya)\ **Replies:** 4\ **Last updated:** [February 24, 2021, 1:20pm UTC](https://discuss.elastic.co/t/xml-filter-example/264698 "2021-02-24T13:20:23Z")
Hi, I have a requirement where in the a XML message is picked up from TIBCO EMS with the help of logstash and then is viewed in Kibana. I want to parse this message element individually for example conversationid,eventi… --- ## [Update data](https://discuss.elastic.co/t/update-data/265339)
**Author:** [@Liliana\_Novais](https://discuss.elastic.co/u/Liliana_Novais)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 12:56pm UTC](https://discuss.elastic.co/t/update-data/265339 "2021-02-24T12:56:41Z")
Hello, I am new in elastic search. I have a csv file that I want to upload to elastic search in order to use in kibana. The file is saved in my laptop and I want to update the data. I am not the administrator of the la… --- ## [Query related logs that contain a keyword](https://discuss.elastic.co/t/query-related-logs-that-contain-a-keyword/264529)
**Author:** [@dandrejvv](https://discuss.elastic.co/u/dandrejvv)\ **Replies:** 6\ **Last updated:** [February 24, 2021, 12:44pm UTC](https://discuss.elastic.co/t/query-related-logs-that-contain-a-keyword/264529 "2021-02-24T12:44:14Z")
I have a need to query the logs in Elasticsearch through Kibana in a certain way that I will explain soon. I'll try my best to explain what I'm looking for and hopefully someone can tell me if it is possible via Kibana o… --- ## [Failed to parse mapping \[\_doc\]: properties must be a map type](https://discuss.elastic.co/t/failed-to-parse-mapping-doc-properties-must-be-a-map-type/263103)
**Author:** [@coudenysj](https://discuss.elastic.co/u/coudenysj)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 12:35pm UTC](https://discuss.elastic.co/t/failed-to-parse-mapping-doc-properties-must-be-a-map-type/263103 "2021-02-24T12:35:56Z")
I'm trying to update the routing allocation of index templates, but with the new 7.10 release, I get strange errors. For the other version, I just GET the index template, alter the routing key, and PUT it back to the AP… --- ## [Can not restart logstash service after configured syslog.conf](https://discuss.elastic.co/t/can-not-restart-logstash-service-after-configured-syslog-conf/265335)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 12:03pm UTC](https://discuss.elastic.co/t/can-not-restart-logstash-service-after-configured-syslog-conf/265335 "2021-02-24T12:03:28Z")
I was able to install logstash on the ubuntu server. Then I configued the syslog.conf file to get the traffic to elasticsearch(installed in same server). Then tried to restart the logstash service, but unable to restar… --- ## [How can i read logs event in logstash from siem system?](https://discuss.elastic.co/t/how-can-i-read-logs-event-in-logstash-from-siem-system/265151)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 11:20am UTC](https://discuss.elastic.co/t/how-can-i-read-logs-event-in-logstash-from-siem-system/265151 "2021-02-24T11:20:30Z")
How can i read logs from siem system in logstash? --- ## [Kibana Error](https://discuss.elastic.co/t/kibana-error/265243)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 10:32am UTC](https://discuss.elastic.co/t/kibana-error/265243 "2021-02-24T10:32:44Z")
Hello!!! please i have a follow Error in Kibana controls. i resolve it like but i have the same info.. how i can resolve it --- ## [org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin\]](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-java-lang-illegalstateexception-failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/265319)
**Author:** [@karthik\_m2](https://discuss.elastic.co/u/karthik_m2)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 10:31am UTC](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-java-lang-illegalstateexception-failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/265319 "2021-02-24T10:31:31Z")
Hello Team, We have recently upgraded oracle JAVA version to below java version "1.8.0\_281" Java(TM) SE Runtime Environment (build 1.8.0\_281-b09) Java HotSpot(TM) 64-Bit Server VM (build 25.281-b09, mixed mode) Afte… --- ## [Reverse geo distance search](https://discuss.elastic.co/t/reverse-geo-distance-search/263524)
**Author:** [@Fatih\_Kurnaz](https://discuss.elastic.co/u/Fatih_Kurnaz)\ **Replies:** 9\ **Last updated:** [February 24, 2021, 10:30am UTC](https://discuss.elastic.co/t/reverse-geo-distance-search/263524 "2021-02-24T10:30:34Z")
Hi everyone; There are 2 indices at my system. One of them is people and another one is houses. There is location criteria for each person at people indice like this. { "locationName": "london", "distance": 1,… --- ## [How to uninstall Logstash](https://discuss.elastic.co/t/how-to-uninstall-logstash/265280)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 10:20am UTC](https://discuss.elastic.co/t/how-to-uninstall-logstash/265280 "2021-02-24T10:20:10Z")
I want to know how to uninstall Logstash in the Ubuntu server? --- ## [Heap usage of suggestor field](https://discuss.elastic.co/t/heap-usage-of-suggestor-field/265312)
**Author:** [@JF2018](https://discuss.elastic.co/u/JF2018)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 9:59am UTC](https://discuss.elastic.co/t/heap-usage-of-suggestor-field/265312 "2021-02-24T09:59:17Z")
Hi I am using Elastic Version "7.5.2". I would like to know how much of the heap, my completion suggestor field takes. The mapping is as this { "type": "completion", "pres… --- ## [How to make a field hold an array, and how to put values in there, and how to loop through an array?](https://discuss.elastic.co/t/how-to-make-a-field-hold-an-array-and-how-to-put-values-in-there-and-how-to-loop-through-an-array/265311)
**Author:** [@Khalil\_SLEIMI](https://discuss.elastic.co/u/Khalil_SLEIMI)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 9:46am UTC](https://discuss.elastic.co/t/how-to-make-a-field-hold-an-array-and-how-to-put-values-in-there-and-how-to-loop-through-an-array/265311 "2021-02-24T09:46:39Z")
Hi there, I'm new to the elk stack, and want some advice concerning how to manipulate json objects. long story short, I have a json that I extracted from an xml, and now, want to change the json of the output, that's why… --- ## [Filebeat Logstash Module](https://discuss.elastic.co/t/filebeat-logstash-module/265297)
**Author:** [@radu990](https://discuss.elastic.co/u/radu990)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 9:13am UTC](https://discuss.elastic.co/t/filebeat-logstash-module/265297 "2021-02-24T09:13:54Z")
Hi guys, I'm trying to add a log to Logstash module in Filebeat, but can't succeed. Can anybody please give me some hint what's wrong in my config? Example of Log Entry 2021-02-23T12:44:49.000Z,Warning,1 2021-02-23T1… --- ## [Is it possible to sort a field that contains a hexadecimal string?](https://discuss.elastic.co/t/is-it-possible-to-sort-a-field-that-contains-a-hexadecimal-string/265295)
**Author:** [@htang](https://discuss.elastic.co/u/htang)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 9:08am UTC](https://discuss.elastic.co/t/is-it-possible-to-sort-a-field-that-contains-a-hexadecimal-string/265295 "2021-02-24T09:08:46Z")
I have a mapping as keyword which contains a hexadecimal string like: 5f4b455cf6b841508fb1fa24 which is a 12 byte object. Is it possible to ask ES to sort on this field by value? I don't want lexicographic order. Fo… --- ## [Index Pattern refresh](https://discuss.elastic.co/t/index-pattern-refresh/264760)
**Author:** [@UniverseX](https://discuss.elastic.co/u/UniverseX)\ **Replies:** 4\ **Last updated:** [February 24, 2021, 8:05am UTC](https://discuss.elastic.co/t/index-pattern-refresh/264760 "2021-02-24T08:05:36Z")
It seems that with 7.11 release the Index Pattern refresh functionality has been replaced. However, I can't find anything in the manual, it seems still to be the old one where Refresh button was on the page. Could someon… --- ## [Search through all document fields (nested and root document) in one multi match query](https://discuss.elastic.co/t/search-through-all-document-fields-nested-and-root-document-in-one-multi-match-query/265180)
**Author:** [@Nexonus](https://discuss.elastic.co/u/Nexonus)\ **Replies:** 3\ **Last updated:** [February 23, 2021, 3:21pm UTC](https://discuss.elastic.co/t/search-through-all-document-fields-nested-and-root-document-in-one-multi-match-query/265180 "2021-02-23T15:21:22Z")
Let's assume these basic documents as an example: { "name": "shirt", "description": "with stripes", "items": \[ { "color": "red", "size": "44" }, { "color": "blue", "size": "38" … --- ## [Kibana doesn\`t start](https://discuss.elastic.co/t/kibana-doesn-t-start/265206)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 7:34am UTC](https://discuss.elastic.co/t/kibana-doesn-t-start/265206 "2021-02-24T07:34:04Z")
Hi I want to run a Kibana in my cluster but faced with a problem and can not run it. When I use service kibana start or systemctl start kibana , it seems to be ok and kibana is running and also the port 5601 is listen… --- ## [Setup well know user / roles / credentials on cluster setup](https://discuss.elastic.co/t/setup-well-know-user-roles-credentials-on-cluster-setup/265218)
**Author:** [@Aiqu4poo](https://discuss.elastic.co/u/Aiqu4poo)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 7:23am UTC](https://discuss.elastic.co/t/setup-well-know-user-roles-credentials-on-cluster-setup/265218 "2021-02-24T07:23:18Z")
I set up a cluster by using Elastic Cloud on Kubernetes. I want t provide our predefined custom users / roles as well as predefined credentials for the elastic user. Setup the password for the elastic user by providing… --- ## [Is it good that memory usage is high like over 90%?](https://discuss.elastic.co/t/is-it-good-that-memory-usage-is-high-like-over-90/265144)
**Author:** [@CHU\_XU](https://discuss.elastic.co/u/CHU_XU)\ **Replies:** 5\ **Last updated:** [February 24, 2021, 6:10am UTC](https://discuss.elastic.co/t/is-it-good-that-memory-usage-is-high-like-over-90/265144 "2021-02-24T06:10:42Z")
Hi experts, I know that es node uses memory both for jvm and file cache. If I have an node with 50GB memory and set jvm using 25GB, is that expected when the total memory usage is high like 48GB and never go down? Will… --- ## [Suggestions for a better text based query - using match\_phrase but it's too precise](https://discuss.elastic.co/t/suggestions-for-a-better-text-based-query-using-match-phrase-but-its-too-precise/265138)
**Author:** [@M\_Gibbs](https://discuss.elastic.co/u/M_Gibbs)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 5:36am UTC](https://discuss.elastic.co/t/suggestions-for-a-better-text-based-query-using-match-phrase-but-its-too-precise/265138 "2021-02-24T05:36:24Z")
Hi there, My title probably doesn't elaborate that well. We have a significant dataset, where our end-users can search base don a job\_title. Currently I'm using: bool should match\_phrase We also include "minimum\_s… --- ## [Unable to index with below error](https://discuss.elastic.co/t/unable-to-index-with-below-error/265277)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 5:21am UTC](https://discuss.elastic.co/t/unable-to-index-with-below-error/265277 "2021-02-24T05:21:42Z")
Hi Team, I am facing an error while ingesting logs in elasticsearch. \[2021-02-24T10:44:15,640\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[69d9e547a776f45c4f2e9d8533dceb1247bd41e30f7abf5602145295741669ba\] Could not in… --- ## [Elastic Search - how to interpret this exception](https://discuss.elastic.co/t/elastic-search-how-to-interpret-this-exception/265273)
**Author:** [@nages](https://discuss.elastic.co/u/nages)\ **Replies:** 0\ **Last updated:** [February 24, 2021, 4:00am UTC](https://discuss.elastic.co/t/elastic-search-how-to-interpret-this-exception/265273 "2021-02-24T04:00:24Z")
This is the code I am running and it is missing custom analyzer name . And I got the following error { "error": { "root\_cause": \[ { "type": "settings\_exception", "reason": "Failed to get sett… --- ## [Alias-Dashboard/Visualizations-Cold indicies-Errors](https://discuss.elastic.co/t/alias-dashboard-visualizations-cold-indicies-errors/265251)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 1\ **Last updated:** [February 23, 2021, 8:41pm UTC](https://discuss.elastic.co/t/alias-dashboard-visualizations-cold-indicies-errors/265251 "2021-02-23T20:41:44Z")
We have an index pattern: search-ids. That index pattern is mapped for: ids-alert-\* We recently closed and froze indices that were not being searched. Since our index pattern encompasses every single index- it keeps l… --- ## [Converting Duration Field From Text To Number](https://discuss.elastic.co/t/converting-duration-field-from-text-to-number/265255)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 3\ **Last updated:** [February 23, 2021, 10:35pm UTC](https://discuss.elastic.co/t/converting-duration-field-from-text-to-number/265255 "2021-02-23T22:35:49Z")
I have a field that displays connection duration as a string that looks like 3h:49m:57s. Any ideas on how to convert this to an aggregateable format such as epoch time or something? --- ## [Cluster business usage](https://discuss.elastic.co/t/cluster-business-usage/265005)
**Author:** [@fha\_1](https://discuss.elastic.co/u/fha_1)\ **Replies:** 3\ **Last updated:** [February 23, 2021, 9:22pm UTC](https://discuss.elastic.co/t/cluster-business-usage/265005 "2021-02-23T21:22:52Z")
Hello, Is there a built-in way to retrieve the most requested documents and the most frequent queries and aggregations (for a cluster and for an index)? If not, what is the best approach to fill this need? Regards F --- ## [Grok Timestamp](https://discuss.elastic.co/t/grok-timestamp/265236)
**Author:** [@Alex\_Leong](https://discuss.elastic.co/u/Alex_Leong)\ **Replies:** 1\ **Last updated:** [February 23, 2021, 7:13pm UTC](https://discuss.elastic.co/t/grok-timestamp/265236 "2021-02-23T19:13:17Z")
I have sample log as follows, and trying to grok it so that the timestamp is in the format YYYY-MM-DD HH:MI:SS.ssssss. Hence the timestamp "0204 14:29:42.248281" becomes "2021-02-04 14:29:42.24828" Sample log : E0204… --- ## [JSON Parsing Issue](https://discuss.elastic.co/t/json-parsing-issue/265219)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 4\ **Last updated:** [February 23, 2021, 6:54pm UTC](https://discuss.elastic.co/t/json-parsing-issue/265219 "2021-02-23T18:54:13Z")
Running Logstash 7.10 and having an issue with parsing a JSON-ish field. Here's my filter config: if \[vpn\]\[tunnel\_type\] { mutate { gsub =\> \[ "\[vpn\]\[tunnel\_type\]", '\\=\\\>', ':' \] … --- ## [Sum bucket of filters no longer works in kibana 7.11](https://discuss.elastic.co/t/sum-bucket-of-filters-no-longer-works-in-kibana-7-11/265207)
**Author:** [@Matthew\_Field](https://discuss.elastic.co/u/Matthew_Field)\ **Replies:** 5\ **Last updated:** [February 23, 2021, 6:28pm UTC](https://discuss.elastic.co/t/sum-bucket-of-filters-no-longer-works-in-kibana-7-11/265207 "2021-02-23T18:28:40Z")
Since upgrading to kibana 7.11 my sibling sum bucket aggregations no longer work. Following upgrade the visualisations that were previously working were all blank. I am trying now to recreate the same visualisations as… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1035) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1037)