# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1045 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1046 --- ## [Elasticsearch does not send logs to filebeat and/or Logstash](https://discuss.elastic.co/t/elasticsearch-does-not-send-logs-to-filebeat-and-or-logstash/264405)
**Author:** [@Royal](https://discuss.elastic.co/u/Royal)\ **Replies:** 11\ **Last updated:** [February 17, 2021, 2:56pm UTC](https://discuss.elastic.co/t/elasticsearch-does-not-send-logs-to-filebeat-and-or-logstash/264405 "2021-02-17T14:56:11Z")
Our situation is as follows: We have a Kubernetes Cluster with a lot of logs piling up. We would like to get a centralized place for the logs to query through. This centralized place is a local VM, which has Elasticsearc… --- ## [Token filter doesn't work on wildcard-search](https://discuss.elastic.co/t/token-filter-doesnt-work-on-wildcard-search/264588)
**Author:** [@TallGuru](https://discuss.elastic.co/u/TallGuru)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 2:31pm UTC](https://discuss.elastic.co/t/token-filter-doesnt-work-on-wildcard-search/264588 "2021-02-17T14:31:07Z")
Hi I'm trying to implement a filter to find compounded words and needs to combine it with wildcard-search but it doesn't work. Example case: There are documents with names "Coca-Cola", "Cocacola" and "Coca Cola". I wa… --- ## [How to not log extra metadata from Logstash to Elasticsearch](https://discuss.elastic.co/t/how-to-not-log-extra-metadata-from-logstash-to-elasticsearch/264524)
**Author:** [@arclinear](https://discuss.elastic.co/u/arclinear)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 1:40pm UTC](https://discuss.elastic.co/t/how-to-not-log-extra-metadata-from-logstash-to-elasticsearch/264524 "2021-02-17T13:40:22Z")
Hello, currently I have a working example of an ELK stack, however, in my indices I do not want to log the following fields : Ideally, in Elasticsearch, I only want to see "message" and "@timestamp", the other 4 is se… --- ## [Data table click event](https://discuss.elastic.co/t/data-table-click-event/264443)
**Author:** [@deeksha39](https://discuss.elastic.co/u/deeksha39)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 1:33pm UTC](https://discuss.elastic.co/t/data-table-click-event/264443 "2021-02-17T13:33:19Z")
Hi Everyone, I want to create a data table from kibana that shows aggregate result based on some categorical columns for e.g. aggregation based on zone, country, the city then show aggregation of numerical data for e.… --- ## [Parse json in string in json (nested json)](https://discuss.elastic.co/t/parse-json-in-string-in-json-nested-json/264569)
**Author:** [@Romanian\_Coder](https://discuss.elastic.co/u/Romanian_Coder)\ **Replies:** 3\ **Last updated:** [February 17, 2021, 1:03pm UTC](https://discuss.elastic.co/t/parse-json-in-string-in-json-nested-json/264569 "2021-02-17T13:03:42Z")
I have next json in input { "partitionId": 3, "value": { "name": "updatedPaymentInfo", "value": "{\\"reference\\":\\"Z091702210000015\\",\\"transactionId\\":\\"CC11702210000020\\",\\"amountDTO\\":{\\"value\\":10000,\\"c… --- ## [Stringo Lab issue - shipping-metrics-data](https://discuss.elastic.co/t/stringo-lab-issue-shipping-metrics-data/264563)
**Author:** [@Bhanu\_Singh](https://discuss.elastic.co/u/Bhanu_Singh)\ **Replies:** 3\ **Last updated:** [February 17, 2021, 12:49pm UTC](https://discuss.elastic.co/t/stringo-lab-issue-shipping-metrics-data/264563 "2021-02-17T12:49:32Z")
Hi, ssh server1 not working. Facing this issue for the last couple of days. I have attached few screenshots. --- ## [org.apache.lucene.store.AlreadyClosedException: this IndexWriter is closed](https://discuss.elastic.co/t/org-apache-lucene-store-alreadyclosedexception-this-indexwriter-is-closed/264551)
**Author:** [@Farzad\_Ebrahimi](https://discuss.elastic.co/u/Farzad_Ebrahimi)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 12:45pm UTC](https://discuss.elastic.co/t/org-apache-lucene-store-alreadyclosedexception-this-indexwriter-is-closed/264551 "2021-02-17T12:45:34Z")
Hi, we are doing single large index creation via java program on single elasticsearch node. after few millions of documents, we faced to this error: org.apache.lucene.store.AlreadyClosedException: this IndexWriter… --- ## [Multinode Cluster](https://discuss.elastic.co/t/multinode-cluster/264557)
**Author:** [@gafoc](https://discuss.elastic.co/u/gafoc)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 12:30pm UTC](https://discuss.elastic.co/t/multinode-cluster/264557 "2021-02-17T12:30:22Z")
Hey can anyone help me setting up multi node cluster on 3 ubuntu machine making 1 as master node and the other two as slave node and injecting the data. --- ## [Lucene Total usage \< Fixed Bitsets usage?](https://discuss.elastic.co/t/lucene-total-usage-fixed-bitsets-usage/264564)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 12:08pm UTC](https://discuss.elastic.co/t/lucene-total-usage-fixed-bitsets-usage/264564 "2021-02-17T12:08:10Z")
When looking at the index memory statistics in Kibana, I currently see this: My question is pretty simple: How come the "Fixed Bitsets" memory usage is bigger than the "Lucene Total" memory usage, even though the for… --- ## [HEAP Memory usage over 90%](https://discuss.elastic.co/t/heap-memory-usage-over-90/264400)
**Author:** [@HammerZEIT](https://discuss.elastic.co/u/HammerZEIT)\ **Replies:** 4\ **Last updated:** [February 17, 2021, 11:46am UTC](https://discuss.elastic.co/t/heap-memory-usage-over-90/264400 "2021-02-17T11:46:04Z")
Hi everyone, I'm facing an issue with the memory usage of ES. We have a 5 nodes cluster to store our logs sent from graylog. I've searching and reading around for a week now I made some change on my configuration but … --- ## [Romanization keyword sorting (specifically Pinyin)](https://discuss.elastic.co/t/romanization-keyword-sorting-specifically-pinyin/264558)
**Author:** [@UserName3](https://discuss.elastic.co/u/UserName3)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 11:23am UTC](https://discuss.elastic.co/t/romanization-keyword-sorting-specifically-pinyin/264558 "2021-02-17T11:23:47Z")
Hi, Is sorting by Romanization, specifically Pinyin supported currently? It should be sorted along other languages with Roman alphabet, so the sorting results should be in an order like this: a, b, C, // ignore case j… --- ## [\[SOLVED\] Whole cluster down after sorting on \_id](https://discuss.elastic.co/t/solved-whole-cluster-down-after-sorting-on-id/264445)
**Author:** [@voharunado](https://discuss.elastic.co/u/voharunado)\ **Replies:** 4\ **Last updated:** [February 17, 2021, 10:28am UTC](https://discuss.elastic.co/t/solved-whole-cluster-down-after-sorting-on-id/264445 "2021-02-17T10:28:31Z")
Hi, I just had a massive issue with my ES prod cluster. I use an ES plugin for IntelliJ IDE that allows to see search result as a table, which can be ordered by clicking on the columns: it then add a sort parameter corr… --- ## [Persistent queue Issue on logstash](https://discuss.elastic.co/t/persistent-queue-issue-on-logstash/264546)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 10:10am UTC](https://discuss.elastic.co/t/persistent-queue-issue-on-logstash/264546 "2021-02-17T10:10:12Z")
We have three logstash nodes to collect log in parallel. All three logstash have 6 output pipelines and 1 intake pipeline. After i try to enable persistent queue on one of the logstash, no matter how little the queue\_max… --- ## [Multiple Elapsed](https://discuss.elastic.co/t/multiple-elapsed/264459)
**Author:** [@artobstrel](https://discuss.elastic.co/u/artobstrel)\ **Replies:** 2\ **Last updated:** [February 17, 2021, 10:05am UTC](https://discuss.elastic.co/t/multiple-elapsed/264459 "2021-02-17T10:05:11Z")
I want to measure the duration of several events within a single transaction. I use a elapsed filter for this. My data and logstash config file is below: data file2021-02-16 16:00:00 016cbeb4 Input 2021-02-16 1… --- ## [Ingress Could not find the endpoints](https://discuss.elastic.co/t/ingress-could-not-find-the-endpoints/264238)
**Author:** [@Ahmed\_Abdulaleem](https://discuss.elastic.co/u/Ahmed_Abdulaleem)\ **Replies:** 2\ **Last updated:** [February 16, 2021, 1:32pm UTC](https://discuss.elastic.co/t/ingress-could-not-find-the-endpoints/264238 "2021-02-16T13:32:17Z")
I installed Elasticsearch with helm and nginx-ingress as nginx controller I added the ingress like that but when I check the ingress found this error why ingress resource could not find the endpoints --- ## [NEST Client - Mapping, aggregations, search for dynamic properties/attributes of a model](https://discuss.elastic.co/t/nest-client-mapping-aggregations-search-for-dynamic-properties-attributes-of-a-model/264544)
**Author:** [@krishnapss](https://discuss.elastic.co/u/krishnapss)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 9:44am UTC](https://discuss.elastic.co/t/nest-client-mapping-aggregations-search-for-dynamic-properties-attributes-of-a-model/264544 "2021-02-17T09:44:34Z")
Hi, Could someone please help me to solve this problem. We are trying to integrate elasticsearch in our project using NEST Client. For our project we will have different schema per customer or product. e.g. cars, boo… --- ## [Kibana run very slow in mozilla firefox](https://discuss.elastic.co/t/kibana-run-very-slow-in-mozilla-firefox/264521)
**Author:** [@radragar](https://discuss.elastic.co/u/radragar)\ **Replies:** 2\ **Last updated:** [February 17, 2021, 8:43am UTC](https://discuss.elastic.co/t/kibana-run-very-slow-in-mozilla-firefox/264521 "2021-02-17T08:43:22Z")
Hello, Im try install kibana in production environment, with 3 node elasticsearch. 1 master and 2 datanode. but when im running kibana in mozilla firefox, its running very slow. how kibana running very slow in mozilla… --- ## [Java API ping operation hangs the application on Elasticsearch 7.11.0](https://discuss.elastic.co/t/java-api-ping-operation-hangs-the-application-on-elasticsearch-7-11-0/264351)
**Author:** [@marcgise](https://discuss.elastic.co/u/marcgise)\ **Replies:** 20\ **Last updated:** [February 17, 2021, 8:23am UTC](https://discuss.elastic.co/t/java-api-ping-operation-hangs-the-application-on-elasticsearch-7-11-0/264351 "2021-02-17T08:23:12Z")
I have 3 Java applications (using RestHighLevelClient 7.11.0 client API) connected to the same ElasticSearch server version 7.11.0, and periodically I check the connection to ElasticSearch with ping operation, using clie… --- ## [Get the filtered response in Elasticsearch cat APIs](https://discuss.elastic.co/t/get-the-filtered-response-in-elasticsearch-cat-apis/264522)
**Author:** [@bhavya](https://discuss.elastic.co/u/bhavya)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 7:36am UTC](https://discuss.elastic.co/t/get-the-filtered-response-in-elasticsearch-cat-apis/264522 "2021-02-17T07:36:05Z")
I am planning to get the information of all the primary shards in my ES cluster using \_cat/shards API, but I don't see any option to get only the primary shards in the API response, I tried using prirep:p in the h=index,… --- ## [Incorrect type of field in index from Logstash, why?](https://discuss.elastic.co/t/incorrect-type-of-field-in-index-from-logstash-why/264335)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 8\ **Last updated:** [February 17, 2021, 6:10am UTC](https://discuss.elastic.co/t/incorrect-type-of-field-in-index-from-logstash-why/264335 "2021-02-17T06:10:37Z")
Dears, I loading tomcat logs to Elastic. My logstash config include such grok pattern: if "tomcat" in \[tags\] { grok { match =\> \["message", "%{IPV4} (?:-|%{USER:ident}) (?:-|%{USER:auth}) \\\[%{HTTPDATE:timesta… --- ## [X-pack for Logstash](https://discuss.elastic.co/t/x-pack-for-logstash/264466)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 3\ **Last updated:** [February 17, 2021, 5:50am UTC](https://discuss.elastic.co/t/x-pack-for-logstash/264466 "2021-02-17T05:50:19Z")
I have enabled the x-pack in my cluster. Now I want to install Logstash on ingest node. Enabling x-pack for Logstash is optional or compulsory? --- ## [Add a node to an existing cluster](https://discuss.elastic.co/t/add-a-node-to-an-existing-cluster/264432)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 3\ **Last updated:** [February 17, 2021, 5:07am UTC](https://discuss.elastic.co/t/add-a-node-to-an-existing-cluster/264432 "2021-02-17T05:07:33Z")
Hello! Can someone please help me with adding a new node to an existing cluster? I get the "Master\_not\_discovered\_exception" and I have tried different solutions such as removing path.data (on node 2) , setting up discov… --- ## [Logstash self restart without error](https://discuss.elastic.co/t/logstash-self-restart-without-error/264501)
**Author:** [@cling1988](https://discuss.elastic.co/u/cling1988)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 4:42am UTC](https://discuss.elastic.co/t/logstash-self-restart-without-error/264501 "2021-02-17T04:42:52Z")
After a few days I upgrade the Logstash from 7.4 to Logstash 7.10.1, the Logstash kill itself and restart. I only can found the log in journalctl -u logstash.service Feb 16 03:44:23 xxx systemd\[1\]: logstash.service: ma… --- ## [Unable to find source.geo.location in index pattern logstash-\*](https://discuss.elastic.co/t/unable-to-find-source-geo-location-in-index-pattern-logstash/264496)
**Author:** [@Ronnie\_Raraihuru](https://discuss.elastic.co/u/Ronnie_Raraihuru)\ **Replies:** 4\ **Last updated:** [February 17, 2021, 1:53am UTC](https://discuss.elastic.co/t/unable-to-find-source-geo-location-in-index-pattern-logstash/264496 "2021-02-17T01:53:42Z")
Got the above error when trying to view map under Security\>Network in Elastic. Index mapping "mappings" : { "geoip" : { "dynamic" : "true", "properties" : { "city\_name" : { … --- ## [Match multiple 4 digit numbers in field](https://discuss.elastic.co/t/match-multiple-4-digit-numbers-in-field/264494)
**Author:** [@Deny7](https://discuss.elastic.co/u/Deny7)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 12:28am UTC](https://discuss.elastic.co/t/match-multiple-4-digit-numbers-in-field/264494 "2021-02-17T00:28:35Z")
I need to match only 4 digit number from field "created:". If there are multiple 4 digit numbers I need to take the biggest and save it back to the field. The problem is that the field can contain strings, dashes, dots, … --- ## [Unable to see any data in Consumer Partition Reassignments visualization for \[Metricbeat Kafka\] dashboard in kibana](https://discuss.elastic.co/t/unable-to-see-any-data-in-consumer-partition-reassignments-visualization-for-metricbeat-kafka-dashboard-in-kibana/264489)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 0\ **Last updated:** [February 16, 2021, 10:30pm UTC](https://discuss.elastic.co/t/unable-to-see-any-data-in-consumer-partition-reassignments-visualization-for-metricbeat-kafka-dashboard-in-kibana/264489 "2021-02-16T22:30:02Z")
I am unable to see any data in the Consumer Partition Reassignments visualization in \[Metricbeat Kafka\] dashboard in kibana. My configuration for the kafka module that I have written in metricbeat.yml is given below: - … --- ## [Security scans report version of Jackson-dataformat-cobr 2.10.4](https://discuss.elastic.co/t/security-scans-report-version-of-jackson-dataformat-cobr-2-10-4/264439)
**Author:** [@avifmontier](https://discuss.elastic.co/u/avifmontier)\ **Replies:** 1\ **Last updated:** [February 16, 2021, 9:46pm UTC](https://discuss.elastic.co/t/security-scans-report-version-of-jackson-dataformat-cobr-2-10-4/264439 "2021-02-16T21:46:02Z")
Jackson-dataformat-cobr 2.10.4 used by elasticsearch-x-content 7.9.x seems to have security issues: CVE-2020-28491 CVE-2020-25649 Those issue seems to be fixed in later version of Jackson. Is there an intention to up… --- ## [A JSON array consists of objects - how to deal with?](https://discuss.elastic.co/t/a-json-array-consists-of-objects-how-to-deal-with/264464)
**Author:** [@awer1967](https://discuss.elastic.co/u/awer1967)\ **Replies:** 5\ **Last updated:** [February 16, 2021, 9:33pm UTC](https://discuss.elastic.co/t/a-json-array-consists-of-objects-how-to-deal-with/264464 "2021-02-16T21:33:42Z")
Hi ! I strongly apologize for a possibly stupid, kinda "it-has-been-asked-a-lot-of-time", question. Nevertheless I have to ask for help because I have completely stuck with . So that I have a JSON array consist of ob… --- ## [Update Aliases API](https://discuss.elastic.co/t/update-aliases-api/264369)
**Author:** [@Oscar\_Lopez](https://discuss.elastic.co/u/Oscar_Lopez)\ **Replies:** 5\ **Last updated:** [February 16, 2021, 9:19pm UTC](https://discuss.elastic.co/t/update-aliases-api/264369 "2021-02-16T21:19:56Z")
I have an index\_pattern called metricbeat- \* which I create an alias called alias\_metricbeat. Through the elasticsearch API I want to condition so that certain users do not perform filters of more than three months in th… --- ## [Enterprise ECE vs ECK](https://discuss.elastic.co/t/enterprise-ece-vs-eck/264484)
**Author:** [@jhegarty](https://discuss.elastic.co/u/jhegarty)\ **Replies:** 1\ **Last updated:** [February 16, 2021, 8:47pm UTC](https://discuss.elastic.co/t/enterprise-ece-vs-eck/264484 "2021-02-16T20:47:43Z")
I'm part of a team investigating the possibility of moving our Elasticsearch instances onto ECK, but there are a couple questions we haven't been able to answer after reading the documentation. We're currently using ECE … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1044) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1046)