# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1047 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1048 --- ## [Unable to start elasticsearch](https://discuss.elastic.co/t/unable-to-start-elasticsearch/264313)
**Author:** [@Aniket\_Salvi](https://discuss.elastic.co/u/Aniket_Salvi)\ **Replies:** 2\ **Last updated:** [February 16, 2021, 5:51am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch/264313 "2021-02-16T05:51:34Z")
Hi, I am unable to start Elasticsearch on docker. Refer following screenshot for error. Can anyone help me to solve this error. Elasticsearch version - 6.4.3 Thanks --- ## [Transform Hour and date](https://discuss.elastic.co/t/transform-hour-and-date/264347)
**Author:** [@Jelssy\_Pomar\_Alvan](https://discuss.elastic.co/u/Jelssy_Pomar_Alvan)\ **Replies:** 3\ **Last updated:** [February 16, 2021, 5:13am UTC](https://discuss.elastic.co/t/transform-hour-and-date/264347 "2021-02-16T05:13:39Z")
Hello, I am new to Kibana, I have a Table with 2 columns (dateini and date end) with format "dd / mm / yyyy hh: mm: ss". I need to change this format to "hh: mm: ss" and then do a subtraction of these 2 fields and displa… --- ## [Formato de Hora y Fecha](https://discuss.elastic.co/t/formato-de-hora-y-fecha/264346)
**Author:** [@Jelssy\_Pomar\_Alvan](https://discuss.elastic.co/u/Jelssy_Pomar_Alvan)\ **Replies:** 1\ **Last updated:** [February 16, 2021, 4:55am UTC](https://discuss.elastic.co/t/formato-de-hora-y-fecha/264346 "2021-02-16T04:55:44Z")
Hola, soy nueva en Kibana, tengo una Tabla con 2 columnas (fechaini y fechafin) con formato "dd/mm/yyyy hh:mm:ss" . Necesito cambiar este formato a "hh:mm:ss" y luego hacer una resta de estos 2 campos. Por ejemplo: 19:… --- ## [Creating a visualization for Top CPU hits over last 24 hours](https://discuss.elastic.co/t/creating-a-visualization-for-top-cpu-hits-over-last-24-hours/264374)
**Author:** [@kamal\_thapa](https://discuss.elastic.co/u/kamal_thapa)\ **Replies:** 4\ **Last updated:** [February 16, 2021, 4:23am UTC](https://discuss.elastic.co/t/creating-a-visualization-for-top-cpu-hits-over-last-24-hours/264374 "2021-02-16T04:23:33Z")
Hello, I am new to Elasticsearch. We have 50 servers to monitor and It is essential for us to find the top CPU hits over last 24 hours. The diagram should show the top CPU hit with timestamp. What visualization would be … --- ## [Syslog output date format](https://discuss.elastic.co/t/syslog-output-date-format/264366)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 7\ **Last updated:** [February 16, 2021, 3:38am UTC](https://discuss.elastic.co/t/syslog-output-date-format/264366 "2021-02-16T03:38:39Z")
Hi, I am running Windows logs successfully to our SIEM using a kafka input and a logstash syslog output. The logs are parsing perfectly in the SIEM. When running a virtually identical pipeline to poll a different topi… --- ## [LogStash::ConfigurationError", :message=\>"Expected one of \[A-Za-z0-9\_-\]](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of-a-za-z0-9/264315)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 15\ **Last updated:** [February 16, 2021, 3:27am UTC](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of-a-za-z0-9/264315 "2021-02-16T03:27:30Z")
Hi Guys, Good Day!! I am facing the issue while staring the logstash. LogStash::ConfigurationError", :message=\>"Expected one of \[A-Za-z0-9\_-\] \[ \\t\\r\\n\], "#", "{", \[A-Za-z0-9\_\], "}" at line 49, column 31 (byte 1290) af… --- ## [Understanding implications of \`index: false\` with \`type: keyword\`](https://discuss.elastic.co/t/understanding-implications-of-index-false-with-type-keyword/264352)
**Author:** [@workmanw](https://discuss.elastic.co/u/workmanw)\ **Replies:** 3\ **Last updated:** [February 16, 2021, 1:14am UTC](https://discuss.elastic.co/t/understanding-implications-of-index-false-with-type-keyword/264352 "2021-02-16T01:14:37Z")
Hello, I have a pretty simple use case that has been discussed at length on this forum, I'm storing a large block of text that I just want to reside in my source document, not be indexed at all. Originally this field wa… --- ## [Recommanded setting for 3 nodes elasticsearch](https://discuss.elastic.co/t/recommanded-setting-for-3-nodes-elasticsearch/264293)
**Author:** [@nawanop-AMNB](https://discuss.elastic.co/u/nawanop-AMNB)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 10:42pm UTC](https://discuss.elastic.co/t/recommanded-setting-for-3-nodes-elasticsearch/264293 "2021-02-15T22:42:24Z")
I'm new at elasticsearch , so I need some advice to build 3 nodes elasticsearch on small production which can handle about 2-3 tps when it peaks option 1: 3 nodes 1.1 node 1: - master: true - data: false - RAM 4 GB … --- ## [Elasticsearch-certutil http](https://discuss.elastic.co/t/elasticsearch-certutil-http/264341)
**Author:** [@Abdullah\_Al-Mansour](https://discuss.elastic.co/u/Abdullah_Al-Mansour)\ **Replies:** 2\ **Last updated:** [February 15, 2021, 10:42pm UTC](https://discuss.elastic.co/t/elasticsearch-certutil-http/264341 "2021-02-15T22:42:02Z")
License: Basic OS: Windows10 & Windows Server 2016 version: elasticsearch 7.2.0 Issue: elasticsearch-certutil does not contain the HTTP option. Attempts to enter elasticsearch-certutil http on the commandline fail wit… --- ## [Cluster Rebalancing](https://discuss.elastic.co/t/cluster-rebalancing/264303)
**Author:** [@cwiechmann](https://discuss.elastic.co/u/cwiechmann)\ **Replies:** 2\ **Last updated:** [February 15, 2021, 10:40pm UTC](https://discuss.elastic.co/t/cluster-rebalancing/264303 "2021-02-15T22:40:17Z")
Hi All, I'm using ILM policies and as part of the Warm-Phase indices should be shrinked. As you know, for that all of the shards of an index must be reallocated to a single node, which unfortunately quite often fails. I… --- ## [How do I check what causing high JVM?](https://discuss.elastic.co/t/how-do-i-check-what-causing-high-jvm/264118)
**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\ **Replies:** 4\ **Last updated:** [February 15, 2021, 10:35pm UTC](https://discuss.elastic.co/t/how-do-i-check-what-causing-high-jvm/264118 "2021-02-15T22:35:58Z")
Hi, We have been having some heavy load on our system, but I am not exactly sure what causing them. Just wondering is there a way to check what have caused the high JVM load in our system. I know the high JVM load can b… --- ## [ECK on AWS EKS: Readiness probe failed when using ingress and nodeport for es](https://discuss.elastic.co/t/eck-on-aws-eks-readiness-probe-failed-when-using-ingress-and-nodeport-for-es/264354)
**Author:** [@vinnar](https://discuss.elastic.co/u/vinnar)\ **Replies:** 0\ **Last updated:** [February 15, 2021, 7:51pm UTC](https://discuss.elastic.co/t/eck-on-aws-eks-readiness-probe-failed-when-using-ingress-and-nodeport-for-es/264354 "2021-02-15T19:51:58Z")
Hi Guys, I am trying to setup an elastic-kibana stack on EKS, starting with the quickstart template and then making changes incrementally to make it more suitable for the environment. For the es, I started with the Clu… --- ## [Grok timestamp (can't match pattern)](https://discuss.elastic.co/t/grok-timestamp-cant-match-pattern/263816)
**Author:** [@Frankie\_Braybon](https://discuss.elastic.co/u/Frankie_Braybon)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 8:35pm UTC](https://discuss.elastic.co/t/grok-timestamp-cant-match-pattern/263816 "2021-02-15T20:35:24Z")
The log line I am trying to make patterns on: Sent from filebeat to logstash. \[Log Level- \[1\],\[2021-01-05 15:19:28:410 GMT+0000\], Thread ID: -858872064 HEALTH CHECK STATUS : 0, HealthCheck/Src/HealthCheckManager.cpp,… --- ## [How to set Kibana Discover startpage to do 'nothing'](https://discuss.elastic.co/t/how-to-set-kibana-discover-startpage-to-do-nothing/264334)
**Author:** [@DanielV](https://discuss.elastic.co/u/DanielV)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 7:54pm UTC](https://discuss.elastic.co/t/how-to-set-kibana-discover-startpage-to-do-nothing/264334 "2021-02-15T19:54:03Z")
My company's Kibana startpage is "Discover". By default no index is selected. Default timeframe is now - 15m. Some users complain that it takes long to load the first page. It takes about 21 seconds for this default que… --- ## [Kibana error - more issues found during setup](https://discuss.elastic.co/t/kibana-error-more-issues-found-during-setup/264125)
**Author:** [@rubans](https://discuss.elastic.co/u/rubans)\ **Replies:** 3\ **Last updated:** [February 15, 2021, 7:46pm UTC](https://discuss.elastic.co/t/kibana-error-more-issues-found-during-setup/264125 "2021-02-15T19:46:46Z")
Using Kibana: v7.10.2 ElasticSearch:7.10.2 When trying to create an Index, I go to the indices option on Index Management page and get the following error: Error Loading indices Cannot read property 'aliases' of unde… --- ## [Kibana shows browser compatibity issue](https://discuss.elastic.co/t/kibana-shows-browser-compatibity-issue/264252)
**Author:** [@Dhamodharan](https://discuss.elastic.co/u/Dhamodharan)\ **Replies:** 4\ **Last updated:** [February 15, 2021, 7:37pm UTC](https://discuss.elastic.co/t/kibana-shows-browser-compatibity-issue/264252 "2021-02-15T19:37:34Z")
My kibana is running on ubuntu box and properly configured the kibana.yml, but when i browse the UI, it shows your browser does not meet the security requirements for kibana My browser is already latest version. Can som… --- ## [Self-healing alerts in Kibana Alerts](https://discuss.elastic.co/t/self-healing-alerts-in-kibana-alerts/264350)
**Author:** [@slord](https://discuss.elastic.co/u/slord)\ **Replies:** 3\ **Last updated:** [February 15, 2021, 7:14pm UTC](https://discuss.elastic.co/t/self-healing-alerts-in-kibana-alerts/264350 "2021-02-15T19:14:32Z")
I'm using the Index action in Kibana Alerts, and I've got a metric threshold alert. I want to have something in the index to say when an alert is resolved - I've tried adding {{context.alertState}} to the payload but th… --- ## [Geo\_point in logstash](https://discuss.elastic.co/t/geo-point-in-logstash/264240)
**Author:** [@MABN](https://discuss.elastic.co/u/MABN)\ **Replies:** 2\ **Last updated:** [February 15, 2021, 7:05pm UTC](https://discuss.elastic.co/t/geo-point-in-logstash/264240 "2021-02-15T19:05:45Z")
Hi I used syslog to send log to logstash ( logstash 7.10) I used this grok in logstash.conf ##################### geoip { source =\> "source.ip" target =\> "source.geo" } geoip { source =\> "destination.ip" target… --- ## [Ingest-converter not mapping some fields properly?](https://discuss.elastic.co/t/ingest-converter-not-mapping-some-fields-properly/263644)
**Author:** [@Daniel314](https://discuss.elastic.co/u/Daniel314)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 6:54pm UTC](https://discuss.elastic.co/t/ingest-converter-not-mapping-some-fields-properly/263644 "2021-02-15T18:54:45Z")
Background: at my organization, we heavily use Logstash and kafka to deal with buffering and spikes in the traffic flowing to ElasticSearch, as well as scaling processing horizontally. Because of this, the "ingest" pipe… --- ## [Using aliases to optimize queries from a dashboard](https://discuss.elastic.co/t/using-aliases-to-optimize-queries-from-a-dashboard/263275)
**Author:** [@Oscar\_Lopez](https://discuss.elastic.co/u/Oscar_Lopez)\ **Replies:** 5\ **Last updated:** [February 15, 2021, 6:03pm UTC](https://discuss.elastic.co/t/using-aliases-to-optimize-queries-from-a-dashboard/263275 "2021-02-15T18:03:17Z")
Good afternoon, at the moment I am consulting what is the best way to optimize the way many users consult from the dashboard. We have index\_patterns that store information for more than one year and when users filter the… --- ## [Cannot resolve org.elasticsearch:elasticsearch-plugin-classloader:7.11.0](https://discuss.elastic.co/t/cannot-resolve-org-elasticsearch7-11-0/264304)
**Author:** [@ciment](https://discuss.elastic.co/u/ciment)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 5:36pm UTC](https://discuss.elastic.co/t/cannot-resolve-org-elasticsearch7-11-0/264304 "2021-02-15T17:36:27Z")
Hi, I tried to use dependency \ \org.elasticsearch.client\ \elasticsearch-rest-high-level-client\ \7.11.0\ \ but I got except… --- ## [Logstash fails to restart after the queue size is full](https://discuss.elastic.co/t/logstash-fails-to-restart-after-the-queue-size-is-full/263278)
**Author:** [@Animesh\_Agarwal](https://discuss.elastic.co/u/Animesh_Agarwal)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 4:56pm UTC](https://discuss.elastic.co/t/logstash-fails-to-restart-after-the-queue-size-is-full/263278 "2021-02-15T16:56:56Z")
Hi Team, We have enabled persistent queue on our logstash servers. queue.path is /var/lib/logstash queue.max\_bytes=30gb The logstash queue was full and I had restarted logstash service. Logstash fails to restart with… --- ## [Restoring from snapshot locally "Some repositories contain errors"](https://discuss.elastic.co/t/restoring-from-snapshot-locally-some-repositories-contain-errors/264299)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 5\ **Last updated:** [February 15, 2021, 4:53pm UTC](https://discuss.elastic.co/t/restoring-from-snapshot-locally-some-repositories-contain-errors/264299 "2021-02-15T16:53:26Z")
Hi, I have setup a local version of elasticsearch and kibana. I want to restore an index from production to this local version. I have created an s3 "repository" under Stack Management \> Snapshot and Restore. After c… --- ## [ELK 7.10 - Indicator index patterns: Value lists](https://discuss.elastic.co/t/elk-7-10-indicator-index-patterns-value-lists/264287)
**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\ **Replies:** 2\ **Last updated:** [February 15, 2021, 4:22pm UTC](https://discuss.elastic.co/t/elk-7-10-indicator-index-patterns-value-lists/264287 "2021-02-15T16:22:24Z")
Hello, I am trying to create a indicator match rule in ELK 7.10 where i have to give the indicator index pattern. Is there any default indicator index in ELK 7.10 or do i need to create a new indicator index with IOC lo… --- ## [Kibana index pattern not saved](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321)
**Author:** [@anoopkv](https://discuss.elastic.co/u/anoopkv)\ **Replies:** 7\ **Last updated:** [February 15, 2021, 4:09pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321 "2021-02-15T16:09:29Z")
I have an ELK stack running on the Kubernetes cluster with security enabled. Everything is running fine and I am able to push data to an index. After logging in to Kibana as an admin user, and I to "Discover" it asks me … --- ## [Scripted fields vs runtime fields](https://discuss.elastic.co/t/scripted-fields-vs-runtime-fields/263962)
**Author:** [@Shaoranlaos](https://discuss.elastic.co/u/Shaoranlaos)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 10:57pm UTC](https://discuss.elastic.co/t/scripted-fields-vs-runtime-fields/263962 "2021-02-11T22:57:45Z")
Hello, i have read the introduction of runtime fields under And i'm wondering where the differences to the "old" scripted fields are beside the ability define them in a mapping and not only in a query? Is it simply a… --- ## [ES regexp not working properly](https://discuss.elastic.co/t/es-regexp-not-working-properly/264297)
**Author:** [@Vijay\_Gupta](https://discuss.elastic.co/u/Vijay_Gupta)\ **Replies:** 3\ **Last updated:** [February 15, 2021, 3:09pm UTC](https://discuss.elastic.co/t/es-regexp-not-working-properly/264297 "2021-02-15T15:09:39Z")
Hello, I want to query my index and get documents where "@" is present in my "cust\_email" field. GET my\_index/\_search { "sort": \[ { "last\_updated\_date": {"order":"desc"}} \], "\_source": \[ "cust\_email"\], … --- ## [Big troubles upgrading elastic cluter](https://discuss.elastic.co/t/big-troubles-upgrading-elastic-cluter/264302)
**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\ **Replies:** 3\ **Last updated:** [February 15, 2021, 1:33pm UTC](https://discuss.elastic.co/t/big-troubles-upgrading-elastic-cluter/264302 "2021-02-15T13:33:38Z")
Hi, I got a big issue upgrading my elastic cluster. I think the only option is to stop all 5 servers, restore the FS backup I have and re-start the 5 servers. I would like to get advice to restart my cluster. Thank y… --- ## [Parse a document with Painless](https://discuss.elastic.co/t/parse-a-document-with-painless/264182)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 1:25pm UTC](https://discuss.elastic.co/t/parse-a-document-with-painless/264182 "2021-02-15T13:25:06Z")
Hello, In my index i have the field http.request.body.original (see also image below): {"customerNr":"9203521","sendMethod":"TOUR","partialDelivery":false,"isTourTimetable":false,"deliveryAddressId":"8100000000000154… --- ## [Data migration from mongodb to elasticsearch](https://discuss.elastic.co/t/data-migration-from-mongodb-to-elasticsearch/264311)
**Author:** [@Pankaj1](https://discuss.elastic.co/u/Pankaj1)\ **Replies:** 0\ **Last updated:** [February 15, 2021, 12:42pm UTC](https://discuss.elastic.co/t/data-migration-from-mongodb-to-elasticsearch/264311 "2021-02-15T12:42:27Z")
I am doing data migration from mongodb to elasticsearch by using logstash . I am using jdbc mongodb jar as a plugin . I have aggregation query to get the records from mongodb and insert into elasticsearch . The issues… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1046) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1048)