# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1085 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1086 --- ## [Elastic Community Conference](https://discuss.elastic.co/t/elastic-community-conference/261016)
**Author:** [@riferrei](https://discuss.elastic.co/u/riferrei)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 3:12pm UTC](https://discuss.elastic.co/t/elastic-community-conference/261016 "2021-01-13T15:12:02Z")
Hello my friends, As you may know Elastic will be having in February the very first edition of its community conference — a conference from and for the Elastic community. We are very excited in hearing all the awesome h… --- ## [Parsing using grok](https://discuss.elastic.co/t/parsing-using-grok/260916)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [January 13, 2021, 3:40pm UTC](https://discuss.elastic.co/t/parsing-using-grok/260916 "2021-01-13T15:40:11Z")
i am running jdbc and getting following data. if I run this on SQL\> prompt --backupid "2129214415\_30120163393540,2129214415\_30120163432904" --spoolpath /system1/1\_backup but on logstash output it becomes command: "--… --- ## [Format stack trace in console for elastic search](https://discuss.elastic.co/t/format-stack-trace-in-console-for-elastic-search/260711)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 4\ **Last updated:** [January 13, 2021, 3:13pm UTC](https://discuss.elastic.co/t/format-stack-trace-in-console-for-elastic-search/260711 "2021-01-13T15:13:19Z")
Hi expers. Below is sample stack trace in log 2021-01011 04:23:23,455 ERROR \[beat-logstash-some-name-832-2015.11.28\] IndexNotFoundException\[no such index\] at org.elasticsearch.cluster.metadata.IndexNameExpressionRe… --- ## [Duplicate results when paging](https://discuss.elastic.co/t/duplicate-results-when-paging/260895)
**Author:** [@noah-elastic](https://discuss.elastic.co/u/noah-elastic)\ **Replies:** 2\ **Last updated:** [January 13, 2021, 2:46pm UTC](https://discuss.elastic.co/t/duplicate-results-when-paging/260895 "2021-01-13T14:46:54Z")
Hello Folks -- I'm researching an interesting situation that one of our users pointed out. We have a somewhat simple query that searches on a couple fields. We are using size/from to allow the users to step through the … --- ## [Text field to convert as date and perform math Operation](https://discuss.elastic.co/t/text-field-to-convert-as-date-and-perform-math-operation/260785)
**Author:** [@Sathish22](https://discuss.elastic.co/u/Sathish22)\ **Replies:** 3\ **Last updated:** [January 13, 2021, 2:40pm UTC](https://discuss.elastic.co/t/text-field-to-convert-as-date-and-perform-math-operation/260785 "2021-01-13T14:40:43Z")
Hi All, I need to convert a text field to date data type and perform a math operation on it something like this Process ID Process Name Start Time End Time Difference 1 Process1 2021-01-12T13:16:20.19Z 2021-01… --- ## [How can i populate/copy an event field for every event line?](https://discuss.elastic.co/t/how-can-i-populate-copy-an-event-field-for-every-event-line/261011)
**Author:** [@EHE](https://discuss.elastic.co/u/EHE)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 2:36pm UTC](https://discuss.elastic.co/t/how-can-i-populate-copy-an-event-field-for-every-event-line/261011 "2021-01-13T14:36:57Z")
Hello, I am struggling with the below I multiple log line mappings and there is one specific field i would like to populate for the logline before and after, currently i am only getting it on the exact same line where t… --- ## [Rally 2.0.3 Released](https://discuss.elastic.co/t/rally-2-0-3-released/261007)
**Author:** [@RickBoyd](https://discuss.elastic.co/u/RickBoyd)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 1:57pm UTC](https://discuss.elastic.co/t/rally-2-0-3-released/261007 "2021-01-13T13:57:03Z")
We have just released Rally 2.0.3. This is a bug fix release but also adds quite a few enhancements. Here are some highlights: The new composite operations support complex hierarchies in tasks. (change) (doc) Added su… --- ## [Grok filter working in debugger but not getting parsed with Logstash](https://discuss.elastic.co/t/grok-filter-working-in-debugger-but-not-getting-parsed-with-logstash/261006)
**Author:** [@vijayakumar.cfis](https://discuss.elastic.co/u/vijayakumar.cfis)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 1:52pm UTC](https://discuss.elastic.co/t/grok-filter-working-in-debugger-but-not-getting-parsed-with-logstash/261006 "2021-01-13T13:52:32Z")
Hi Team, I am trying to parse the below log entries using Grok. \<158\>Dec 03 04:50:03 AB-AWSA-01.abcd.xxxxxxxxxxxxxxx.com SIEMAccessLogs: Info: 10.0.0.1 "abcd\\abcd@abcd.xxxxxxxxxxxxxxx.com" - \[03/Dec/2020:04:50:01 +0000… --- ## [Exporting from Saved Search inside Dashboard does not have any data](https://discuss.elastic.co/t/exporting-from-saved-search-inside-dashboard-does-not-have-any-data/260763)
**Author:** [@ashryver1995](https://discuss.elastic.co/u/ashryver1995)\ **Replies:** 4\ **Last updated:** [January 13, 2021, 1:34pm UTC](https://discuss.elastic.co/t/exporting-from-saved-search-inside-dashboard-does-not-have-any-data/260763 "2021-01-13T13:34:55Z")
Hi Everyone, I recently encountered an issue with Kibana where I have created a dashboard and inside that Dashboard I have a Saved Search to view the data which is filtered by the @timestamp column using "This Week". T… --- ## [Getting this error while starting kibana](https://discuss.elastic.co/t/getting-this-error-while-starting-kibana/260791)
**Author:** [@yash\_watwani](https://discuss.elastic.co/u/yash_watwani)\ **Replies:** 3\ **Last updated:** [January 13, 2021, 1:21pm UTC](https://discuss.elastic.co/t/getting-this-error-while-starting-kibana/260791 "2021-01-13T13:21:08Z")
\\kibana-7.10.1-windows-x86\_64\\config was unexpected at this time. --- ## [Merge two elasticsearch clusters](https://discuss.elastic.co/t/merge-two-elasticsearch-clusters/260678)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 5\ **Last updated:** [January 13, 2021, 11:31am UTC](https://discuss.elastic.co/t/merge-two-elasticsearch-clusters/260678 "2021-01-13T11:31:11Z")
Hi All, Currently we have two clusters, in one we have 4 nodes(1 coordinating, 3 data nodes out of which two are master) and second cluster(1 coordinating, 5 data nodes out of which three are master). Can someone sugges… --- ## [Kubernetes How disable SSL getting Elasticsearch Unreachable: \[https://elastic:xxxxxx@myhost.elastic-namespace.svc:9200/](https://discuss.elastic.co/t/kubernetes-how-disable-ssl-getting-elasticsearch-unreachable-https-elastic-xxxxxx-myhost-elastic-namespace-svc-9200/260985)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 11:18am UTC](https://discuss.elastic.co/t/kubernetes-how-disable-ssl-getting-elasticsearch-unreachable-https-elastic-xxxxxx-myhost-elastic-namespace-svc-9200/260985 "2021-01-13T11:18:11Z")
i saw a lot of problems with this issue, looks like it is impossible to disable the SSL in logstash when connecting to elasticsearch i want to disable it , i don't what to use it this is an internal app. this configura… --- ## [No more logs in ELK](https://discuss.elastic.co/t/no-more-logs-in-elk/260314)
**Author:** [@baddack](https://discuss.elastic.co/u/baddack)\ **Replies:** 3\ **Last updated:** [January 13, 2021, 11:07am UTC](https://discuss.elastic.co/t/no-more-logs-in-elk/260314 "2021-01-13T11:07:05Z")
Hello everyone, I'm new here and I've been using the ELK stack recently. I am in apprenticeship in my company and I am asked to take over the SIEM because nobody knows how to use it. (It was implemented by a previous ap… --- ## [Elasticsearch BulkRequestHandler listener callback execution](https://discuss.elastic.co/t/elasticsearch-bulkrequesthandler-listener-callback-execution/260978)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 10:48am UTC](https://discuss.elastic.co/t/elasticsearch-bulkrequesthandler-listener-callback-execution/260978 "2021-01-13T10:48:55Z")
In line https://github.com/elastic/elasticsearch/blob/master/server/src/main/java/org/elasticsearch/action/bulk/BulkRequestHandler.java#L58 Curious why the semaphore is acquired after the beforeBulk callback? While not … --- ## [Ik 做不到分詞searching](https://discuss.elastic.co/t/ik-searching/260973)
**Author:** [@Tails](https://discuss.elastic.co/u/Tails)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 10:40am UTC](https://discuss.elastic.co/t/ik-searching/260973 "2021-01-13T10:40:29Z")
入了 "張學友" 去dictionary 張學友 searching 正常 \[root@localhost scripts\]# curl -H 'Content-Type: application/json' -XPOST 'http://192.168.90.13:9200/p\_photo/\_search?pretty' -d' { "query" : { "term" : { "caption" : "張學友" }} }… --- ## [Indices.breaker.total.use\_real\_memory or search.check\_buckets\_step\_size  didn't work](https://discuss.elastic.co/t/indices-breaker-total-use-real-memory-or-search-check-buckets-step-size-didnt-work/260945)
**Author:** [@liwanjie](https://discuss.elastic.co/u/liwanjie)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 7:38am UTC](https://discuss.elastic.co/t/indices-breaker-total-use-real-memory-or-search-check-buckets-step-size-didnt-work/260945 "2021-01-13T07:38:19Z")
I always thought that with this new parameter, requests for too many buckets should be rejected。But I tested it today, making two requests and creating hundreds of thousands of buckets per request。In the end, the machine… --- ## [Bar Chart X-Axis Text Alignment](https://discuss.elastic.co/t/bar-chart-x-axis-text-alignment/260667)
**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\ **Replies:** 3\ **Last updated:** [January 13, 2021, 9:44am UTC](https://discuss.elastic.co/t/bar-chart-x-axis-text-alignment/260667 "2021-01-13T09:44:54Z")
Hi, How do i set the text alignment on the X-Axis to vertical ? This bar chart created using Date Histogram where minimum interval = Day. I further aggregate the data using Split series and my Sub aggregation type is '… --- ## [All shards failed - 400 happens on certain indexes](https://discuss.elastic.co/t/all-shards-failed-400-happens-on-certain-indexes/260960)
**Author:** [@Yoav\_Alroy](https://discuss.elastic.co/u/Yoav_Alroy)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 9:26am UTC](https://discuss.elastic.co/t/all-shards-failed-400-happens-on-certain-indexes/260960 "2021-01-13T09:26:06Z")
Hi, A bit of a background - We are using ElasticSearch with index per client for search engine. Now we let the user have several types of search terms that one of them is "search by id" where we focus the search to cer… --- ## [Is it possible to fetch count of total number of docs that qualify an aggregation condition in elasticsearch?](https://discuss.elastic.co/t/is-it-possible-to-fetch-count-of-total-number-of-docs-that-qualify-an-aggregation-condition-in-elasticsearch/260958)
**Author:** [@yash.tandon](https://discuss.elastic.co/u/yash.tandon)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 9:11am UTC](https://discuss.elastic.co/t/is-it-possible-to-fetch-count-of-total-number-of-docs-that-qualify-an-aggregation-condition-in-elasticsearch/260958 "2021-01-13T09:11:17Z")
--- ## [Discovery configuration changes in 7.x](https://discuss.elastic.co/t/discovery-configuration-changes-in-7-x/260522)
**Author:** [@srikanth\_k](https://discuss.elastic.co/u/srikanth_k)\ **Replies:** 6\ **Last updated:** [January 13, 2021, 9:33am UTC](https://discuss.elastic.co/t/discovery-configuration-changes-in-7-x/260522 "2021-01-13T09:33:18Z")
Before an upgrade to 7.x, why is it required to set the below value discovery.zen.ping.unicast.hosts ? " After the cluster forms successfully for the first time, remove the cluster.initial\_master\_nodes setting from eac… --- ## [Hey i want to add some text into my message can anybody help me how to do it?](https://discuss.elastic.co/t/hey-i-want-to-add-some-text-into-my-message-can-anybody-help-me-how-to-do-it/260321)
**Author:** [@jolaniya](https://discuss.elastic.co/u/jolaniya)\ **Replies:** 4\ **Last updated:** [January 13, 2021, 8:51am UTC](https://discuss.elastic.co/t/hey-i-want-to-add-some-text-into-my-message-can-anybody-help-me-how-to-do-it/260321 "2021-01-13T08:51:23Z")
Hey i want to add some text into my message can anybody help me how to do it? --- ## [Elasticsearch custom users with custom keys in existing Secret config](https://discuss.elastic.co/t/elasticsearch-custom-users-with-custom-keys-in-existing-secret-config/260950)
**Author:** [@ismarslomic](https://discuss.elastic.co/u/ismarslomic)\ **Replies:** 1\ **Last updated:** [January 13, 2021, 8:50am UTC](https://discuss.elastic.co/t/elasticsearch-custom-users-with-custom-keys-in-existing-secret-config/260950 "2021-01-13T08:50:58Z")
File realm doc provides example on how to define users and roles by Secret Kubernetes configuration with use of keys users and users\_roles and referring to this with spec.auth.fileRealm from Elasticsearch configuration. … --- ## [What value adds Data Streams vs Index Alias for time series data](https://discuss.elastic.co/t/what-value-adds-data-streams-vs-index-alias-for-time-series-data/260948)
**Author:** [@ismarslomic](https://discuss.elastic.co/u/ismarslomic)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 7:51am UTC](https://discuss.elastic.co/t/what-value-adds-data-streams-vs-index-alias-for-time-series-data/260948 "2021-01-13T07:51:50Z")
I'm struggling to understand what benefits Data Streams brings to the table, compared with Index Alias for time series data? Are there any performance (i.e indexing and querying) benefits? --- ## [Invalid format: \[yyyy-MM-ddTHH:mm:ssZ\]: Unknown pattern letter: T"](https://discuss.elastic.co/t/invalid-format-yyyy-mm-ddthhssz-unknown-pattern-letter-t/260874)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 2\ **Last updated:** [January 13, 2021, 7:45am UTC](https://discuss.elastic.co/t/invalid-format-yyyy-mm-ddthhssz-unknown-pattern-letter-t/260874 "2021-01-13T07:45:30Z")
Hello team, strange thing happened. I have following mapping for the field in els with multiple formats: "createdAt" : { "type" : "date", "format" : "yyyy-MM-dd HH:mm:ssZ||yyyy-MM-dd… --- ## [If condition regex error](https://discuss.elastic.co/t/if-condition-regex-error/260939)
**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\ **Replies:** 1\ **Last updated:** [January 13, 2021, 7:29am UTC](https://discuss.elastic.co/t/if-condition-regex-error/260939 "2021-01-13T07:29:02Z")
Hi, I created a working logstash.conf with if/else conditions. Now I'm trying to implement regex to make the filters less messy. The current filter is like this: filter { if \[tag\] == /^\[a|b|c\]\*$/ { muta… --- ## [Error response code 503](https://discuss.elastic.co/t/error-response-code-503/260940)
**Author:** [@Tabriz](https://discuss.elastic.co/u/Tabriz)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 6:48am UTC](https://discuss.elastic.co/t/error-response-code-503/260940 "2021-01-13T06:48:10Z")
1 on kibana web interface appears that error message \> No result data 2 on redhat 6 logstash service down automatically 3 ithere are n the logstash log file errors a)too many attempts at sending even,dropping b)ret… --- ## [What happens when decommission a node?](https://discuss.elastic.co/t/what-happens-when-decommission-a-node/260938)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 6:25am UTC](https://discuss.elastic.co/t/what-happens-when-decommission-a-node/260938 "2021-01-13T06:25:35Z")
I just decommissioned a node from my cluster. I noticed there are many threads (15-20) doing the shard relocation, which is great. After about 30 minutes, the rebalancing threads dropped down to 3, which is my cluster … --- ## [Scripted field](https://discuss.elastic.co/t/scripted-field/260675)
**Author:** [@Jerry\_Yap](https://discuss.elastic.co/u/Jerry_Yap)\ **Replies:** 5\ **Last updated:** [January 13, 2021, 6:06am UTC](https://discuss.elastic.co/t/scripted-field/260675 "2021-01-13T06:06:43Z")
Hi all, My index fields consists of index\_name (containing P01, P02) X (numbers) How can i scripted the field to display the subtracted result of P01 of X - P02 of X? Thanks in advance. --- ## [Unable to restrict duplicate documents using http\_poller](https://discuss.elastic.co/t/unable-to-restrict-duplicate-documents-using-http-poller/260511)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 0\ **Last updated:** [January 8, 2021, 8:06am UTC](https://discuss.elastic.co/t/unable-to-restrict-duplicate-documents-using-http-poller/260511 "2021-01-08T08:06:55Z")
Hi All, I have been trying to ingest some, time series data into elasticsearch using logstash http poller plugin. my data is from a monitoring tool which capture the parameters like hostname, memory usage, cpu load, s… --- ## [No answers for bulk requests](https://discuss.elastic.co/t/no-answers-for-bulk-requests/260933)
**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\ **Replies:** 0\ **Last updated:** [January 13, 2021, 5:18am UTC](https://discuss.elastic.co/t/no-answers-for-bulk-requests/260933 "2021-01-13T05:18:46Z")
Hi, as I wrote in name of topic I have troubles with bulk requests (also with Follower Checker and Leader Checker messages). Usual bulk trace looks like: \[2021-01-13T08:30:44,163\]\[TRACE\]\[o.e.h.HttpTracer \] \[h1-… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1084) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1086)