# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1124 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1125 --- ## [ES 1.4 google cloud storage plugin](https://discuss.elastic.co/t/es-1-4-google-cloud-storage-plugin/257627)
**Author:** [@Adithya\_S](https://discuss.elastic.co/u/Adithya_S)\ **Replies:** 2\ **Last updated:** [December 7, 2020, 2:31am UTC](https://discuss.elastic.co/t/es-1-4-google-cloud-storage-plugin/257627 "2020-12-07T02:31:16Z")
Hi, We have a few ES v1.4 clusters for which we need to setup snapshots to Google's cloud storage. Could anyone please point me to the plugin which would allow me to do this on ES v1 clusters? TIA --- ## [Auto response (Auto remediation) SIEM](https://discuss.elastic.co/t/auto-response-auto-remediation-siem/257665)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 2:30pm UTC](https://discuss.elastic.co/t/auto-response-auto-remediation-siem/257665 "2020-12-04T14:30:54Z")
Hello everybody, I never used a webhook before, so I wanna know if it's possible for example to add automatic rules to my firewall when I detect an attack (brute force, port scanner ...). I have searched webinar for th… --- ## [Error after upgrading to 7.10](https://discuss.elastic.co/t/error-after-upgrading-to-7-10/257741)
**Author:** [@wpearson4](https://discuss.elastic.co/u/wpearson4)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 2:18am UTC](https://discuss.elastic.co/t/error-after-upgrading-to-7-10/257741 "2020-12-07T02:18:17Z")
I recently upgraded my Elastic infrastructure from 7.9 - 7.10. My nodes will not start and are failing with the following message: monitoring execution failed org.elasticsearch.xpack.monitoring.exporter.ExportException… --- ## [Finding size of total documents in an index](https://discuss.elastic.co/t/finding-size-of-total-documents-in-an-index/257776)
**Author:** [@usamaahmadkhan](https://discuss.elastic.co/u/usamaahmadkhan)\ **Replies:** 3\ **Last updated:** [December 6, 2020, 9:29pm UTC](https://discuss.elastic.co/t/finding-size-of-total-documents-in-an-index/257776 "2020-12-06T21:29:15Z")
Hi, I want to find the sum of the sizes of all the documents containing a specific field. e.g. for an index .index-dec-6-2020 I want to get the sum of the size of all the documents containing the filed delay: 5 Can s… --- ## [Python3 query with large results, best approach](https://discuss.elastic.co/t/python3-query-with-large-results-best-approach/257402)
**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\ **Replies:** 10\ **Last updated:** [December 6, 2020, 7:01pm UTC](https://discuss.elastic.co/t/python3-query-with-large-results-best-approach/257402 "2020-12-06T19:01:45Z")
hi, i'm throwing a huge amount of log data into ES each month. i'm trying to create a python script to build a report at the end of the month. my first query i need to make is to query the index and get all the unique … --- ## [Elasticsearch on AWS + raspberry pi](https://discuss.elastic.co/t/elasticsearch-on-aws-raspberry-pi/257485)
**Author:** [@Ettore\_Ciarcia](https://discuss.elastic.co/u/Ettore_Ciarcia)\ **Replies:** 9\ **Last updated:** [December 6, 2020, 5:26pm UTC](https://discuss.elastic.co/t/elasticsearch-on-aws-raspberry-pi/257485 "2020-12-06T17:26:24Z")
Hello everyone. I intend to send the weather data collected by a raspberry pie on ec2 instances hosting elasticsearch to view the temperature graphs on kibana. My idea is to make a comparison between the internal temper… --- ## [Issue when indexing booleans to elastic](https://discuss.elastic.co/t/issue-when-indexing-booleans-to-elastic/256634)
**Author:** [@mariskaas](https://discuss.elastic.co/u/mariskaas)\ **Replies:** 1\ **Last updated:** [December 6, 2020, 4:08pm UTC](https://discuss.elastic.co/t/issue-when-indexing-booleans-to-elastic/256634 "2020-12-06T16:08:24Z")
Hi there, I've been having a problem regarding getting data in elastic as a boolean. I have gotten it to work only when using logstash, and explicitly converting fields to boolean both in logstash and in a created mapp… --- ## [Different grok patterns for different log lines](https://discuss.elastic.co/t/different-grok-patterns-for-different-log-lines/257772)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 1\ **Last updated:** [December 6, 2020, 3:50pm UTC](https://discuss.elastic.co/t/different-grok-patterns-for-different-log-lines/257772 "2020-12-06T15:50:03Z")
Hello. I have an application log file with 8 different patterns in it (8 different lines). Is it correct to use an array of match in grok to output all of them? if I use conditional expressions, only one pattern (for exa… --- ## [Custom field (filebeat) in condition in logstash filter](https://discuss.elastic.co/t/custom-field-filebeat-in-condition-in-logstash-filter/257761)
**Author:** [@arp220](https://discuss.elastic.co/u/arp220)\ **Replies:** 3\ **Last updated:** [December 6, 2020, 3:48pm UTC](https://discuss.elastic.co/t/custom-field-filebeat-in-condition-in-logstash-filter/257761 "2020-12-06T15:48:57Z")
I have this config in filebeat.yml: filebeat.inputs: - type: log enabled: true paths: - /var/log/nginx/access.log fields\_under\_root: true fields: service\_name: "nginx" ##### OutPut ####### output.logstas… --- ## [Multiline parsing error](https://discuss.elastic.co/t/multiline-parsing-error/257774)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 1\ **Last updated:** [December 6, 2020, 3:46pm UTC](https://discuss.elastic.co/t/multiline-parsing-error/257774 "2020-12-06T15:46:55Z")
hi all, i am using multiline to parse below log format...1 log entry is separated by either line which appears as "!-----New----------" or "------------!" ..... i am using below regex ,although its segregating log entri… --- ## [How to get the number of routing shards for an index](https://discuss.elastic.co/t/how-to-get-the-number-of-routing-shards-for-an-index/257634)
**Author:** [@Chelambarasan\_CR](https://discuss.elastic.co/u/Chelambarasan_CR)\ **Replies:** 1\ **Last updated:** [December 6, 2020, 3:13pm UTC](https://discuss.elastic.co/t/how-to-get-the-number-of-routing-shards-for-an-index/257634 "2020-12-06T15:13:48Z")
ES version: 7.6.1 I have mentioned the number of routing shards while index creation as below PUT my\_source\_index { "settings": { "index.number\_of\_shards" : 9, "index.number\_of\_routi… --- ## [How to parse the json string](https://discuss.elastic.co/t/how-to-parse-the-json-string/257768)
**Author:** [@stwang](https://discuss.elastic.co/u/stwang)\ **Replies:** 1\ **Last updated:** [December 6, 2020, 11:44am UTC](https://discuss.elastic.co/t/how-to-parse-the-json-string/257768 "2020-12-06T11:44:27Z")
I have a log file, which the content like below {"log":"{\\"time\\":\\"2020-12-02 22:42:00,535\\", \\"a\_key\\":\\"a\_value\\"}\\n","stream":"stdout","time":"2020-12-02T22:42:05.58702969Z"} I want to parse the log field to json o… --- ## [Separating fields using grok with custom patterns](https://discuss.elastic.co/t/separating-fields-using-grok-with-custom-patterns/257765)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 0\ **Last updated:** [December 6, 2020, 9:07am UTC](https://discuss.elastic.co/t/separating-fields-using-grok-with-custom-patterns/257765 "2020-12-06T09:07:56Z")
Hello! I have a problem while parsing my log file: I can not get the separated fields in stdout using ruby debug. The pattern is okay while using DevTools or the recommended debugger. also I have different log lines whic… --- ## [\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Marking url as dead](https://discuss.elastic.co/t/warn-logstash-outputs-elasticsearch-main-marking-url-as-dead/257752)
**Author:** [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\ **Replies:** 2\ **Last updated:** [December 6, 2020, 10:01am UTC](https://discuss.elastic.co/t/warn-logstash-outputs-elasticsearch-main-marking-url-as-dead/257752 "2020-12-06T10:01:49Z")
What can I do in these situations? because the logs go up, but they don't appear in the kibana. \[2020-12-05T20:11:29,881\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Marking url as dead. Last error: \[LogStash::Outputs:… --- ## [Problem when adding fields to logstash](https://discuss.elastic.co/t/problem-when-adding-fields-to-logstash/257744)
**Author:** [@Gigazo1d](https://discuss.elastic.co/u/Gigazo1d)\ **Replies:** 5\ **Last updated:** [December 5, 2020, 7:57pm UTC](https://discuss.elastic.co/t/problem-when-adding-fields-to-logstash/257744 "2020-12-05T19:57:35Z")
Hi guys! There was a problem adding the add\_field via the mutate filter plugin. I do this: filter { if \[type\] == "syslog" { mutate { add\_field =\> \[ "received\_at", "%{@timestamp}" \] … --- ## [Kibana Bad Request when creating index pattern](https://discuss.elastic.co/t/kibana-bad-request-when-creating-index-pattern/257394)
**Author:** [@elady](https://discuss.elastic.co/u/elady)\ **Replies:** 2\ **Last updated:** [December 6, 2020, 9:38am UTC](https://discuss.elastic.co/t/kibana-bad-request-when-creating-index-pattern/257394 "2020-12-06T09:38:55Z")
\*\*\* SEE EDIT BELOW \*\*\* Hey. Since we have upgraded ELK stack to version 7.7.1 the Kibana keeps presenting error messages of "bad request" to elasticsearch when we perform index field refresh and now when we are trying … --- ## [Search on the same field multiple times with different filters and intersect the results](https://discuss.elastic.co/t/search-on-the-same-field-multiple-times-with-different-filters-and-intersect-the-results/257312)
**Author:** [@Amir\_Mirahmady](https://discuss.elastic.co/u/Amir_Mirahmady)\ **Replies:** 1\ **Last updated:** [December 6, 2020, 8:43am UTC](https://discuss.elastic.co/t/search-on-the-same-field-multiple-times-with-different-filters-and-intersect-the-results/257312 "2020-12-06T08:43:20Z")
Hi . I'm working on a project that records in my index have dynamic values . I mean I have a field named fieldvalue that can be a date or a text or a number and every record is piece of data from each user . The reason w… --- ## [Delete\_by\_query number of documents Error](https://discuss.elastic.co/t/delete-by-query-number-of-documents-error/257737)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 3\ **Last updated:** [December 6, 2020, 8:31am UTC](https://discuss.elastic.co/t/delete-by-query-number-of-documents-error/257737 "2020-12-06T08:31:59Z")
Hi, I run this code: POST topf/\_delete\_by\_query?conflicts=proceed&max\_docs=500000 { "query": { "range": { "time": { "gte": "2020-09-18T03:00:00", "lte": "2020-09-18T04:00:00" } } … --- ## [Dec 6th: \[ES\] Cargando datos de OSM en Elasticsearch](https://discuss.elastic.co/t/dec-6th-es-cargando-datos-de-osm-en-elasticsearch/255082)
**Author:** [@jsanz](https://discuss.elastic.co/u/jsanz)\ **Replies:** 0\ **Last updated:** [December 6, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-6th-es-cargando-datos-de-osm-en-elasticsearch/255082 "2020-12-06T08:00:06Z")
Versión en inglés Una de las tareas más comunes para los usuarios del stack de Elastic que trabajan con datos geoespaciales tiene que ver con la carga de datos en Elasticsearch. En la documentación de Kibana 7.10 puedes… --- ## [Dec 6th, 2020: \[EN\] Uploading data from OSM into Elasticsearch](https://discuss.elastic.co/t/dec-6th-2020-en-uploading-data-from-osm-into-elasticsearch/255059)
**Author:** [@jsanz](https://discuss.elastic.co/u/jsanz)\ **Replies:** 0\ **Last updated:** [December 6, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-6th-2020-en-uploading-data-from-osm-into-elasticsearch/255059 "2020-12-06T08:00:06Z")
Spanish version One of the most common issues for Elastic stack users that deal with geospatial data is how to upload geospatial data users is how to ingest data in Elasticsearch. You can check Kibana 7.10 docs to learn… --- ## [Nested key-values parsed with KV](https://discuss.elastic.co/t/nested-key-values-parsed-with-kv/257625)
**Author:** [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)\ **Replies:** 5\ **Last updated:** [December 5, 2020, 11:21pm UTC](https://discuss.elastic.co/t/nested-key-values-parsed-with-kv/257625 "2020-12-05T23:21:36Z")
KV works great for parsing my input. One key-value, however, looks like this: waninfo="name=wan1,bytes=35911872068/568034814778,packets=135560453/438026267;name=wan2,bytes=0/0,packets=0/0;" I would like to KV-parse th… --- ## [Filter out only the \_source](https://discuss.elastic.co/t/filter-out-only-the-source/257729)
**Author:** [@manuel1](https://discuss.elastic.co/u/manuel1)\ **Replies:** 1\ **Last updated:** [December 5, 2020, 2:23pm UTC](https://discuss.elastic.co/t/filter-out-only-the-source/257729 "2020-12-05T14:23:03Z")
After performing a GET request, i get a response like the below. I only need the \_source field for the response. So my response should not include 'hits' nor '\_source'. Just the values of the \_source which are: id, house… --- ## [Transportclient 502 after Added nodes in cluster](https://discuss.elastic.co/t/transportclient-502-after-added-nodes-in-cluster/257492)
**Author:** [@arthurxx](https://discuss.elastic.co/u/arthurxx)\ **Replies:** 5\ **Last updated:** [December 5, 2020, 2:15pm UTC](https://discuss.elastic.co/t/transportclient-502-after-added-nodes-in-cluster/257492 "2020-12-05T14:15:23Z")
there is a elasticsearch cluster which version is 2.4.6 in our company. We met a strange problem recently. After Added nodes into this cluster, the client will met a large of number requests status become 499 or 502( now… --- ## [Setting Up Snapshot - Repository (What to set for Path.Repo)](https://discuss.elastic.co/t/setting-up-snapshot-repository-what-to-set-for-path-repo/257717)
**Author:** [@Sampson\_Light](https://discuss.elastic.co/u/Sampson_Light)\ **Replies:** 4\ **Last updated:** [December 5, 2020, 9:37am UTC](https://discuss.elastic.co/t/setting-up-snapshot-repository-what-to-set-for-path-repo/257717 "2020-12-05T09:37:35Z")
Hi All, So I am currently setting up my path.repo repository to enable Snapshot onto my linux server. I understand that I am suppose to create something new like a path.repo inside my elasticsearch.yml. Something like… --- ## [Error 503 on server post unblocking the index on a proxy](https://discuss.elastic.co/t/error-503-on-server-post-unblocking-the-index-on-a-proxy/257720)
**Author:** [@Anuradha12](https://discuss.elastic.co/u/Anuradha12)\ **Replies:** 7\ **Last updated:** [December 5, 2020, 8:14am UTC](https://discuss.elastic.co/t/error-503-on-server-post-unblocking-the-index-on-a-proxy/257720 "2020-12-05T08:14:45Z")
Could not save: {'index': {'\_index': 'prj\_1a9c0440af7f4ed297736cffa5591082\_connector', '\_type': '\_doc', '\_id': 'model\_d25q7003720200', 'status': 503, 'error': {'type': 'unavailable\_shards\_exception', 'reason': '\[prj\_1a9c… --- ## [Longest prefix match](https://discuss.elastic.co/t/longest-prefix-match/257722)
**Author:** [@sumanthmitra](https://discuss.elastic.co/u/sumanthmitra)\ **Replies:** 0\ **Last updated:** [December 5, 2020, 8:13am UTC](https://discuss.elastic.co/t/longest-prefix-match/257722 "2020-12-05T08:13:09Z")
Hi, I am not able to figure out how to achieve the longest prefix match between the search query and the stored doc values. Say we have the below doc values indexed. "ababab" "ab" "a" and if the input query is "ab… --- ## [Dec 5th, 2020: \[EN\] Searching anything, anywhere with Workplace Search](https://discuss.elastic.co/t/dec-5th-2020-en-searching-anything-anywhere-with-workplace-search/254740)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [December 5, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-5th-2020-en-searching-anything-anywhere-with-workplace-search/254740 "2020-12-05T08:00:03Z")
Version française Introduction You already know that Workplace Search comes with a lot of connectors which help you connect your enterprise document data sources and have a federated way to search across all that inform… --- ## [Dec 5th, 2020: \[FR\] Recherchez tous vos documents, n'importe où, avec Workplace Search](https://discuss.elastic.co/t/dec-5th-2020-fr-recherchez-tous-vos-documents-nimporte-ou-avec-workplace-search/254739)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [December 5, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-5th-2020-fr-recherchez-tous-vos-documents-nimporte-ou-avec-workplace-search/254739 "2020-12-05T08:00:03Z")
English version Introduction Vous savez déjà que Workplace Search est fourni avec beaucoup de connecteurs qui vous permettent de connecter vos sources de données de vos documents d'entreprise et de disposer ainsi d'un m… --- ## [Visualizing top list of skiing results between split times in Kibana](https://discuss.elastic.co/t/visualizing-top-list-of-skiing-results-between-split-times-in-kibana/256936)
**Author:** [@tobias.berg](https://discuss.elastic.co/u/tobias.berg)\ **Replies:** 2\ **Last updated:** [December 5, 2020, 6:35am UTC](https://discuss.elastic.co/t/visualizing-top-list-of-skiing-results-between-split-times-in-kibana/256936 "2020-12-05T06:35:09Z")
Hi, I'm scraping some cross-country skiing results, ingesting it in Elasticsearch and visualizing it in Kibana. It works pretty well! Although there is one thing I would like to accomplish that I can't get my head aroun… --- ## [Elastic: Problem with decimal format when indexing from the 64th document (document not indexed)](https://discuss.elastic.co/t/elastic-problem-with-decimal-format-when-indexing-from-the-64th-document-document-not-indexed/257588)
**Author:** [@oldiequattro](https://discuss.elastic.co/u/oldiequattro)\ **Replies:** 5\ **Last updated:** [December 5, 2020, 4:43am UTC](https://discuss.elastic.co/t/elastic-problem-with-decimal-format-when-indexing-from-the-64th-document-document-not-indexed/257588 "2020-12-05T04:43:40Z")
Hello, I am showing you here a problem encountered in our environments with the indexing of a row in Elasticsearch which is not done as soon as the decimal value contained in the key exceeds 64 (side effect of a base 64… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1123) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1125)