# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1138 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1139 --- ## [Logstash logging](https://discuss.elastic.co/t/logstash-logging/256655)
**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\ **Replies:** 0\ **Last updated:** [November 25, 2020, 12:10pm UTC](https://discuss.elastic.co/t/logstash-logging/256655 "2020-11-25T12:10:26Z")
Hi Guys, I would like to configure logstash log4j2.properties in order to fix the log size to 10M and to delete those older then 7 days. Could you please tell me which parameters to set log4j2.properties. Thanks, Bes… --- ## [Aggregate multiple events based on file](https://discuss.elastic.co/t/aggregate-multiple-events-based-on-file/256650)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 0\ **Last updated:** [November 25, 2020, 11:50am UTC](https://discuss.elastic.co/t/aggregate-multiple-events-based-on-file/256650 "2020-11-25T11:50:21Z")
hi , i have below directory structure and each subnode contains multiple log files which are generated daily and closed and then next day or some time after couple of days another file is generated and closed....i am ca… --- ## [Unable to save the array of json object in elasticsearch. Need to save it as string](https://discuss.elastic.co/t/unable-to-save-the-array-of-json-object-in-elasticsearch-need-to-save-it-as-string/256557)
**Author:** [@Saumya\_Mishra](https://discuss.elastic.co/u/Saumya_Mishra)\ **Replies:** 0\ **Last updated:** [November 24, 2020, 6:30pm UTC](https://discuss.elastic.co/t/unable-to-save-the-array-of-json-object-in-elasticsearch-need-to-save-it-as-string/256557 "2020-11-24T18:30:46Z")
I want to save this kind of data as a string in elasticsearch, but it fails to save \[{"flag":0,"amt":0,"code":1,"start":0,"end":0,"phrase":"they "},{"flag":0,"amt":0,"code":1,"start":0,"end":0,"phrase":"they qwe "},{"fl… --- ## [Map serivce url to service/operation](https://discuss.elastic.co/t/map-serivce-url-to-service-operation/256642)
**Author:** [@rmrfchik](https://discuss.elastic.co/u/rmrfchik)\ **Replies:** 0\ **Last updated:** [November 25, 2020, 11:05am UTC](https://discuss.elastic.co/t/map-serivce-url-to-service-operation/256642 "2020-11-25T11:05:34Z")
I have a number of services across servers, each service serves urls like /service1/operation1 /service1/operation2?data /service2/path/operation3/data1 /service2/path/operation3/data2 I need to measure metrics for gi… --- ## [\[Query DSL\] Get documents which don't have a sepcific value (in array, object/nested)](https://discuss.elastic.co/t/query-dsl-get-documents-which-dont-have-a-sepcific-value-in-array-object-nested/256637)
**Author:** [@ThibautSF](https://discuss.elastic.co/u/ThibautSF)\ **Replies:** 0\ **Last updated:** [November 25, 2020, 10:38am UTC](https://discuss.elastic.co/t/query-dsl-get-documents-which-dont-have-a-sepcific-value-in-array-object-nested/256637 "2020-11-25T10:38:31Z")
I will explain with examples, it should be better. I have 3 documents A, B and C (to be precise, in fact it's 3 type of document, there is more documents) Each document has a nested field of objects (with some fields),… --- ## [ES node find master, but can't join the cluster](https://discuss.elastic.co/t/es-node-find-master-but-cant-join-the-cluster/256591)
**Author:** [@Todd](https://discuss.elastic.co/u/Todd)\ **Replies:** 4\ **Last updated:** [November 25, 2020, 10:37am UTC](https://discuss.elastic.co/t/es-node-find-master-but-cant-join-the-cluster/256591 "2020-11-25T10:37:04Z")
Hi, These days I have found such a situation: one data node of the cluster has discoveried three master nodes, but it can't join the cluster. However, when I restart it, the data node joins successful !!! ES version: 7… --- ## [High refresh time in cluster nodes](https://discuss.elastic.co/t/high-refresh-time-in-cluster-nodes/256635)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 0\ **Last updated:** [November 25, 2020, 10:28am UTC](https://discuss.elastic.co/t/high-refresh-time-in-cluster-nodes/256635 "2020-11-25T10:28:17Z")
Hi all, I have a three node cluster elasticsearch version 6.5.4. Some times data in visualize and dashboard falling behind and it takes hours to back. Based on monitoring dashboard of elasticsearch, index latency incre… --- ## [Kibana time-out errors](https://discuss.elastic.co/t/kibana-time-out-errors/255479)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 5\ **Last updated:** [November 25, 2020, 9:45am UTC](https://discuss.elastic.co/t/kibana-time-out-errors/255479 "2020-11-25T09:45:29Z")
Hello, I am testing ELasticsearch to deploy it in production cluster. The first days it was working perfectly, and then I began having trouble when I try to search logs using Kibana, and the response was taking a long t… --- ## [Using field name other than "message" in grok match](https://discuss.elastic.co/t/using-field-name-other-than-message-in-grok-match/256563)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 5\ **Last updated:** [November 25, 2020, 10:03am UTC](https://discuss.elastic.co/t/using-field-name-other-than-message-in-grok-match/256563 "2020-11-25T10:03:40Z")
i have log like below, in line 2 , i have stored custom filter value in field "method"...in line 3 , i want to use "method" field and apply it another custom filter and store this result in method 2...i don't want to cha… --- ## [Indexing best practice](https://discuss.elastic.co/t/indexing-best-practice/256564)
**Author:** [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)\ **Replies:** 3\ **Last updated:** [November 25, 2020, 9:52am UTC](https://discuss.elastic.co/t/indexing-best-practice/256564 "2020-11-25T09:52:19Z")
Just finished my first ELK deployment. On a HP EliteDesk i5, 8 GB, 120 GB SSD for $90. It was done with CentOS 8 Minimal, Docker, Docker Compose, Cockpit, Portainer and Deviantony/Docker-ELK. A few tweaks, adding Beats … --- ## [Net::ReadTimeout, how to avoid going to artifacts.elastic.co/downloads for customizedlogstash java-plugin](https://discuss.elastic.co/t/net-readtimeout-how-to-avoid-going-to-artifacts-elastic-co-downloads-for-customizedlogstash-java-plugin/256626)
**Author:** [@hellopcz](https://discuss.elastic.co/u/hellopcz)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 9:40am UTC](https://discuss.elastic.co/t/net-readtimeout-how-to-avoid-going-to-artifacts-elastic-co-downloads-for-customizedlogstash-java-plugin/256626 "2020-11-25T09:40:13Z")
I developed some logstash java plugin and it run well under good network condition. But under some bad network condition, I have to use proxy for internet surfing, the plugin shows the Net::ReadTimeout. --- ## [Scripted terms always returns stringified values](https://discuss.elastic.co/t/scripted-terms-always-returns-stringified-values/256623)
**Author:** [@APic](https://discuss.elastic.co/u/APic)\ **Replies:** 0\ **Last updated:** [November 25, 2020, 9:17am UTC](https://discuss.elastic.co/t/scripted-terms-always-returns-stringified-values/256623 "2020-11-25T09:17:01Z")
Hello, we are using script to execute terms on fields that are run-time created by source and we don't know their name in advance. Source documents: { "@timestamp": "2020-11-24T06:06:14.0058521+01:00"… --- ## [BadRequirementError, Illformed requirement, fail to install offline logstash java plugin for the version reason or others?](https://discuss.elastic.co/t/badrequirementerror-illformed-requirement-fail-to-install-offline-logstash-java-plugin-for-the-version-reason-or-others/256619)
**Author:** [@hellopcz](https://discuss.elastic.co/u/hellopcz)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 9:01am UTC](https://discuss.elastic.co/t/badrequirementerror-illformed-requirement-fail-to-install-offline-logstash-java-plugin-for-the-version-reason-or-others/256619 "2020-11-25T09:01:13Z")
I've packed logstash offline java plugin but the plugin can not be well installed. it may be caused by wrong version. The offline plugin was built by prepare-offline-pack command but plugin name has to be set to logstas… --- ## [Search visualization selection disappears](https://discuss.elastic.co/t/search-visualization-selection-disappears/255691)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 7\ **Last updated:** [November 25, 2020, 8:26am UTC](https://discuss.elastic.co/t/search-visualization-selection-disappears/255691 "2020-11-25T08:26:04Z")
Hi I am using kibana 7.8 and I have a control visualization with 3 "controls". When I make a selection for the first one and then select "Apply" everything is ok, but when I make a selection for the first control and … --- ## [Data Stop ingesting after deleting index](https://discuss.elastic.co/t/data-stop-ingesting-after-deleting-index/256027)
**Author:** [@bhijay](https://discuss.elastic.co/u/bhijay)\ **Replies:** 7\ **Last updated:** [November 25, 2020, 7:27am UTC](https://discuss.elastic.co/t/data-stop-ingesting-after-deleting-index/256027 "2020-11-25T07:27:33Z")
Hello, I mistakenly deleted the winlogbeat index. However, new data stopped ingesting after deletion. What can I do? Regards. --- ## [How to update rollover conditions for a lifecycle policy?](https://discuss.elastic.co/t/how-to-update-rollover-conditions-for-a-lifecycle-policy/256343)
**Author:** [@Kenn](https://discuss.elastic.co/u/Kenn)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 7:12am UTC](https://discuss.elastic.co/t/how-to-update-rollover-conditions-for-a-lifecycle-policy/256343 "2020-11-25T07:12:07Z")
I have a metricbeat index ,metricbeat-7.9.1-2020.11.23-000001, and I would like to update the max size condition for the rollover action. The response from /\_ilm/explain : { "indices": { "metricbeat-7.9.1… --- ## [Query on too many scroll contexts](https://discuss.elastic.co/t/query-on-too-many-scroll-contexts/256606)
**Author:** [@skandimalla](https://discuss.elastic.co/u/skandimalla)\ **Replies:** 0\ **Last updated:** [November 25, 2020, 6:55am UTC](https://discuss.elastic.co/t/query-on-too-many-scroll-contexts/256606 "2020-11-25T06:55:59Z")
We are using ES version 6.4 and we want to upgrade to 7.4. While testing the up-gradation to do a paginated search using Scroll we are facing the below issue: Trying to create too many scroll contexts. Must be less than… --- ## [Logstash Http poller plugin](https://discuss.elastic.co/t/logstash-http-poller-plugin/256154)
**Author:** [@jerin](https://discuss.elastic.co/u/jerin)\ **Replies:** 7\ **Last updated:** [November 25, 2020, 6:42am UTC](https://discuss.elastic.co/t/logstash-http-poller-plugin/256154 "2020-11-25T06:42:47Z")
Hello , i am using logstash poller plugin to query JIRA API . it works okay .. i am trying to get the ticket status updated in last 5 mins .. the problem is when there is no update , it polls the API and retrives the fi… --- ## [How to set "ignore\_above" : 256 to higher value while using python elasticsearch client?](https://discuss.elastic.co/t/how-to-set-ignore-above-256-to-higher-value-while-using-python-elasticsearch-client/255338)
**Author:** [@vidhyadhara](https://discuss.elastic.co/u/vidhyadhara)\ **Replies:** 8\ **Last updated:** [November 25, 2020, 6:37am UTC](https://discuss.elastic.co/t/how-to-set-ignore-above-256-to-higher-value-while-using-python-elasticsearch-client/255338 "2020-11-25T06:37:38Z")
I am using python ES client to index data into my ES... I have a column which is more than 256 characters. when I create a data table viz. in kibana I get no results message if I include that lengthy column. Below is t… --- ## [Unable to hide the top menu bar of kibana when using the discover page in HTML](https://discuss.elastic.co/t/unable-to-hide-the-top-menu-bar-of-kibana-when-using-the-discover-page-in-html/256518)
**Author:** [@vidhyadhara](https://discuss.elastic.co/u/vidhyadhara)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 6:35am UTC](https://discuss.elastic.co/t/unable-to-hide-the-top-menu-bar-of-kibana-when-using-the-discover-page-in-html/256518 "2020-11-25T06:35:39Z")
Hello Everyone, I have 2 versions of ELK - on AWS (version 7.1) on my own server (version 7.9) My situation / requirement is to navigate to "discover" tab from dashboard, which I am achieving by making one of my colu… --- ## [Filebeat decoded JSON fields aren't searchable](https://discuss.elastic.co/t/filebeat-decoded-json-fields-arent-searchable/256410)
**Author:** [@nmoham](https://discuss.elastic.co/u/nmoham)\ **Replies:** 5\ **Last updated:** [November 25, 2020, 6:34am UTC](https://discuss.elastic.co/t/filebeat-decoded-json-fields-arent-searchable/256410 "2020-11-25T06:34:06Z")
Sending logs (JSON nested) using filebeat, the fields are getting created in (confirming from index pattern) , but the decoded fields are not visible in Kibana Discover tab. Sample data {"id":"5f5a0206-c431-4d76-9e8a-0… --- ## [Shard in es cluster](https://discuss.elastic.co/t/shard-in-es-cluster/256512)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 5:48am UTC](https://discuss.elastic.co/t/shard-in-es-cluster/256512 "2020-11-25T05:48:15Z")
I had a single node default "Elasticsearch" cluster so far. It had one index and two alias associated with that curl -s -X PUT $elasticsearchURL/$indexName?pretty -H 'Content-Type: application/json' -d '{"settings":{"in… --- ## [DNS enablement in elastic search on gcp kubernetes](https://discuss.elastic.co/t/dns-enablement-in-elastic-search-on-gcp-kubernetes/256600)
**Author:** [@sathish.mtech01](https://discuss.elastic.co/u/sathish.mtech01)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 5:47am UTC](https://discuss.elastic.co/t/dns-enablement-in-elastic-search-on-gcp-kubernetes/256600 "2020-11-25T05:47:39Z")
Please share the link to refer --- ## [Process Visualization in Kibana](https://discuss.elastic.co/t/process-visualization-in-kibana/255933)
**Author:** [@sathish.mtech01](https://discuss.elastic.co/u/sathish.mtech01)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 5:11am UTC](https://discuss.elastic.co/t/process-visualization-in-kibana/255933 "2020-11-25T05:11:31Z")
How to visualize process data in Kibana, Please have a look on the image attached below and give suggestions. --- ## [Label to display full](https://discuss.elastic.co/t/label-to-display-full/256479)
**Author:** [@gulshann](https://discuss.elastic.co/u/gulshann)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 4:42am UTC](https://discuss.elastic.co/t/label-to-display-full/256479 "2020-11-25T04:42:31Z")
How to ensure labels can be viewed in full without being cut off with "…" Using Kibana 7.10. --- ## [Elasticsearch and syslog-ng](https://discuss.elastic.co/t/elasticsearch-and-syslog-ng/256474)
**Author:** [@atamc3rb3r](https://discuss.elastic.co/u/atamc3rb3r)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 12:56am UTC](https://discuss.elastic.co/t/elasticsearch-and-syslog-ng/256474 "2020-11-25T00:56:01Z")
Hello, I have deployed my elasticsearch (ver. 7.10.0 on Linux) with Kibana and syslog-ng. Syslog-ng server receives logs data from network devices on port UDP/514 and using module elasticsearch-http() to send all data t… --- ## [Divide two columns(generated from aggregations) in data table](https://discuss.elastic.co/t/divide-two-columns-generated-from-aggregations-in-data-table/256575)
**Author:** [@ejmath12](https://discuss.elastic.co/u/ejmath12)\ **Replies:** 1\ **Last updated:** [November 24, 2020, 10:18pm UTC](https://discuss.elastic.co/t/divide-two-columns-generated-from-aggregations-in-data-table/256575 "2020-11-24T22:18:54Z")
I am very new to Elastic stack, so apologies upfront, if I am missing the obvious. Let me start by explaining my use case. All documents in my index has field \_idVal(represents a session). Sessions will have different pr… --- ## [Resource\_already\_exists\_exception\]: index \[.kibana\_task\_manager\_2](https://discuss.elastic.co/t/resource-already-exists-exception-index-kibana-task-manager-2/256549)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 2\ **Last updated:** [November 24, 2020, 9:40pm UTC](https://discuss.elastic.co/t/resource-already-exists-exception-index-kibana-task-manager-2/256549 "2020-11-24T21:40:09Z")
HI, Just upgraded from 7.9 to 7.10 and now kibana shows: "error","elasticsearch","data"\],"pid":10858,"message":"\[resource\_already\_exists\_exception\]: index \[.kibana\_task\_manager\_2/Ary\_lXNFQguMojj-E4-2bQ\] already exists"… --- ## [Visualisations with fields from different indexes?](https://discuss.elastic.co/t/visualisations-with-fields-from-different-indexes/256553)
**Author:** [@madteo](https://discuss.elastic.co/u/madteo)\ **Replies:** 4\ **Last updated:** [November 24, 2020, 9:31pm UTC](https://discuss.elastic.co/t/visualisations-with-fields-from-different-indexes/256553 "2020-11-24T21:31:47Z")
Hi everyone! I have a little question for the wizards of Elastic, here... I hope that someone can help me in clarifying if this is an issue that is affecting my logic, or if I've encountered a limitation of the technolo… --- ## [Logstash Beats Handler Error](https://discuss.elastic.co/t/logstash-beats-handler-error/256576)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 0\ **Last updated:** [November 24, 2020, 9:20pm UTC](https://discuss.elastic.co/t/logstash-beats-handler-error/256576 "2020-11-24T21:20:09Z")
Not really sure what this means, the pipeline appears to come back up and processing...but it unnerves me seeing this get vomitted out into the logs. Can anybody shed light on what this is? [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1137) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1139)