# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1166 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1167 --- ## [Stackoverflow on Elasticsearch file indexation with ingest-attachment](https://discuss.elastic.co/t/stackoverflow-on-elasticsearch-file-indexation-with-ingest-attachment/253455)
**Author:** [@Mathulbrich](https://discuss.elastic.co/u/Mathulbrich)\ **Replies:** 7\ **Last updated:** [November 4, 2020, 8:11pm UTC](https://discuss.elastic.co/t/stackoverflow-on-elasticsearch-file-indexation-with-ingest-attachment/253455 "2020-11-04T20:11:59Z")
Hi, Our company recently had some connectivity issues with Elasticsearch. Suddenly, on some days of the week the cluster had RED status and in the logs the only information found was that the node had been disconnected. … --- ## [Get documents for Kibana visualizations/dashboard](https://discuss.elastic.co/t/get-documents-for-kibana-visualizations-dashboard/254319)
**Author:** [@Agenobarb](https://discuss.elastic.co/u/Agenobarb)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 7:47pm UTC](https://discuss.elastic.co/t/get-documents-for-kibana-visualizations-dashboard/254319 "2020-11-04T19:47:59Z")
Hi! I created a dashboard containg a couple of visualizations (Line, Timelion) where I can check how my web app perofrms. However, when I see the problem in the dashboard, I'd like to locate it further, i.e. I need to ge… --- ## [Searches from Kinbana Consle return all results and ignoring filtering](https://discuss.elastic.co/t/searches-from-kinbana-consle-return-all-results-and-ignoring-filtering/253858)
**Author:** [@Ofir\_Edi](https://discuss.elastic.co/u/Ofir_Edi)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 6:09pm UTC](https://discuss.elastic.co/t/searches-from-kinbana-consle-return-all-results-and-ignoring-filtering/253858 "2020-11-04T18:09:49Z")
Hi, i have been using Elasticsearch for a while and recently started to use Kibana. I have a strange issue when using the Kibana console. it seems like no matter what i do i always get all the results from an index reg… --- ## [Upgrade Assistant showing critical message](https://discuss.elastic.co/t/upgrade-assistant-showing-critical-message/254301)
**Author:** [@rudraram](https://discuss.elastic.co/u/rudraram)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 5:41pm UTC](https://discuss.elastic.co/t/upgrade-assistant-showing-critical-message/254301 "2020-11-04T17:41:20Z")
Hi Team, Wondering how to resolve this critical warning in Upgrade Assitant currently we are on elasticsearch 6.8 version and planning to upgrade to Elastic 7.9 I see following message tagged as critical " Bulk threa… --- ## [Syslog Filter Plugin](https://discuss.elastic.co/t/syslog-filter-plugin/254187)
**Author:** [@Clay\_Curtis](https://discuss.elastic.co/u/Clay_Curtis)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 4:53pm UTC](https://discuss.elastic.co/t/syslog-filter-plugin/254187 "2020-11-04T16:53:27Z")
I am building a logging pipeline and there is a syslog collector that is depositing raw syslog messages into a Kafka topic. I would usually accept syslog off the wire by using the Logstash syslog input plugin which handl… --- ## [Using PKI based auth for a cluster created with elastic cloud on k8S](https://discuss.elastic.co/t/using-pki-based-auth-for-a-cluster-created-with-elastic-cloud-on-k8s/254245)
**Author:** [@boranx](https://discuss.elastic.co/u/boranx)\ **Replies:** 4\ **Last updated:** [November 4, 2020, 4:46pm UTC](https://discuss.elastic.co/t/using-pki-based-auth-for-a-cluster-created-with-elastic-cloud-on-k8s/254245 "2020-11-04T16:46:13Z")
Hey folks! I'd like to ask if using PKI for elastic cloud on k8S is possible or not. I want to authenticate without a password but using the key and cert file. --- ## [Elastic Enterprise Search - Workplace search page based indexing possible?](https://discuss.elastic.co/t/elastic-enterprise-search-workplace-search-page-based-indexing-possible/254214)
**Author:** [@ELKUser111](https://discuss.elastic.co/u/ELKUser111)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 4:32pm UTC](https://discuss.elastic.co/t/elastic-enterprise-search-workplace-search-page-based-indexing-possible/254214 "2020-11-04T16:32:09Z")
Is it possible to use Workplace search for getting the occurrence of the document page number, or navigating to the matched page while opening the document from the search result? --- ## [ECK update instructions are incomplete](https://discuss.elastic.co/t/eck-update-instructions-are-incomplete/253830)
**Author:** [@data\_smith](https://discuss.elastic.co/u/data_smith)\ **Replies:** 8\ **Last updated:** [November 4, 2020, 4:07pm UTC](https://discuss.elastic.co/t/eck-update-instructions-are-incomplete/253830 "2020-11-04T16:07:06Z")
The only update instructions for ECK that i've found are just kubectl apply -f and you're good to go. It's not that simple. For example I install the operator in specific namespaces because I don't want the operator… --- ## [File Input from directory with 100K files](https://discuss.elastic.co/t/file-input-from-directory-with-100k-files/254195)
**Author:** [@surphix](https://discuss.elastic.co/u/surphix)\ **Replies:** 4\ **Last updated:** [November 4, 2020, 2:40pm UTC](https://discuss.elastic.co/t/file-input-from-directory-with-100k-files/254195 "2020-11-04T14:40:19Z")
Hey first time posting here and looking for some understandings. I have a logstash config that is trying to read a directory containing over 100,000 files. I've ran trace logs and even with sincedb\_path set to /dev/null… --- ## [Combining proximity with min number of words](https://discuss.elastic.co/t/combining-proximity-with-min-number-of-words/254283)
**Author:** [@flm](https://discuss.elastic.co/u/flm)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 2:18pm UTC](https://discuss.elastic.co/t/combining-proximity-with-min-number-of-words/254283 "2020-11-04T14:18:33Z")
Is there a way to create a query to match a minimum number of words from a sentence, with the additional condition that the matching words must be at a maximum total distance from each other? Here's an example: Searchi… --- ## [ELK integration with Service now](https://discuss.elastic.co/t/elk-integration-with-service-now/251770)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 2\ **Last updated:** [November 4, 2020, 1:40pm UTC](https://discuss.elastic.co/t/elk-integration-with-service-now/251770 "2020-11-04T13:40:38Z")
HI Team, I hope everyone safe on this pandemic situation. My question is how to integrate ELK with ServiceNow. Currently, we are using version 6.4 and task is if any error code in logs get indexed in ES or logs are fa… --- ## [How to Handle Index Template Changes with Data Streams](https://discuss.elastic.co/t/how-to-handle-index-template-changes-with-data-streams/254273)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 1:35pm UTC](https://discuss.elastic.co/t/how-to-handle-index-template-changes-with-data-streams/254273 "2020-11-04T13:35:49Z")
Hi All, I was wondering if there is any guidance on handle index template changes with data streams. Currently with regular indexes the guidance seems to be add a version number to part of the index name (ie: 7.9.3 or x… --- ## [Is it possible to index Files (PDF, DOC, PPT) using App Search?](https://discuss.elastic.co/t/is-it-possible-to-index-files-pdf-doc-ppt-using-app-search/254213)
**Author:** [@ELKUser111](https://discuss.elastic.co/u/ELKUser111)\ **Replies:** 4\ **Last updated:** [November 4, 2020, 1:24pm UTC](https://discuss.elastic.co/t/is-it-possible-to-index-files-pdf-doc-ppt-using-app-search/254213 "2020-11-04T13:24:01Z")
I would like to use App Search for searching files from the server folder, Is it possible to feed this to Elastic Enterprise Search - App Search as a document using ingest-attachment-plugin. My server is NodeJS, also I … --- ## [SIEM rule override not working as expected](https://discuss.elastic.co/t/siem-rule-override-not-working-as-expected/253933)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 6\ **Last updated:** [November 4, 2020, 12:55pm UTC](https://discuss.elastic.co/t/siem-rule-override-not-working-as-expected/253933 "2020-11-04T12:55:22Z")
Hello, Recently tried to use the severity overrides functionality for a SIEM rule, but this doesn't seem to work as expected. While trying to find what's going wrong I'd like to point out several things: When editing… --- ## [Elasticsearch Hight used CPU](https://discuss.elastic.co/t/elasticsearch-hight-used-cpu/254181)
**Author:** [@ASRLO](https://discuss.elastic.co/u/ASRLO)\ **Replies:** 2\ **Last updated:** [November 4, 2020, 12:50pm UTC](https://discuss.elastic.co/t/elasticsearch-hight-used-cpu/254181 "2020-11-04T12:50:10Z")
Hello everybody, I have a question about elasticsearch and logstash. At the resource levels I find that elasticsearch and logtash use too much CPU and I wonder if like filebeat and its max\_procs: it is possible to do t… --- ## [If there are 2 replicas do they need to be in 2 seperate nodes](https://discuss.elastic.co/t/if-there-are-2-replicas-do-they-need-to-be-in-2-seperate-nodes/254268)
**Author:** [@tkumark](https://discuss.elastic.co/u/tkumark)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 12:41pm UTC](https://discuss.elastic.co/t/if-there-are-2-replicas-do-they-need-to-be-in-2-seperate-nodes/254268 "2020-11-04T12:41:17Z")
The health is yellow. I have a 2 node cluster for Elastic search and the health is in yellow. It looks like there are 10 primary shards and 2 replicas (i.e 2 reaplicas per primary shard so that mean 20 replica shards). I… --- ## [Shards unassigned for .kibana\_task\_manager index in cluster](https://discuss.elastic.co/t/shards-unassigned-for-kibana-task-manager-index-in-cluster/254147)
**Author:** [@guest123](https://discuss.elastic.co/u/guest123)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 12:26pm UTC](https://discuss.elastic.co/t/shards-unassigned-for-kibana-task-manager-index-in-cluster/254147 "2020-11-04T12:26:58Z")
Hi, running 3 nodes cluster in prod workload, having problem with .kibana\_task\_manager index in red state, ran cluster/allocation api came to know 2 of the shards unassigned here is the response. for workaround this ca… --- ## [Logstash - JDBC ERROR](https://discuss.elastic.co/t/logstash-jdbc-error/254160)
**Author:** [@peledev](https://discuss.elastic.co/u/peledev)\ **Replies:** 4\ **Last updated:** [November 4, 2020, 12:07pm UTC](https://discuss.elastic.co/t/logstash-jdbc-error/254160 "2020-11-04T12:07:18Z")
Hello , Im using logstash in a linux server I have installed the latest update for logstash on my server And also jdbc installed Ever since the update im unable to run jdbc output I get an error in the log : 'Prefo… --- ## [Decoding base64 logs when input is in JSON format?](https://discuss.elastic.co/t/decoding-base64-logs-when-input-is-in-json-format/254042)
**Author:** [@Mudabbir](https://discuss.elastic.co/u/Mudabbir)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 11:52am UTC](https://discuss.elastic.co/t/decoding-base64-logs-when-input-is-in-json-format/254042 "2020-11-04T11:52:38Z")
Greetings ! I am unable to decode my base64 logs that are coming from nxlog server. Here is my logstash configuration. The error i am getting is shown below The log field is in base64 I have tried cipher filt… --- ## [Logstash not generating any output: "Class path contains multiple SLF4J bindings." error](https://discuss.elastic.co/t/logstash-not-generating-any-output-class-path-contains-multiple-slf4j-bindings-error/254262)
**Author:** [@Silvia\_Koleva](https://discuss.elastic.co/u/Silvia_Koleva)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 11:34am UTC](https://discuss.elastic.co/t/logstash-not-generating-any-output-class-path-contains-multiple-slf4j-bindings-error/254262 "2020-11-04T11:34:17Z")
Hello, I am trying to configure Logstash to collect data from filebeat, where itgets some SharePoint ULS logs and then push them to Elasticsearch with applying some filters. The issue I have is when I run the logstash s… --- ## [Creating a Logstash Module](https://discuss.elastic.co/t/creating-a-logstash-module/254261)
**Author:** [@Avarjana](https://discuss.elastic.co/u/Avarjana)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 11:31am UTC](https://discuss.elastic.co/t/creating-a-logstash-module/254261 "2020-11-04T11:31:56Z")
I need to create a Logstash module like : these. I want to know, Is that possible and if so, where can I find a guide? If not possible, what are the workarounds to bundle my ELK project to be available as an integratio… --- ## [Security overview doesn't show any data](https://discuss.elastic.co/t/security-overview-doesnt-show-any-data/246099)
**Author:** [@s\_elk](https://discuss.elastic.co/u/s_elk)\ **Replies:** 5\ **Last updated:** [November 4, 2020, 12:54am UTC](https://discuss.elastic.co/t/security-overview-doesnt-show-any-data/246099 "2020-11-04T00:54:24Z")
Hi, I've installed the new version 7.9. I've 4 hosts (Linux/Windows) online in my Fleet tab under Ingest Manager (I've installed elastic agent correctly on them) with some active integrations (Elastic Endpoint Security… --- ## [How to work with event "message" in Java filter plugin?](https://discuss.elastic.co/t/how-to-work-with-event-message-in-java-filter-plugin/254258)
**Author:** [@toni1](https://discuss.elastic.co/u/toni1)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 11:17am UTC](https://discuss.elastic.co/t/how-to-work-with-event-message-in-java-filter-plugin/254258 "2020-11-04T11:17:18Z")
Hi, I am developing a Java Filter Plugin to merge different CSVs, and as I'm trying to process them, I need to extract the message field (which contains the whole CSV line). How am I supposed to do so using Java langua… --- ## [Custom sorting with an Elasticsearch query?](https://discuss.elastic.co/t/custom-sorting-with-an-elasticsearch-query/254229)
**Author:** [@kumar.kapil](https://discuss.elastic.co/u/kumar.kapil)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 11:16am UTC](https://discuss.elastic.co/t/custom-sorting-with-an-elasticsearch-query/254229 "2020-11-04T11:16:20Z")
I have some documents indexed on Elasticsearch, looking like these samples: {'id': 1, 'user\_group\_id': 1, 'is\_popular': false, 'added\_at': '2020-10-05T10:27:59.214Z'} {'id': 2, 'user\_group\_id': 2, 'is\_popular': false, '… --- ## [Failed to detect running cluster - instance was not detected as running in time](https://discuss.elastic.co/t/failed-to-detect-running-cluster-instance-was-not-detected-as-running-in-time/254257)
**Author:** [@mesiasc](https://discuss.elastic.co/u/mesiasc)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 11:14am UTC](https://discuss.elastic.co/t/failed-to-detect-running-cluster-instance-was-not-detected-as-running-in-time/254257 "2020-11-04T11:14:33Z")
I have ECE 2.5.1 with over 30GB capacity spare over 3 zones. I am unable to create new clusters, the full message is: Plan change failed: \[ClusterFailure:InstanceDidNotStartWhileWaitingForRunning\]: Failed to detect runn… --- ## [Find Dates with offset](https://discuss.elastic.co/t/find-dates-with-offset/254244)
**Author:** [@Aquilino\_Viveiros](https://discuss.elastic.co/u/Aquilino_Viveiros)\ **Replies:** 2\ **Last updated:** [November 4, 2020, 10:45am UTC](https://discuss.elastic.co/t/find-dates-with-offset/254244 "2020-11-04T10:45:42Z")
Hello, hopefully someone can help me on this. Consider the following mapping { "dateOfBirth": { "properties": { "value": { "type": "date", "format": "dateOptionalTime" } } } } A… --- ## [How to replace Non-breaking space](https://discuss.elastic.co/t/how-to-replace-non-breaking-space/254249)
**Author:** [@Chetan\_Ambi](https://discuss.elastic.co/u/Chetan_Ambi)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 10:41am UTC](https://discuss.elastic.co/t/how-to-replace-non-breaking-space/254249 "2020-11-04T10:41:22Z")
Could someone please help how to to replace Non-breaking space with regular space. I referred this but its not working. GET /\_analyze { "tokenizer": "keyword", "char\_filter": \[ { "type": "mapping", … --- ## [Unexpected indices being created by Logstash](https://discuss.elastic.co/t/unexpected-indices-being-created-by-logstash/254230)
**Author:** [@Philip\_Colmer](https://discuss.elastic.co/u/Philip_Colmer)\ **Replies:** 9\ **Last updated:** [November 4, 2020, 10:36am UTC](https://discuss.elastic.co/t/unexpected-indices-being-created-by-logstash/254230 "2020-11-04T10:36:13Z")
I'm using Logstash to ingest logs stored on AWS S3. My configuration file looks like this: input { s3 { "access\_key\_id" =\> "REDACTED" "secret\_access\_key" =\> "REDACTED" … --- ## [When I use scripted field and error show "runtime error" and "illegal\_argument\_exception"](https://discuss.elastic.co/t/when-i-use-scripted-field-and-error-show-runtime-error-and-illegal-argument-exception/253647)
**Author:** [@beam5544](https://discuss.elastic.co/u/beam5544)\ **Replies:** 7\ **Last updated:** [November 4, 2020, 10:26am UTC](https://discuss.elastic.co/t/when-i-use-scripted-field-and-error-show-runtime-error-and-illegal-argument-exception/253647 "2020-11-04T10:26:20Z")
When I use this script doc\['reqBody'\].length And I go to "Discover" page to show that field, and this happened. { "took": 201, "timed\_out": false, "num\_reduce\_phases": 92, "\_shards": { "total": 672, "s… --- ## ["query\_string" Wildcard search with special characters issue](https://discuss.elastic.co/t/query-string-wildcard-search-with-special-characters-issue/254068)
**Author:** [@Anas1](https://discuss.elastic.co/u/Anas1)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 10:15am UTC](https://discuss.elastic.co/t/query-string-wildcard-search-with-special-characters-issue/254068 "2020-11-04T10:15:10Z")
When searching using a wildcard words, i have an unexpected behavior. I'm working on ES 5.6.8. To reproduce the issue: (Test with Kibana) - create the index : PUT my-index-00001 { "mappings": { "test": {… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1165) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1167)