# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1167 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1168 --- ## [Can't create indices](https://discuss.elastic.co/t/cant-create-indices/254204)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 6\ **Last updated:** [November 4, 2020, 10:08am UTC](https://discuss.elastic.co/t/cant-create-indices/254204 "2020-11-04T10:08:37Z")
setup elk version 7.9.3 cannot create index logstash show me warning \[logstash.outputs.elasticsearch\]\[main\]\[27fb9d77028509eff9b3e4ec584ce0c8528c70f76c962e4e94e144a725a5b964\] Could not index event to Elasticsearch. {:st… --- ## [Change the order of my chart legend](https://discuss.elastic.co/t/change-the-order-of-my-chart-legend/254197)
**Author:** [@yanisyes](https://discuss.elastic.co/u/yanisyes)\ **Replies:** 2\ **Last updated:** [November 4, 2020, 9:56am UTC](https://discuss.elastic.co/t/change-the-order-of-my-chart-legend/254197 "2020-11-04T09:56:59Z")
Hi, Is there a way to make the legend appear in the order that I want (I'm using Kibana 7.6.1): I want the legend to appear in this order: \[0\] 0 sec \[1\] 1 sec \[2\] 2 sec \[3\] 3-4 sec \[4\] 5-6 sec \[5\] 7-9 sec \[6\]… --- ## [Logstash output best practice](https://discuss.elastic.co/t/logstash-output-best-practice/253690)
**Author:** [@anon42972578](https://discuss.elastic.co/u/anon42972578)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 9:12am UTC](https://discuss.elastic.co/t/logstash-output-best-practice/253690 "2020-11-04T09:12:38Z")
Hello, we want to create a good scaling elastic cluster with: at least 3 master nodes coord nodes a lot of data nodes machine learning nodes ingest node ( for cases, where using logstash is not possible) also we have… --- ## [Elasticsearchの自動マッピングについて](https://discuss.elastic.co/t/elasticsearch/254208)
**Author:** [@vavan](https://discuss.elastic.co/u/vavan)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 9:07am UTC](https://discuss.elastic.co/t/elasticsearch/254208 "2020-11-04T09:07:54Z")
elastisearch7.8.1でシステムを構築しています。Index作成時、手動でKeyword型のマッピングをしています。 PUT /hoge\_index/\_mapping { "properties":{ "text\_data" : { "type" : "keyword" } } } このIndexに、データを投入します。 POST /hoge\_index/\_… --- ## [Import-Link to import csv over Kibana not existing](https://discuss.elastic.co/t/import-link-to-import-csv-over-kibana-not-existing/252530)
**Author:** [@Oli\_Jaschok](https://discuss.elastic.co/u/Oli_Jaschok)\ **Replies:** 5\ **Last updated:** [November 4, 2020, 9:07am UTC](https://discuss.elastic.co/t/import-link-to-import-csv-over-kibana-not-existing/252530 "2020-11-04T09:07:04Z")
After upgrading to 7.9.2 the link in Kibana home to import a csv directly doesn'exist. I have a basic license. Went this very useful feature to another position? The documentation says it should be still there... May an… --- ## [Stuck in Kibana home page](https://discuss.elastic.co/t/stuck-in-kibana-home-page/253286)
**Author:** [@Cad](https://discuss.elastic.co/u/Cad)\ **Replies:** 2\ **Last updated:** [November 4, 2020, 8:43am UTC](https://discuss.elastic.co/t/stuck-in-kibana-home-page/253286 "2020-11-04T08:43:18Z")
Hi, I want to install ELK on debian 9. I performed my installations from the elasticsearch-7.9.2-amd64.deb, kibana-7.9.2-amd64.deb and logstash-7.9.2.deb package. I don't see any errors when starting Elasticsearch and… --- ## [Elasticsearch 7.8.1 on Openshift 4.5 - 3 Pods](https://discuss.elastic.co/t/elasticsearch-7-8-1-on-openshift-4-5-3-pods/252758)
**Author:** [@bob1985](https://discuss.elastic.co/u/bob1985)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 8:32am UTC](https://discuss.elastic.co/t/elasticsearch-7-8-1-on-openshift-4-5-3-pods/252758 "2020-11-04T08:32:16Z")
Elasticsearch 7.8.1 on Openshift 4.5 - 3 Pods Hi, Can you please help on below error: "message": "master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster, and \[ \] is empty on this n… --- ## [Integration of Kibana dashboard in angular application](https://discuss.elastic.co/t/integration-of-kibana-dashboard-in-angular-application/254207)
**Author:** [@sam189](https://discuss.elastic.co/u/sam189)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 8:23am UTC](https://discuss.elastic.co/t/integration-of-kibana-dashboard-in-angular-application/254207 "2020-11-04T08:23:18Z")
I am looking to integrate kibana dashboard in my angular application. I have tried with the iframe approach by adding the iframe source code in my anguular app.Now I want to integrate the same without using iframe. I wan… --- ## [Performance issues when pushing data using the elastic API](https://discuss.elastic.co/t/performance-issues-when-pushing-data-using-the-elastic-api/253743)
**Author:** [@hugohendriks](https://discuss.elastic.co/u/hugohendriks)\ **Replies:** 4\ **Last updated:** [November 4, 2020, 7:52am UTC](https://discuss.elastic.co/t/performance-issues-when-pushing-data-using-the-elastic-api/253743 "2020-11-04T07:52:57Z")
Hi, we are using a service on-prem to post data to our elastic cluster in the cloud...hosted by elastic. Not so long ago we had 1 instance running on AWS in frankfurt to which we pushed data. We never experienced timeou… --- ## [Elastic Agent (Fleet Deployment) behind a proxy](https://discuss.elastic.co/t/elastic-agent-fleet-deployment-behind-a-proxy/254183)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 6\ **Last updated:** [November 4, 2020, 7:42am UTC](https://discuss.elastic.co/t/elastic-agent-fleet-deployment-behind-a-proxy/254183 "2020-11-04T07:42:02Z")
Hi, I'm testing the generic elastic agent with the endpoint security integration. I had some problems because I'm using a custom CA, but luckily the tips in https://github.com/elastic/kibana/issues/73483 helped me and … --- ## [How to create a separate index which has only required fields](https://discuss.elastic.co/t/how-to-create-a-separate-index-which-has-only-required-fields/253125)
**Author:** [@Ronnie16](https://discuss.elastic.co/u/Ronnie16)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 5:26am UTC](https://discuss.elastic.co/t/how-to-create-a-separate-index-which-has-only-required-fields/253125 "2020-11-04T05:26:54Z")
I have ELK cluster setup and i delete indices older than 10 days but i want to create a separate index which only has 1 required field so that it is always present . The main index has huge data and multiple fields, i o… --- ## [Error logstash stop command](https://discuss.elastic.co/t/error-logstash-stop-command/254212)
**Author:** [@peledev](https://discuss.elastic.co/u/peledev)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 6:42am UTC](https://discuss.elastic.co/t/error-logstash-stop-command/254212 "2020-11-04T06:42:59Z")
every time i stop logstash service i get failed eventualy it stops the service but not proprly this is whar i get: \[root@vrl-logapp2 logstash\]# logstash\_status ● logstash.service - logstash Loaded: loaded (/etc/syst… --- ## [Logstash Server Location](https://discuss.elastic.co/t/logstash-server-location/254115)
**Author:** [@Karl\_Ofeiche](https://discuss.elastic.co/u/Karl_Ofeiche)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 6:30am UTC](https://discuss.elastic.co/t/logstash-server-location/254115 "2020-11-04T06:30:40Z")
Hello all, I'm building an ELK-Kubernetes environment for an enterprise, and I'm installing Beats on their PCs, servers, network components... and the data center where I'll store and configure my ElasticSearch and Kiba… --- ## [How to parse WebSphere SystemErr log in logstash](https://discuss.elastic.co/t/how-to-parse-websphere-systemerr-log-in-logstash/252323)
**Author:** [@eubarkana](https://discuss.elastic.co/u/eubarkana)\ **Replies:** 14\ **Last updated:** [November 4, 2020, 6:18am UTC](https://discuss.elastic.co/t/how-to-parse-websphere-systemerr-log-in-logstash/252323 "2020-11-04T06:18:37Z")
IBM WebSphere logs include SystemOut and SystemErr logs for a JVM. Each message in SystemOut is enabled with timestamp that can be parsed with logstash. Exceptions in this log has stack trace but does not include timesta… --- ## [TransportError: TransportError(429, 'circuit\_breaking\_exception', '\[parent\] Data too large,](https://discuss.elastic.co/t/transporterror-transporterror-429-circuit-breaking-exception-parent-data-too-large/254161)
**Author:** [@subham\_p](https://discuss.elastic.co/u/subham_p)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 5:58am UTC](https://discuss.elastic.co/t/transporterror-transporterror-429-circuit-breaking-exception-parent-data-too-large/254161 "2020-11-04T05:58:53Z")
elasticsearch Version: 7.8.0 Summary: Python client for Elasticsearch TransportError: TransportError(429, 'circuit\_breaking\_exception', '\[parent\] Data too large, data for \[\\] would be \[2128807074/1.9gb\], … --- ## [How to use match\_phrase and fuzzy query at the same time](https://discuss.elastic.co/t/how-to-use-match-phrase-and-fuzzy-query-at-the-same-time/254201)
**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 5:10am UTC](https://discuss.elastic.co/t/how-to-use-match-phrase-and-fuzzy-query-at-the-same-time/254201 "2020-11-04T05:10:11Z")
I'd like to search documents by phrases and do not need to match all the words included in the phrases, but only some (specified) words / characters. For example, { "match\_phrase": { "target\_field": { "query… --- ## [OAuth2.0 support for http\_poller input plugin](https://discuss.elastic.co/t/oauth2-0-support-for-http-poller-input-plugin/254199)
**Author:** [@pankaj](https://discuss.elastic.co/u/pankaj)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 5:34am UTC](https://discuss.elastic.co/t/oauth2-0-support-for-http-poller-input-plugin/254199 "2020-11-04T05:34:59Z")
Hello Team I would like to know how to configure the OAuth2.0 in http\_poller input . --- ## [Same ES cluster for non prod environments (for both dev and qa)](https://discuss.elastic.co/t/same-es-cluster-for-non-prod-environments-for-both-dev-and-qa/253937)
**Author:** [@kcs08](https://discuss.elastic.co/u/kcs08)\ **Replies:** 4\ **Last updated:** [November 4, 2020, 5:33am UTC](https://discuss.elastic.co/t/same-es-cluster-for-non-prod-environments-for-both-dev-and-qa/253937 "2020-11-04T05:33:19Z")
Hello, I have setup Elasticsearch (ES) cluster and using it for dev environment with set of indexes. And wanted to use the same ES cluster for qa environment as well. I mean two different environments with same index na… --- ## [BulkIndexError: ('200 document(s) failed to index.'](https://discuss.elastic.co/t/bulkindexerror-200-document-s-failed-to-index/253780)
**Author:** [@subham\_p](https://discuss.elastic.co/u/subham_p)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 5:24am UTC](https://discuss.elastic.co/t/bulkindexerror-200-document-s-failed-to-index/253780 "2020-11-04T05:24:32Z")
Hello Team, I am trying to push approx 10000 data by converting the pandas data frame to elk. But it fails to push all, some times it showing following error failed to establish a new connection errno 111 connection r… --- ## [Bulk Request java.lang.InterruptedException concurrency issue](https://discuss.elastic.co/t/bulk-request-java-lang-interruptedexception-concurrency-issue/253850)
**Author:** [@rex-remind](https://discuss.elastic.co/u/rex-remind)\ **Replies:** 4\ **Last updated:** [November 4, 2020, 4:40am UTC](https://discuss.elastic.co/t/bulk-request-java-lang-interruptedexception-concurrency-issue/253850 "2020-11-04T04:40:51Z")
Hello, Context: We have a simple Flink job (v1.11.2 in Scala) from Kafka to ES using the Table api with just 2 joins before writing to ES. It uses the Flink Elasticsearch Connector which under the hood uses the Java ES… --- ## [Timestamp differs by 6 seconds between Kafka record timestamp and the elasticsearch index timestamp](https://discuss.elastic.co/t/timestamp-differs-by-6-seconds-between-kafka-record-timestamp-and-the-elasticsearch-index-timestamp/254056)
**Author:** [@Strive](https://discuss.elastic.co/u/Strive)\ **Replies:** 6\ **Last updated:** [November 4, 2020, 4:20am UTC](https://discuss.elastic.co/t/timestamp-differs-by-6-seconds-between-kafka-record-timestamp-and-the-elasticsearch-index-timestamp/254056 "2020-11-04T04:20:46Z")
Hi, There is a ~6 seconds difference in the @timestamp field sent to elasticsearch through Kafka. Here are the details: The JSON object is built in java and is published to Kafka. The Logstash consumes data from Kafk… --- ## [@timestamp filter missing in Kibana time filter field](https://discuss.elastic.co/t/timestamp-filter-missing-in-kibana-time-filter-field/254191)
**Author:** [@rajdevworks](https://discuss.elastic.co/u/rajdevworks)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 3:08am UTC](https://discuss.elastic.co/t/timestamp-filter-missing-in-kibana-time-filter-field/254191 "2020-11-04T03:08:52Z")
Kibana 6.8.12 management Logs are ingested using curl curl -v -XPOST 'http://localhost:9200/missing1/\_doc/\_bulk?pretty' -H 'Content-Type: application/json' --data-binary @missing Why is @timestamp missing in the list… --- ## [Intermittent proxy errors in Kibana 7.9.3 stack monitoring through Apache httpd](https://discuss.elastic.co/t/intermittent-proxy-errors-in-kibana-7-9-3-stack-monitoring-through-apache-httpd/254073)
**Author:** [@retzkek](https://discuss.elastic.co/u/retzkek)\ **Replies:** 2\ **Last updated:** [November 3, 2020, 11:29pm UTC](https://discuss.elastic.co/t/intermittent-proxy-errors-in-kibana-7-9-3-stack-monitoring-through-apache-httpd/254073 "2020-11-03T23:29:24Z")
We recently upgraded one of our clusters to 7.9.3 (from 6.8.12), and I'm now seeing frequent, but intermittent, proxy errors while in stack monitoring. For instance here is a screenshot of a minute or so in the monitorin… --- ## [Regex performance with logstash using more general match](https://discuss.elastic.co/t/regex-performance-with-logstash-using-more-general-match/253917)
**Author:** [@vinci](https://discuss.elastic.co/u/vinci)\ **Replies:** 9\ **Last updated:** [November 3, 2020, 10:34pm UTC](https://discuss.elastic.co/t/regex-performance-with-logstash-using-more-general-match/253917 "2020-11-03T22:34:50Z")
Hi, I was wondering about regex performance in general and in particular with logstash and grok. I'm currently trying to parse firewall logs sent through the syslog protocol which mainly contains keys and values (a key… --- ## [Фильтр Logstash](https://discuss.elastic.co/t/logstash/254124)
**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\ **Replies:** 1\ **Last updated:** [November 3, 2020, 10:17pm UTC](https://discuss.elastic.co/t/logstash/254124 "2020-11-03T22:17:08Z")
Есть задача, нужно из файла(предпочтительно) искать информацию по значению поля из сообщения. Например: есть файл(данные разделены, например табуляцией), первое значение это номер, второе имя. Так вот, приходят данные в … --- ## [Search query is slow and first query always takes too much time](https://discuss.elastic.co/t/search-query-is-slow-and-first-query-always-takes-too-much-time/253652)
**Author:** [@Code\_Wizard](https://discuss.elastic.co/u/Code_Wizard)\ **Replies:** 9\ **Last updated:** [October 30, 2020, 12:31pm UTC](https://discuss.elastic.co/t/search-query-is-slow-and-first-query-always-takes-too-much-time/253652 "2020-10-30T12:31:02Z")
Hi, search queries are slow when i do should match with multiple search terms and also for matching nested documents, basically it is taking 7-10 sec for first query and 5-6 sec later on due to elasticsearch cache, but… --- ## [Elasticsearch - Not able to see the latest logs](https://discuss.elastic.co/t/elasticsearch-not-able-to-see-the-latest-logs/249801)
**Author:** [@chintushah46](https://discuss.elastic.co/u/chintushah46)\ **Replies:** 7\ **Last updated:** [November 3, 2020, 8:40pm UTC](https://discuss.elastic.co/t/elasticsearch-not-able-to-see-the-latest-logs/249801 "2020-11-03T20:40:04Z")
Hi, Looking for the reason of not having updated logs in the log file. I did the following sanity tests too, Checked the owner of the process Have enough resources, like memory as well as disk space Log file is gener… --- ## [Ctx.payload object data disappearing after inclusion of script\_field in watcher api](https://discuss.elastic.co/t/ctx-payload-object-data-disappearing-after-inclusion-of-script-field-in-watcher-api/254185)
**Author:** [@esguy](https://discuss.elastic.co/u/esguy)\ **Replies:** 0\ **Last updated:** [November 3, 2020, 7:53pm UTC](https://discuss.elastic.co/t/ctx-payload-object-data-disappearing-after-inclusion-of-script-field-in-watcher-api/254185 "2020-11-03T19:53:45Z")
Hello, I'm having an issue where the data in my ctx.payload object is disappearing after I include "script\_field" in my watcher. The watcher executes perfectly fine with the desired output when the "script\_field" field … --- ## [Search\_as\_you\_type and highlight](https://discuss.elastic.co/t/search-as-you-type-and-highlight/253010)
**Author:** [@wos](https://discuss.elastic.co/u/wos)\ **Replies:** 2\ **Last updated:** [November 3, 2020, 6:35pm UTC](https://discuss.elastic.co/t/search-as-you-type-and-highlight/253010 "2020-11-03T18:35:48Z")
I am looking for working example of a search\_as\_you\_type and highlight. Could Someone provide me with example? Thanks --- ## [Watcher, Creating a kibana watcher to check an integer\[0-9\] value appears in logs in a give period of time](https://discuss.elastic.co/t/watcher-creating-a-kibana-watcher-to-check-an-integer-0-9-value-appears-in-logs-in-a-give-period-of-time/252589)
**Author:** [@fredrick.bb](https://discuss.elastic.co/u/fredrick.bb)\ **Replies:** 5\ **Last updated:** [November 3, 2020, 4:58pm UTC](https://discuss.elastic.co/t/watcher-creating-a-kibana-watcher-to-check-an-integer-0-9-value-appears-in-logs-in-a-give-period-of-time/252589 "2020-11-03T16:58:25Z")
Hi, I'm creating a kibana watcher to check an integer field has a value runs between 0 and 9. A field of type Integer, will have values between 0 through 9 on each record. The business conditions are, Each value sho… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1166) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1168)