# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1168 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1169 --- ## [Logstash does not send logs into the file](https://discuss.elastic.co/t/logstash-does-not-send-logs-into-the-file/254165)
**Author:** [@Andex](https://discuss.elastic.co/u/Andex)\ **Replies:** 4\ **Last updated:** [November 3, 2020, 4:35pm UTC](https://discuss.elastic.co/t/logstash-does-not-send-logs-into-the-file/254165 "2020-11-03T16:35:34Z")
Hi, from filebeat, i send log to logstash, if I listen in tcpdump I see the logs arrive but Logstash don't send Log tothe file i specified in the pipelines, this is the Pipelines : input { beats { port =\> 5044 } } … --- ## [Connections Graph](https://discuss.elastic.co/t/connections-graph/253214)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 5\ **Last updated:** [November 3, 2020, 4:32pm UTC](https://discuss.elastic.co/t/connections-graph/253214 "2020-11-03T16:32:56Z")
It is possible some easy way (I know that are there some special possibilites but it is too much for me) to create in Kibana network connections graph? Something like: --- ## [New Installation Kibana 500 Internal Server Error](https://discuss.elastic.co/t/new-installation-kibana-500-internal-server-error/252720)
**Author:** [@KNXLabGeek](https://discuss.elastic.co/u/KNXLabGeek)\ **Replies:** 4\ **Last updated:** [November 3, 2020, 4:28pm UTC](https://discuss.elastic.co/t/new-installation-kibana-500-internal-server-error/252720 "2020-11-03T16:28:56Z")
I am new to elastic search and having a problem narrowing down the issue. I have followed the install instructions verbatim and this is my 3rd attempt and after installing Kibana I hit the same issue. I am doing a new in… --- ## [How to limit logging to only 3 months](https://discuss.elastic.co/t/how-to-limit-logging-to-only-3-months/253025)
**Author:** [@Craig2188](https://discuss.elastic.co/u/Craig2188)\ **Replies:** 3\ **Last updated:** [November 3, 2020, 4:17pm UTC](https://discuss.elastic.co/t/how-to-limit-logging-to-only-3-months/253025 "2020-11-03T16:17:16Z")
Hi, I am trying to figure out how to limit the number of logs on Elastic/Kibana/Logstash to only hold 3 months worth of data. It is all installed on windows servers. --- ## [Import error and then unable to load Sample data in Kibana training environment](https://discuss.elastic.co/t/import-error-and-then-unable-to-load-sample-data-in-kibana-training-environment/253326)
**Author:** [@jic9004](https://discuss.elastic.co/u/jic9004)\ **Replies:** 3\ **Last updated:** [November 3, 2020, 4:16pm UTC](https://discuss.elastic.co/t/import-error-and-then-unable-to-load-sample-data-in-kibana-training-environment/253326 "2020-11-03T16:16:56Z")
Good morning, After going through the steps for Lab 9.3: Reporting and Saved Objects, I get the following error when trying to import the file export.json back (see image attached) . In addition, I am now not able to In… --- ## [Elasticsearch client for Update By Query API](https://discuss.elastic.co/t/elasticsearch-client-for-update-by-query-api/253956)
**Author:** [@bob3](https://discuss.elastic.co/u/bob3)\ **Replies:** 1\ **Last updated:** [November 3, 2020, 4:15pm UTC](https://discuss.elastic.co/t/elasticsearch-client-for-update-by-query-api/253956 "2020-11-03T16:15:35Z")
Hello. I'm trying to use Update By Query API for elasticsearch version 6.3. I can't use Java High Level REST Client because Update By Query API is supported by Java High Level REST Client starting from elasticsearch vers… --- ## [What is the downside of increasing index.mapping.total\_fields.limit dramatically?](https://discuss.elastic.co/t/what-is-the-downside-of-increasing-index-mapping-total-fields-limit-dramatically/253729)
**Author:** [@redec](https://discuss.elastic.co/u/redec)\ **Replies:** 5\ **Last updated:** [November 3, 2020, 3:53pm UTC](https://discuss.elastic.co/t/what-is-the-downside-of-increasing-index-mapping-total-fields-limit-dramatically/253729 "2020-11-03T15:53:04Z")
In my use case, I have dynamic fields in my documents which need to be searchable. Each document will only have a couple of these fields (so the total document size will never be massive). I will also only ever be search… --- ## [Error while running file configuration in Logstash - \*\*ERROR at line 4, column 19 (byte 62) after input {\\r\\nhttp\_poller {\\r\\n urls =\> {\\r\\n users ", :backtrace=\>\["C:/ELK/logstash-7.9.2/logstash-core/lib/logstash/compiler.rb:32:in \`compile\_imperative'"](https://discuss.elastic.co/t/error-while-running-file-configuration-in-logstash-error-at-line-4-column-19-byte-62-after-input-r-nhttp-poller-r-n-urls-r-n-users-backtrace-c-elk-logstash-7-9-2-logstash-core-lib-logstash-compiler-rbin-compile-imperative/254099)
**Author:** [@salma\_widiarti](https://discuss.elastic.co/u/salma_widiarti)\ **Replies:** 1\ **Last updated:** [November 3, 2020, 3:45pm UTC](https://discuss.elastic.co/t/error-while-running-file-configuration-in-logstash-error-at-line-4-column-19-byte-62-after-input-r-nhttp-poller-r-n-urls-r-n-users-backtrace-c-elk-logstash-7-9-2-logstash-core-lib-logstash-compiler-rbin-compile-imperative/254099 "2020-11-03T15:45:37Z")
Hi all, Can any guide me to create file configuration logstash with API? I've been using this syntax but i found error. input { http\_poller { urls =\> { users = { method =\> get url =\> "https://api.id/api/categories"… --- ## [Is there an elegant way of identifying mapping conflict exceptions programmatically?](https://discuss.elastic.co/t/is-there-an-elegant-way-of-identifying-mapping-conflict-exceptions-programmatically/254171)
**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\ **Replies:** 0\ **Last updated:** [November 3, 2020, 3:17pm UTC](https://discuss.elastic.co/t/is-there-an-elegant-way-of-identifying-mapping-conflict-exceptions-programmatically/254171 "2020-11-03T15:17:39Z")
Below are some sample errors that ES returns for mapping conflicts which don't have any info that I can rely on programmatically.. I can't even seem to do regex parsing since different scenarios have different messages. … --- ## [Java high-level REST client: There is no way to recover after a \`ContentTooLongException\` and \`IOReactorException\`](https://discuss.elastic.co/t/java-high-level-rest-client-there-is-no-way-to-recover-after-a-contenttoolongexception-and-ioreactorexception/254167)
**Author:** [@RomanWuattier](https://discuss.elastic.co/u/RomanWuattier)\ **Replies:** 0\ **Last updated:** [November 3, 2020, 2:49pm UTC](https://discuss.elastic.co/t/java-high-level-rest-client-there-is-no-way-to-recover-after-a-contenttoolongexception-and-ioreactorexception/254167 "2020-11-03T14:49:04Z")
Hi, version: 7.9.1 Context We are using the Java high-level REST client. When executing a search request, and the response's size exceeds the buffered heap, then a ContentTooLongException and IOReactorException are t… --- ## [Query documents to match a value in a sublist of a list](https://discuss.elastic.co/t/query-documents-to-match-a-value-in-a-sublist-of-a-list/253831)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 2\ **Last updated:** [November 3, 2020, 2:44pm UTC](https://discuss.elastic.co/t/query-documents-to-match-a-value-in-a-sublist-of-a-list/253831 "2020-11-03T14:44:55Z")
I am storing windows folder permissions in elastic as a document per folder, then each folder has a list of users that has access to this folder, and each user has list of permissions (accessmask) that is stored as a lis… --- ## [Not getting any response on POST and BULK requests](https://discuss.elastic.co/t/not-getting-any-response-on-post-and-bulk-requests/254155)
**Author:** [@kpiyush](https://discuss.elastic.co/u/kpiyush)\ **Replies:** 3\ **Last updated:** [November 3, 2020, 2:43pm UTC](https://discuss.elastic.co/t/not-getting-any-response-on-post-and-bulk-requests/254155 "2020-11-03T14:43:20Z")
Hi, As the title says, any post or bulk request, basically any writes is not working. I checked the cluster health and the status is green. I also checked for disk usage and more than half is available. I ran following… --- ## [What's different between reindexing an exist document and updating some field of document?](https://discuss.elastic.co/t/whats-different-between-reindexing-an-exist-document-and-updating-some-field-of-document/254152)
**Author:** [@DumpCat](https://discuss.elastic.co/u/DumpCat)\ **Replies:** 3\ **Last updated:** [November 3, 2020, 2:33pm UTC](https://discuss.elastic.co/t/whats-different-between-reindexing-an-exist-document-and-updating-some-field-of-document/254152 "2020-11-03T14:33:06Z")
If I have an exist document，is reindexing whole new document better than updating some field of document? --- ## [Script Params vs Constant Hash in Script](https://discuss.elastic.co/t/script-params-vs-constant-hash-in-script/254163)
**Author:** [@git-blame](https://discuss.elastic.co/u/git-blame)\ **Replies:** 0\ **Last updated:** [November 3, 2020, 2:26pm UTC](https://discuss.elastic.co/t/script-params-vs-constant-hash-in-script/254163 "2020-11-03T14:26:41Z")
I need to translate from one set of values to another. I would use the translate filter plugin but I need to keep the original value if no translation is found instead of nil. So my code is: TRANSLATE\_MAP = { "foo" =\> … --- ## [How to hide Filter options in Kibana Dashboard](https://discuss.elastic.co/t/how-to-hide-filter-options-in-kibana-dashboard/254142)
**Author:** [@sathish.mtech01](https://discuss.elastic.co/u/sathish.mtech01)\ **Replies:** 2\ **Last updated:** [November 3, 2020, 2:06pm UTC](https://discuss.elastic.co/t/how-to-hide-filter-options-in-kibana-dashboard/254142 "2020-11-03T14:06:27Z")
Is there any options in kibana to hide the red marked part in dashboard --- ## [Logstash of first node getting stopped after adding second node into cluster, added ilm\_enabled=false](https://discuss.elastic.co/t/logstash-of-first-node-getting-stopped-after-adding-second-node-into-cluster-added-ilm-enabled-false/253518)
**Author:** [@kkhadka](https://discuss.elastic.co/u/kkhadka)\ **Replies:** 3\ **Last updated:** [November 3, 2020, 2:01pm UTC](https://discuss.elastic.co/t/logstash-of-first-node-getting-stopped-after-adding-second-node-into-cluster-added-ilm-enabled-false/253518 "2020-11-03T14:01:43Z")
The ERROR logs are as follow: \[2020-10-12T17:52:25,998\]\[ERROR\]\[logstash.outputs.elasticsearch\]\[events\] Failed to install template. {:message=\>"Elasticsearch Unreachable: \[http://164.\*\*.185.202:9200/\]\[Manticore::SocketE… --- ## [Filter / query](https://discuss.elastic.co/t/filter-query/253772)
**Author:** [@peretz\_shlomi](https://discuss.elastic.co/u/peretz_shlomi)\ **Replies:** 3\ **Last updated:** [November 3, 2020, 1:40pm UTC](https://discuss.elastic.co/t/filter-query/253772 "2020-11-03T13:40:26Z")
Hello everyone i have a dashboard is consists number of visualize I want to filter some of visualize by the last value in a particular field. How can I do that? --- ## [IAM role ARN on AWS Destination](https://discuss.elastic.co/t/iam-role-arn-on-aws-destination/254081)
**Author:** [@alfredo.deluca](https://discuss.elastic.co/u/alfredo.deluca)\ **Replies:** 1\ **Last updated:** [November 3, 2020, 1:12pm UTC](https://discuss.elastic.co/t/iam-role-arn-on-aws-destination/254081 "2020-11-03T13:12:18Z")
Hi all. I have Elasticsearch on AWS and I setup a destination for the alerting to go to AWS SNS. In the configuration it asks 2 settings: SNS Topic ARN and it's should be ok but also it asks about IAM role ARN which … --- ## [How to fetch date time range in markdown?](https://discuss.elastic.co/t/how-to-fetch-date-time-range-in-markdown/253776)
**Author:** [@Abhi6](https://discuss.elastic.co/u/Abhi6)\ **Replies:** 3\ **Last updated:** [November 3, 2020, 1:03pm UTC](https://discuss.elastic.co/t/how-to-fetch-date-time-range-in-markdown/253776 "2020-11-03T13:03:23Z")
I am trying in this way \[Open\]\[1\] \[1\]:https://xyz.com/from?{{params.\_timestamp}} But it's not working. Thanks in advance !! --- ## [Logstash and ILM - rollover not working](https://discuss.elastic.co/t/logstash-and-ilm-rollover-not-working/253530)
**Author:** [@BBQigniter](https://discuss.elastic.co/u/BBQigniter)\ **Replies:** 6\ **Last updated:** [November 3, 2020, 12:33pm UTC](https://discuss.elastic.co/t/logstash-and-ilm-rollover-not-working/253530 "2020-11-03T12:33:39Z")
I please need help to understand ILM in combination with Logstash. My current setup somehow seems not to work as expected. Using ELK 7.9.1 - My configuration looks like: ILM policy - logstash-syslog-compliance { - "l… --- ## [Elasticsearch: Max virtual memory areas vm.max\_map\_count \[65530\] is too low, increase to at least \[262144\] Helm](https://discuss.elastic.co/t/elasticsearch-max-virtual-memory-areas-vm-max-map-count-65530-is-too-low-increase-to-at-least-262144-helm/254150)
**Author:** [@Sanjeev\_kumar\_N](https://discuss.elastic.co/u/Sanjeev_kumar_N)\ **Replies:** 0\ **Last updated:** [November 3, 2020, 12:10pm UTC](https://discuss.elastic.co/t/elasticsearch-max-virtual-memory-areas-vm-max-map-count-65530-is-too-low-increase-to-at-least-262144-helm/254150 "2020-11-03T12:10:55Z")
Hi Team, Trying to configure elastic search via helm chart. Please find the below are steps. helm create ele cat values.yaml imageELE: repository: X.X.X.X:8085/elasticsearch pullPolicy: IfNotPresent Overrides the i… --- ## [Will there be a new release of 6.x version mitigating CVE-2020-7018](https://discuss.elastic.co/t/will-there-be-a-new-release-of-6-x-version-mitigating-cve-2020-7018/246642)
**Author:** [@ManjunathMS35](https://discuss.elastic.co/u/ManjunathMS35)\ **Replies:** 1\ **Last updated:** [August 27, 2020, 2:48pm UTC](https://discuss.elastic.co/t/will-there-be-a-new-release-of-6-x-version-mitigating-cve-2020-7018/246642 "2020-08-27T14:48:25Z")
Hi, The CVE-2020-7018 has a fix in 7.9.0 version and the fix for users who couldn't update to this version is specified here Enterprise Search 7.9.0 security update I wanted to know if there will be a new release fixin… --- ## [Not seeing any pfsense logs](https://discuss.elastic.co/t/not-seeing-any-pfsense-logs/254145)
**Author:** [@Lusca\_lusca](https://discuss.elastic.co/u/Lusca_lusca)\ **Replies:** 4\ **Last updated:** [November 3, 2020, 11:48am UTC](https://discuss.elastic.co/t/not-seeing-any-pfsense-logs/254145 "2020-11-03T11:48:14Z")
I only need to display the Ips that are coming from a remote PFSENSE firewall on kibana but I couldn't do it, can anyone help me? input { beats { port =\> 5044 } } --- ## [More then one attached file in to index](https://discuss.elastic.co/t/more-then-one-attached-file-in-to-index/254133)
**Author:** [@lucrug](https://discuss.elastic.co/u/lucrug)\ **Replies:** 1\ **Last updated:** [November 3, 2020, 11:28am UTC](https://discuss.elastic.co/t/more-then-one-attached-file-in-to-index/254133 "2020-11-03T11:28:38Z")
Hi gays, can i define more then one attached (RFT) field in a index? This example is for one: PUT \_ingest/pipeline/attachment { "description" : "Extract attachment information", "processors" : \[ { "attac… --- ## [Mapping for dynamic JSON payload](https://discuss.elastic.co/t/mapping-for-dynamic-json-payload/254132)
**Author:** [@akihu](https://discuss.elastic.co/u/akihu)\ **Replies:** 4\ **Last updated:** [November 3, 2020, 11:22am UTC](https://discuss.elastic.co/t/mapping-for-dynamic-json-payload/254132 "2020-11-03T11:22:16Z")
Good day to everyone! I'm trying to send JSON formated data directly to elasticsearch by using elasticsearch python library but I'm having a fight here with the index mapping. How can one define dynamic mapping to JSON… --- ## [Logstash manticore worker error](https://discuss.elastic.co/t/logstash-manticore-worker-error/254137)
**Author:** [@Sivajanani](https://discuss.elastic.co/u/Sivajanani)\ **Replies:** 0\ **Last updated:** [November 3, 2020, 10:46am UTC](https://discuss.elastic.co/t/logstash-manticore-worker-error/254137 "2020-11-03T10:46:11Z")
I have installed logstash and am trying to run the following configuration, input { file { path =\>"C:\\Test\\CSV\\dev.csv" start\_position =\>"beginning" } } filter { csv { columns =\>\["Plugin","… --- ## [Unable to start Elasticsearch 7.6.2](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-6-2/254128)
**Author:** [@Laamimech\_Salah](https://discuss.elastic.co/u/Laamimech_Salah)\ **Replies:** 0\ **Last updated:** [November 3, 2020, 10:02am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-6-2/254128 "2020-11-03T10:02:45Z")
Hi, We are upgrading the ELK stack from v6.8.13 to v7.6.2 and we've encountered the following issue with OS Linux RHEL 7.1 : \[2020-11-02T15:44:00,757\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\]fatal error … --- ## [Find maximum and minimum time difference](https://discuss.elastic.co/t/find-maximum-and-minimum-time-difference/254126)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 0\ **Last updated:** [November 3, 2020, 9:51am UTC](https://discuss.elastic.co/t/find-maximum-and-minimum-time-difference/254126 "2020-11-03T09:51:59Z")
Hi All, Is there a way to find out the maximum and minimum time difference for 3rd column in the query below; whenever I am trying to order it by 3rd column I am getting below error Cannot order by non-grouped column Q… --- ## [Multi lingual support in kibana website](https://discuss.elastic.co/t/multi-lingual-support-in-kibana-website/254119)
**Author:** [@sathish.mtech01](https://discuss.elastic.co/u/sathish.mtech01)\ **Replies:** 2\ **Last updated:** [November 3, 2020, 9:26am UTC](https://discuss.elastic.co/t/multi-lingual-support-in-kibana-website/254119 "2020-11-03T09:26:53Z")
How to specify all three languages en,zh-CN, ja-JP in locale apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name: test-kibana namespace: staging spec: http: tls: selfSignedCertificate: disabled: tr… --- ## [.kibana Indices](https://discuss.elastic.co/t/kibana-indices/254120)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [November 3, 2020, 9:21am UTC](https://discuss.elastic.co/t/kibana-indices/254120 "2020-11-03T09:21:26Z")
I want to change .kibana indices shards and replicas but nothing works PUT /\_template/custom\_kibana { "index\_patterns": ".kibana\*", "order": 1, "settings": { "number\_of\_shards": 3, "number\_of\_replicas": 1 … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1167) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1169)