# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1188 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1189 --- ## [Logstash multiline codec with xml filter](https://discuss.elastic.co/t/logstash-multiline-codec-with-xml-filter/252593)
**Author:** [@Arvind\_Ks](https://discuss.elastic.co/u/Arvind_Ks)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 7:00pm UTC](https://discuss.elastic.co/t/logstash-multiline-codec-with-xml-filter/252593 "2020-10-19T19:00:08Z")
Hello Everyone i have a input xml file, that i am using to send to elasticsearch. i want all fields within and . However i am getting below error. pls suggest. Input file 2020-09-30 11:59:54,755 (Test worker) JobSch… --- ## [How to setup Refresh Interval for Kibana Dashboard](https://discuss.elastic.co/t/how-to-setup-refresh-interval-for-kibana-dashboard/252296)
**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 6:52pm UTC](https://discuss.elastic.co/t/how-to-setup-refresh-interval-for-kibana-dashboard/252296 "2020-10-19T18:52:07Z")
How to set up the Refresh Interval for Kibana Dashboard from its Saved Object. So that it will set for the rest of the time. Please find below the reference image where I want to set up the interval. Please suggest. T… --- ## [Doubts about extract field](https://discuss.elastic.co/t/doubts-about-extract-field/252558)
**Author:** [@rildo](https://discuss.elastic.co/u/rildo)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 6:31pm UTC](https://discuss.elastic.co/t/doubts-about-extract-field/252558 "2020-10-19T18:31:34Z")
Hello People , I have this code ´ ´ ´ input { stdin { } } output { stdout { codec =\> rubydebug } } filter { json { source =\> "message" } mutate { gsub =\> \[ "message" , "\\n", "," \] } mutate { gsub =\> \[ "messa… --- ## [Where should I drop records? And how?](https://discuss.elastic.co/t/where-should-i-drop-records-and-how/252383)
**Author:** [@mbuster](https://discuss.elastic.co/u/mbuster)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 6:18pm UTC](https://discuss.elastic.co/t/where-should-i-drop-records-and-how/252383 "2020-10-19T18:18:59Z")
Background: Sending Sonicwall syslog to Logstash in order to keep records on SSL VPN logins/logouts Sonicwall indices are accounting for a majority of my storage usage Need: Drop Sonicwall records based on specific … --- ## [Is it possible to export the Watch History (Alerts triggered by Watcher)?](https://discuss.elastic.co/t/is-it-possible-to-export-the-watch-history-alerts-triggered-by-watcher/252559)
**Author:** [@mdamera](https://discuss.elastic.co/u/mdamera)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 5:28pm UTC](https://discuss.elastic.co/t/is-it-possible-to-export-the-watch-history-alerts-triggered-by-watcher/252559 "2020-10-19T17:28:36Z")
Team, Is it possible to export the Watch History (Alerts triggered by Watcher) ? I am looking to find what are all the Alerts triggered by my watchers over a Period of time & would like to understand how many alerts f… --- ## [Дикий \_score в match\_phrase\_prefix](https://discuss.elastic.co/t/score-match-phrase-prefix/249658)
**Author:** [@GreenX](https://discuss.elastic.co/u/GreenX)\ **Replies:** 11\ **Last updated:** [October 19, 2020, 5:18pm UTC](https://discuss.elastic.co/t/score-match-phrase-prefix/249658 "2020-10-19T17:18:47Z")
Доброго времени суток! Изначально задача выдавать результат в зависимости от приоритета подзапроса. Соответвенно, был dis\_max c match\_phrase, match\_phrase\_prefix и так далее. С boost соответвующим приоритету. По нашей … --- ## [Kibana 7.0 and 7.8 : Date Histogram Auto interval does not appear for alias fields](https://discuss.elastic.co/t/kibana-7-0-and-7-8-date-histogram-auto-interval-does-not-appear-for-alias-fields/250452)
**Author:** [@Prathibha\_Y](https://discuss.elastic.co/u/Prathibha_Y)\ **Replies:** 4\ **Last updated:** [October 19, 2020, 5:12pm UTC](https://discuss.elastic.co/t/kibana-7-0-and-7-8-date-histogram-auto-interval-does-not-appear-for-alias-fields/250452 "2020-10-19T17:12:46Z")
Hi, In Visualisations, I have enabled alias fields for all data types, but if I select a date field alias in date histogram..auto interval does not come up..it looks like a bug to me, can anyone please look into it. T… --- ## [Edit index template settings](https://discuss.elastic.co/t/edit-index-template-settings/251142)
**Author:** [@mikejdunphy](https://discuss.elastic.co/u/mikejdunphy)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 5:07pm UTC](https://discuss.elastic.co/t/edit-index-template-settings/251142 "2020-10-19T17:07:10Z")
so I have 2 indexes created everyday on my elkstack filebeat-%{\[@metadata\]\[version\]}-2020.10.03 filebeat-7.9.2-2020.10.03 the filebeat-7.9.2-2020.10.03 is from the elk server itself and the other is from filebeat fro… --- ## [Text search in Kibana](https://discuss.elastic.co/t/text-search-in-kibana/249157)
**Author:** [@fredrick.bb](https://discuss.elastic.co/u/fredrick.bb)\ **Replies:** 1\ **Last updated:** [September 24, 2020, 5:02pm UTC](https://discuss.elastic.co/t/text-search-in-kibana/249157 "2020-09-24T17:02:33Z")
Hello, I have application log message with following details as message : " some message; partition=-1;offset=-1;lag=275545;RetryCount=0; some message ". All my message will have "lag=". "lag" is a key comes as a… --- ## [How to tag or star rows in kibana to find later](https://discuss.elastic.co/t/how-to-tag-or-star-rows-in-kibana-to-find-later/252426)
**Author:** [@dnides](https://discuss.elastic.co/u/dnides)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 4:11pm UTC](https://discuss.elastic.co/t/how-to-tag-or-star-rows-in-kibana-to-find-later/252426 "2020-10-19T16:11:09Z")
Trying to determine a way during log review to “tag”, “star”, or add a user defined comment so I can later simply search for those rows. Any such way of accomplishing this? Sounds like possibly via a plugin but how do I … --- ## [Running Two or more Elasticsearch clusters on one machine](https://discuss.elastic.co/t/running-two-or-more-elasticsearch-clusters-on-one-machine/252257)
**Author:** [@bretonj](https://discuss.elastic.co/u/bretonj)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 3:19pm UTC](https://discuss.elastic.co/t/running-two-or-more-elasticsearch-clusters-on-one-machine/252257 "2020-10-19T15:19:59Z")
I'm trying to get a second elasticsearch cluster running on a machine which already has a cluster. I have 7.9.2 installed on Ubuntu 18.04, and it's working properly. I created a new service file for the new cluster, new … --- ## [Elastic 7.10 field type "version"](https://discuss.elastic.co/t/elastic-7-10-field-type-version/252545)
**Author:** [@videns](https://discuss.elastic.co/u/videns)\ **Replies:** 4\ **Last updated:** [October 19, 2020, 3:00pm UTC](https://discuss.elastic.co/t/elastic-7-10-field-type-version/252545 "2020-10-19T15:00:11Z")
First, create new index with mappings, one field has type "version": curl -X PUT "localhost:9200/version\_test\_v2?pretty" -H 'Content-Type: application/json' -d' { "mappings": { "properties": { "version": { … --- ## [Installing xpack plugin on 7.7.1 elastic](https://discuss.elastic.co/t/installing-xpack-plugin-on-7-7-1-elastic/252397)
**Author:** [@txmrlevine](https://discuss.elastic.co/u/txmrlevine)\ **Replies:** 4\ **Last updated:** [October 19, 2020, 1:54pm UTC](https://discuss.elastic.co/t/installing-xpack-plugin-on-7-7-1-elastic/252397 "2020-10-19T13:54:23Z")
I am trying to set up security on my stack. looks like from what I can see version 7.7.1 should have the plugin available to install but when I go to install it I only get this . ./elasticsearch-plugin install xpack -\>… --- ## [About TranslogWriter.assertNoSeqNumberConflict](https://discuss.elastic.co/t/about-translogwriter-assertnoseqnumberconflict/252521)
**Author:** [@kimnwuchong](https://discuss.elastic.co/u/kimnwuchong)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 1:32pm UTC](https://discuss.elastic.co/t/about-translogwriter-assertnoseqnumberconflict/252521 "2020-10-19T13:32:10Z")
before process assertNoSeqNumberConflict, the tranlog has already added。i think the assert is not necessary。 --- ## [Enabling security in a cluster with two nodes in Elasticsearch](https://discuss.elastic.co/t/enabling-security-in-a-cluster-with-two-nodes-in-elasticsearch/252536)
**Author:** [@Techmod](https://discuss.elastic.co/u/Techmod)\ **Replies:** 3\ **Last updated:** [October 19, 2020, 1:09pm UTC](https://discuss.elastic.co/t/enabling-security-in-a-cluster-with-two-nodes-in-elasticsearch/252536 "2020-10-19T13:09:51Z")
Hi There, I'm trying to enable security feature in Elasticsearch nodes but whenever I turn on "xpack.security.enabled: true" , my Elasticsearch won't start at all. How can I resolve this? here's my configuration on bot… --- ## [Make apache.status.uptime.server\_uptime human readable](https://discuss.elastic.co/t/make-apache-status-uptime-server-uptime-human-readable/252405)
**Author:** [@prophoto](https://discuss.elastic.co/u/prophoto)\ **Replies:** 3\ **Last updated:** [October 19, 2020, 12:44pm UTC](https://discuss.elastic.co/t/make-apache-status-uptime-server-uptime-human-readable/252405 "2020-10-19T12:44:58Z")
How do I convert apache.status.uptime.server\_uptime to human readable format and display it in a Visualization? I've tried multiple times in a scripted field but can't seem to get that to work either. Thanks. --- ## [Ingest Node Pipeline doesn't allow for "\\\[" pattern](https://discuss.elastic.co/t/ingest-node-pipeline-doesnt-allow-for-pattern/250227)
**Author:** [@madduck](https://discuss.elastic.co/u/madduck)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 12:08pm UTC](https://discuss.elastic.co/t/ingest-node-pipeline-doesnt-allow-for-pattern/250227 "2020-10-19T12:08:33Z")
Hi gang, I'm trying to parse some logs into my index but I always get the GROK error: "Provided Grok expressions do not match field value" Error Message Provided Grok expressions do not match field value: \[Sep 28 17:1… --- ## [Value of index.blocks.write is auto changed to false](https://discuss.elastic.co/t/value-of-index-blocks-write-is-auto-changed-to-false/252207)
**Author:** [@kamils468](https://discuss.elastic.co/u/kamils468)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 11:48am UTC](https://discuss.elastic.co/t/value-of-index-blocks-write-is-auto-changed-to-false/252207 "2020-10-19T11:48:53Z")
ES ver. 7.4 I want to block all write actions (create/update/delete) to my index. I need it to copy docs to another index using reindex action and keep 100% consistency between indicies. So what I do is: curl -X PUT \\… --- ## [Term text cannot contain HOLE character U+001E; or unit separator character U+001F; this character is reserved](https://discuss.elastic.co/t/term-text-cannot-contain-hole-character-u-001e-or-unit-separator-character-u-001f-this-character-is-reserved/252484)
**Author:** [@Zoltan\_Kovacs](https://discuss.elastic.co/u/Zoltan_Kovacs)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 11:29am UTC](https://discuss.elastic.co/t/term-text-cannot-contain-hole-character-u-001e-or-unit-separator-character-u-001f-this-character-is-reserved/252484 "2020-10-19T11:29:42Z")
I run today an interesting error message: Term text cannot contain HOLE character U+001E; this character is reserved Term text cannot contain unit separator character U+001F; this character is reserved in search s… --- ## [Mapping 2.3.1 vers 7.9](https://discuss.elastic.co/t/mapping-2-3-1-vers-7-9/252251)
**Author:** [@Corben\_Dallas](https://discuss.elastic.co/u/Corben_Dallas)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 10:39am UTC](https://discuss.elastic.co/t/mapping-2-3-1-vers-7-9/252251 "2020-10-19T10:39:03Z")
Bonjour je débute en langage elastic, j'ai une petite question j'ai un template mapping 2.3 a convertir en 7.9 et j'ai des doutes sur les équivalences, comment traduire ca en 7x "title": { "type": "str… --- ## [Dynamic\_templates vs Template API](https://discuss.elastic.co/t/dynamic-templates-vs-template-api/252478)
**Author:** [@vorapoap](https://discuss.elastic.co/u/vorapoap)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 10:32am UTC](https://discuss.elastic.co/t/dynamic-templates-vs-template-api/252478 "2020-10-19T10:32:37Z")
In term of indexing performance. Which one is faster? between using dynamic\_templates vs Template API --- ## [Yellow Shard](https://discuss.elastic.co/t/yellow-shard/252514)
**Author:** [@laurent2](https://discuss.elastic.co/u/laurent2)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 10:23am UTC](https://discuss.elastic.co/t/yellow-shard/252514 "2020-10-19T10:23:19Z")
Hello, I'm having some issue with an elasticsearch install, I don't have extensive knowledge on ES but your help would be appreciated. 2 issues: ES is regulary stuck and i have to restart it manually ES is in yellow … --- ## [Logstash Filebeat input](https://discuss.elastic.co/t/logstash-filebeat-input/251992)
**Author:** [@jafri6](https://discuss.elastic.co/u/jafri6)\ **Replies:** 3\ **Last updated:** [October 19, 2020, 9:36am UTC](https://discuss.elastic.co/t/logstash-filebeat-input/251992 "2020-10-19T09:36:39Z")
My goal is to setup filebeat on at least 5 systems, and get the data to elasticsearch via logstash. I imported data via the file plugin earlier for one of my trials, and the data was imported successfully. I tried the … --- ## [Elasticsearch 6.8.12 & Magento 2.3.4](https://discuss.elastic.co/t/elasticsearch-6-8-12-magento-2-3-4/251241)
**Author:** [@mbob](https://discuss.elastic.co/u/mbob)\ **Replies:** 8\ **Last updated:** [October 19, 2020, 9:02am UTC](https://discuss.elastic.co/t/elasticsearch-6-8-12-magento-2-3-4/251241 "2020-10-19T09:02:33Z")
Hi, I was told to by your User Success Manager to ask for help in this forum regarding issues with using Elasticsearch and Magento 2. The problem: The test of the connection fails in Magento 2 (test fails in backend) w… --- ## [Search query - StartsWIth, Contains and Endswith](https://discuss.elastic.co/t/search-query-startswith-contains-and-endswith/252501)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 8:41am UTC](https://discuss.elastic.co/t/search-query-startswith-contains-and-endswith/252501 "2020-10-19T08:41:24Z")
How to query elasticsearch with Startswith, contains and Endswith. \\Looks like it is not recommended to use wildcard \* at the beginning of the search term considering the performance impact. --- ## [Logstash truncating original message while applying json filter](https://discuss.elastic.co/t/logstash-truncating-original-message-while-applying-json-filter/252500)
**Author:** [@pks01](https://discuss.elastic.co/u/pks01)\ **Replies:** 0\ **Last updated:** [October 19, 2020, 8:14am UTC](https://discuss.elastic.co/t/logstash-truncating-original-message-while-applying-json-filter/252500 "2020-10-19T08:14:27Z")
I have logstash running on kubernetes which gets the logs from azure-eventhub using eventhub plugin. In eventhub, the messages are logged in JSON format. While reading events from the topic in logstash and applying JSON … --- ## [\_delete\_by\_queryで空いたストレージを利用したい](https://discuss.elastic.co/t/delete-by-query/252176)
**Author:** [@aurantiacus](https://discuss.elastic.co/u/aurantiacus)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 8:12am UTC](https://discuss.elastic.co/t/delete-by-query/252176 "2020-10-19T08:12:08Z")
elasticsearch6.4.0 インデックスから条件に該当するデータを\_delete\_by\_queryで削除し削除して確保できるであろうストレージを利用したいと考えています。 実際に試したところ、\_delete\_by\_query実行前と実行後で kibana-\>Management-\> Index managementで参照できる インデックスのPrimary Storage Sizeが下がるものだと思っていましたが、変化… --- ## [Composite aggregation returns old version documents](https://discuss.elastic.co/t/composite-aggregation-returns-old-version-documents/252353)
**Author:** [@And390](https://discuss.elastic.co/u/And390)\ **Replies:** 6\ **Last updated:** [October 19, 2020, 7:40am UTC](https://discuss.elastic.co/t/composite-aggregation-returns-old-version-documents/252353 "2020-10-19T07:40:47Z")
Hello. I found that in some cases composite aggregation returns old documents (the initial indexed version instead of updated). Steps to reproduce: curl -X PUT -H 'Content-Type: application/json' localhost:9200/test -d … --- ## [Kafka to elasticsearch](https://discuss.elastic.co/t/kafka-to-elasticsearch/252487)
**Author:** [@sahil21](https://discuss.elastic.co/u/sahil21)\ **Replies:** 0\ **Last updated:** [October 19, 2020, 7:18am UTC](https://discuss.elastic.co/t/kafka-to-elasticsearch/252487 "2020-10-19T07:18:15Z")
Hi All, I have a kafka topic with some existing data in it. I want to send that data to elasticsearch index using a logstash config file. Currently my config file only send the data which is being entered while the pipe… --- ## [GET /\_cluster/settings empty](https://discuss.elastic.co/t/get-cluster-settings-empty/252471)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [October 19, 2020, 5:42am UTC](https://discuss.elastic.co/t/get-cluster-settings-empty/252471 "2020-10-19T05:42:40Z")
Hi there, I have a 7.5.1 production cluster of 3 nodes running. I am wondering: doing this GET /\_cluster/settings empty just gives me: I would expect more. Background: I have reached on all 3 nodes the disk waterma… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1187) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1189)