# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1201 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1202 --- ## [Kibana loses visualization edits?](https://discuss.elastic.co/t/kibana-loses-visualization-edits/251548)
**Author:** [@jreusch](https://discuss.elastic.co/u/jreusch)\ **Replies:** 2\ **Last updated:** [October 9, 2020, 1:46pm UTC](https://discuss.elastic.co/t/kibana-loses-visualization-edits/251548 "2020-10-09T13:46:17Z")
Hi folks! I was experimenting with Elasticsearch/Kibana to replace our existing Prometheus/InfluxDB/Grafana setup for monitoring Kubernetes and collecting system logs. I used the Kubernetes Operator to deploy an instan… --- ## [Assistance with my Logstash filter](https://discuss.elastic.co/t/assistance-with-my-logstash-filter/251342)
**Author:** [@HelpComputer](https://discuss.elastic.co/u/HelpComputer)\ **Replies:** 9\ **Last updated:** [October 9, 2020, 1:21pm UTC](https://discuss.elastic.co/t/assistance-with-my-logstash-filter/251342 "2020-10-09T13:21:03Z")
Hello, I am trying to use a variation of the filter provided here - https://github.com/bromiley/olaf/blob/master/logstash/o365.config but I keep getting the following error, \[FATAL\]\[logstash.runner \] The given… --- ## [Log4j2.properties](https://discuss.elastic.co/t/log4j2-properties/251568)
**Author:** [@abhinav\_elk](https://discuss.elastic.co/u/abhinav_elk)\ **Replies:** 0\ **Last updated:** [October 9, 2020, 1:08pm UTC](https://discuss.elastic.co/t/log4j2-properties/251568 "2020-10-09T13:08:25Z")
Can someone please explain theses two things in the Log4j.2 properties file in ElasticSearch \`appender.index\_search\_slowlog\_rolling.policies.time.type=TimeBasedTriggeringPolicy appender.index\_search\_slowlog\_rolling.pol… --- ## [Issues in metricbeat for openshift](https://discuss.elastic.co/t/issues-in-metricbeat-for-openshift/251570)
**Author:** [@Harshi1](https://discuss.elastic.co/u/Harshi1)\ **Replies:** 0\ **Last updated:** [October 9, 2020, 1:11pm UTC](https://discuss.elastic.co/t/issues-in-metricbeat-for-openshift/251570 "2020-10-09T13:11:21Z")
Kibana version : 7.7.0 Elasticsearch version : 7.7.0 Metricbeat version : 7.7 Browser version : Chrome 84.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version : RPM from download pa… --- ## [No logstash data showing up in kibana](https://discuss.elastic.co/t/no-logstash-data-showing-up-in-kibana/251471)
**Author:** [@jimmyacuna](https://discuss.elastic.co/u/jimmyacuna)\ **Replies:** 2\ **Last updated:** [October 9, 2020, 1:02pm UTC](https://discuss.elastic.co/t/no-logstash-data-showing-up-in-kibana/251471 "2020-10-09T13:02:19Z")
I have just installed a new ELK stack instance but I cant figure out what I am missing. By default filebeats were being sent and that worked. I dont intend to use filebeats as since Im mainly collecting syslogs from netw… --- ## [Elasticsearch Rolling Restart](https://discuss.elastic.co/t/elasticsearch-rolling-restart/251566)
**Author:** [@elasticus3r](https://discuss.elastic.co/u/elasticus3r)\ **Replies:** 0\ **Last updated:** [October 9, 2020, 1:01pm UTC](https://discuss.elastic.co/t/elasticsearch-rolling-restart/251566 "2020-10-09T13:01:45Z")
Hello, I need to perform a rolling restart of my elasticsearch cluster which contains 3 master nodes and 7 data nodes. I believe a rolling restart is the best approach for patching and also cert renewals. From this docu… --- ## [Stdout rubydebug not outputting to file](https://discuss.elastic.co/t/stdout-rubydebug-not-outputting-to-file/251296)
**Author:** [@elasticus3r](https://discuss.elastic.co/u/elasticus3r)\ **Replies:** 11\ **Last updated:** [October 9, 2020, 12:10pm UTC](https://discuss.elastic.co/t/stdout-rubydebug-not-outputting-to-file/251296 "2020-10-09T12:10:48Z")
Hello, I have got an nginx output with the stdout configured at the bottom as: output { if \[service\] == "nginx" and "\_grokparsefailure" in \[tags\] { elasticsearch { user =\> "user" password =\> "password" … --- ## [Automatic snapshot delete on Elasticsearch 2.4](https://discuss.elastic.co/t/automatic-snapshot-delete-on-elasticsearch-2-4/251273)
**Author:** [@Silas-91](https://discuss.elastic.co/u/Silas-91)\ **Replies:** 2\ **Last updated:** [October 9, 2020, 11:42am UTC](https://discuss.elastic.co/t/automatic-snapshot-delete-on-elasticsearch-2-4/251273 "2020-10-09T11:42:45Z")
Hello together, i´am new to elasticsearch and i have some question about version 2.4. We take snapshots every day but now there are so many that we have to delete them. I don´t want to delete them one by one. So does a… --- ## [Re-Index to new date format. getting parse\_exception](https://discuss.elastic.co/t/re-index-to-new-date-format-getting-parse-exception/251390)
**Author:** [@ahmadsayeed3](https://discuss.elastic.co/u/ahmadsayeed3)\ **Replies:** 0\ **Last updated:** [October 8, 2020, 7:51am UTC](https://discuss.elastic.co/t/re-index-to-new-date-format-getting-parse-exception/251390 "2020-10-08T07:51:09Z")
POST \_reindex { "source": { "index": "source" }, "dest": { "index": "dest" }, "script": { "source": """ SimpleDateFormat format = new SimpleDateFormat(… --- ## [Delay to initialize elasticsearch](https://discuss.elastic.co/t/delay-to-initialize-elasticsearch/251558)
**Author:** [@Douglas\_Ribeiro](https://discuss.elastic.co/u/Douglas_Ribeiro)\ **Replies:** 0\ **Last updated:** [October 9, 2020, 11:38am UTC](https://discuss.elastic.co/t/delay-to-initialize-elasticsearch/251558 "2020-10-09T11:38:29Z")
Hi guys, next I use the SKELS ISO, one of the services I need is ElasticSearch, but he has a problem with Boot. Before it didn't start, now I changed the timeout time to 3 minutes, now it starts, but it takes 2 minutes. … --- ## [Сopies of shards](https://discuss.elastic.co/t/opies-of-shards/248857)
**Author:** [@djuwa4](https://discuss.elastic.co/u/djuwa4)\ **Replies:** 4\ **Last updated:** [October 9, 2020, 11:31am UTC](https://discuss.elastic.co/t/opies-of-shards/248857 "2020-10-09T11:31:29Z")
Good day! I have an elasticsearch cluster configured. Can you please tell me if copies of shards are created by default? Or does it need to be configured separately? --- ## [Setting up replica shards](https://discuss.elastic.co/t/setting-up-replica-shards/251551)
**Author:** [@djuwa4](https://discuss.elastic.co/u/djuwa4)\ **Replies:** 2\ **Last updated:** [October 9, 2020, 10:55am UTC](https://discuss.elastic.co/t/setting-up-replica-shards/251551 "2020-10-09T10:55:13Z")
How can I increase the number of shard replicas? I have five nodes in the cluster, I want each node to have a copy of each shards. I found this option on the net, is it correct? curl -X PUT http://localhost:9200/\_templ… --- ## [Issues while looking through values, starting with 0](https://discuss.elastic.co/t/issues-while-looking-through-values-starting-with-0/251539)
**Author:** [@ALeks\_Mil](https://discuss.elastic.co/u/ALeks_Mil)\ **Replies:** 1\ **Last updated:** [October 9, 2020, 10:02am UTC](https://discuss.elastic.co/t/issues-while-looking-through-values-starting-with-0/251539 "2020-10-09T10:02:45Z")
Hi everyone. I'm facing the following issue while using elastic 7.6.0. I have a text field: "type": "text", "analyzer": "whitespace" which contains a values similar to: 06666. The problem is, when I'm trying to sea… --- ## [How to have Multiple operators in a single namespace managing different clusters](https://discuss.elastic.co/t/how-to-have-multiple-operators-in-a-single-namespace-managing-different-clusters/251549)
**Author:** [@Vineeth\_varma](https://discuss.elastic.co/u/Vineeth_varma)\ **Replies:** 0\ **Last updated:** [October 9, 2020, 9:36am UTC](https://discuss.elastic.co/t/how-to-have-multiple-operators-in-a-single-namespace-managing-different-clusters/251549 "2020-10-09T09:36:06Z")
Hi Here I have two questions I am unable to do hope you can help on this? From the elastic cloud on kubernetes quickstart guide,I am only able to deploy operator in elastic-system namespace, how to deploy an operator… --- ## [About the Elastic Cloud on Kubernetes (ECK) category](https://discuss.elastic.co/t/about-the-elastic-cloud-on-kubernetes-eck-category/183899)
**Author:** [@uricohen](https://discuss.elastic.co/u/uricohen)\ **Replies:** 1\ **Last updated:** [October 9, 2020, 9:33am UTC](https://discuss.elastic.co/t/about-the-elastic-cloud-on-kubernetes-eck-category/183899 "2020-10-09T09:33:24Z")
All things related to your ECK and running the Elastic stack on Kubernetes. --- ## [Can we use scripted field in kibana in term aggregation?](https://discuss.elastic.co/t/can-we-use-scripted-field-in-kibana-in-term-aggregation/251523)
**Author:** [@le\_ba\_nam](https://discuss.elastic.co/u/le_ba_nam)\ **Replies:** 1\ **Last updated:** [October 9, 2020, 9:27am UTC](https://discuss.elastic.co/t/can-we-use-scripted-field-in-kibana-in-term-aggregation/251523 "2020-10-09T09:27:23Z")
I created scripted field in kibana named service\_exception.keyword. Now I am trying to create a watcher, which aims to catch the most occurrences exception service. But it not work. I tried replace it by another field an… --- ## [Unable to run Logstash 7.9.2 as a service on Ubuntu 18.04](https://discuss.elastic.co/t/unable-to-run-logstash-7-9-2-as-a-service-on-ubuntu-18-04/251005)
**Author:** [@Philip\_Colmer](https://discuss.elastic.co/u/Philip_Colmer)\ **Replies:** 15\ **Last updated:** [October 9, 2020, 7:06am UTC](https://discuss.elastic.co/t/unable-to-run-logstash-7-9-2-as-a-service-on-ubuntu-18-04/251005 "2020-10-09T07:06:44Z")
I'm getting a warning and an error when I try to start logstash with systemctl start logstash: \[2020-10-05T14:01:19,067\]\[WARN \]\[logstash.config.source.multilocal\] Ignoring the 'pipelines.yml' file because modules or com… --- ## [How does Re-index API works?](https://discuss.elastic.co/t/how-does-re-index-api-works/251293)
**Author:** [@srbhklkrn](https://discuss.elastic.co/u/srbhklkrn)\ **Replies:** 3\ **Last updated:** [October 9, 2020, 6:30am UTC](https://discuss.elastic.co/t/how-does-re-index-api-works/251293 "2020-10-09T06:30:25Z")
We are in the process of migrating from ES 6.4 to 7.9, and around 3 TB of data. I'm looking into reindex API to start the process and do testing. My question is does reindex API will delete the original indexes? for now,… --- ## [Token Service could not get token document](https://discuss.elastic.co/t/token-service-could-not-get-token-document/251533)
**Author:** [@nitin7](https://discuss.elastic.co/u/nitin7)\ **Replies:** 0\ **Last updated:** [October 9, 2020, 6:23am UTC](https://discuss.elastic.co/t/token-service-could-not-get-token-document/251533 "2020-10-09T06:23:15Z")
Hi all, In the cluster there has been info message \[2020-10-09T11:49:34,157\]\[INFO \]\[o.e.x.s.a.TokenService \] \[\] could not get token document \[token\_ChHbqugJxSEN47zQ-DgsvlzZXyPdPly1yRA\_VnPasUM\] that should have been c… --- ## [Logstash Comparing Field Values Using an If Statement not working](https://discuss.elastic.co/t/logstash-comparing-field-values-using-an-if-statement-not-working/251452)
**Author:** [@bardie](https://discuss.elastic.co/u/bardie)\ **Replies:** 2\ **Last updated:** [October 9, 2020, 6:12am UTC](https://discuss.elastic.co/t/logstash-comparing-field-values-using-an-if-statement-not-working/251452 "2020-10-09T06:12:48Z")
Hi, I am trying to compare two fields using the following method but it is not working. I have used it before using an older version of logstash and it worked but it is not working on logstash 7.9.2. Logstash cannot be… --- ## [Using gsub for multi line patterns](https://discuss.elastic.co/t/using-gsub-for-multi-line-patterns/251458)
**Author:** [@Surya\_Iriventi](https://discuss.elastic.co/u/Surya_Iriventi)\ **Replies:** 2\ **Last updated:** [October 9, 2020, 5:26am UTC](https://discuss.elastic.co/t/using-gsub-for-multi-line-patterns/251458 "2020-10-09T05:26:38Z")
Hi, I am trying to use gsub to remove the prefix for the log line. I have a filebeat configuration which matches multiline conguration. The multi line log message (input to logstash) would look line this: \*\*\*\* Error … --- ## [How to enable proxy for google\_pubsub input plugin in logstash](https://discuss.elastic.co/t/how-to-enable-proxy-for-google-pubsub-input-plugin-in-logstash/251525)
**Author:** [@nareshahi](https://discuss.elastic.co/u/nareshahi)\ **Replies:** 0\ **Last updated:** [October 9, 2020, 5:12am UTC](https://discuss.elastic.co/t/how-to-enable-proxy-for-google-pubsub-input-plugin-in-logstash/251525 "2020-10-09T05:12:17Z")
Hello Guys, i have enabled google\_pubsub plugin in logstash. it is up and runing. look like pipeline is looking for proxy to make API call with google cloud. please guide where have to set proxy setting for plugin . R… --- ## [String with spaces not is not searchable in logstash](https://discuss.elastic.co/t/string-with-spaces-not-is-not-searchable-in-logstash/251225)
**Author:** [@NARHAR\_DEV\_SHARMA](https://discuss.elastic.co/u/NARHAR_DEV_SHARMA)\ **Replies:** 4\ **Last updated:** [October 9, 2020, 4:51am UTC](https://discuss.elastic.co/t/string-with-spaces-not-is-not-searchable-in-logstash/251225 "2020-10-09T04:51:31Z")
Hi Team, Greeting for the day! I am trying to search a pattern that contain spaces and its not working. However, if i put something without space that's working absolutely fine; i am able to send mail to required addr… --- ## [Kibana plugin helpers error](https://discuss.elastic.co/t/kibana-plugin-helpers-error/250923)
**Author:** [@K\_Chaitanya](https://discuss.elastic.co/u/K_Chaitanya)\ **Replies:** 3\ **Last updated:** [October 9, 2020, 4:39am UTC](https://discuss.elastic.co/t/kibana-plugin-helpers-error/250923 "2020-10-09T04:39:14Z")
Hi, I developed a kibana plugin for kibana version 7.9.0. I setup the development environment following this. Now I want to generate the zip of the developed plugin. I tried follow the steps mentioned here but while ru… --- ## [A filter does not work in Controls visualization](https://discuss.elastic.co/t/a-filter-does-not-work-in-controls-visualization/248894)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 2\ **Last updated:** [October 9, 2020, 2:56am UTC](https://discuss.elastic.co/t/a-filter-does-not-work-in-controls-visualization/248894 "2020-10-09T02:56:58Z")
I'm working on to make an options list in Controls with a filtered index by adding the filter at the upper left so that I can hide some selections. However the filtered objects are still shown in the list and I found so… --- ## [Logstash count insta Filter aggregate](https://discuss.elastic.co/t/logstash-count-insta-filter-aggregate/251512)
**Author:** [@bbwolf](https://discuss.elastic.co/u/bbwolf)\ **Replies:** 0\ **Last updated:** [October 8, 2020, 11:06pm UTC](https://discuss.elastic.co/t/logstash-count-insta-filter-aggregate/251512 "2020-10-08T23:06:49Z")
Hello, I would to know the best way to have count\_event as aggregate for task\_id equal to field1. I can create count as new event but notre like in the following format. Field1, field2, field3, field4, count\_event A,… --- ## [LOGSTASH: How to setup logstash to get all query's data not only a part of it?](https://discuss.elastic.co/t/logstash-how-to-setup-logstash-to-get-all-querys-data-not-only-a-part-of-it/251507)
**Author:** [@I\_Hathout](https://discuss.elastic.co/u/I_Hathout)\ **Replies:** 2\ **Last updated:** [October 8, 2020, 10:29pm UTC](https://discuss.elastic.co/t/logstash-how-to-setup-logstash-to-get-all-querys-data-not-only-a-part-of-it/251507 "2020-10-08T22:29:03Z")
I've a database table which contains 400+ records, but each time, I use logstash and JDBC it only gets 126 records. I tried many times with different indices each time, but still the 126 only retrieving. Here is the out… --- ## [Logstash restarting by output ES](https://discuss.elastic.co/t/logstash-restarting-by-output-es/251509)
**Author:** [@dromval90](https://discuss.elastic.co/u/dromval90)\ **Replies:** 0\ **Last updated:** [October 8, 2020, 10:35pm UTC](https://discuss.elastic.co/t/logstash-restarting-by-output-es/251509 "2020-10-08T22:35:05Z")
Hi good day community: I would like to ask if someone that you it has experiment this behavior: We have 4 servers with instances of logstash with version 7.9, into config file into output to Elasticsearch, we have 12 s… --- ## [Unable to manually specify start/end timestamps in date range selector](https://discuss.elastic.co/t/unable-to-manually-specify-start-end-timestamps-in-date-range-selector/251487)
**Author:** [@daq](https://discuss.elastic.co/u/daq)\ **Replies:** 9\ **Last updated:** [October 8, 2020, 9:29pm UTC](https://discuss.elastic.co/t/unable-to-manually-specify-start-end-timestamps-in-date-range-selector/251487 "2020-10-08T21:29:39Z")
What am I doing wrong? I'm trying to manually adjust start/end timestamps in the date range selector in discover tab, but it just prints expected format in red and doesn't give me any way to apply manually entered timest… --- ## [Which schema to use with Elasticsearch](https://discuss.elastic.co/t/which-schema-to-use-with-elasticsearch/251430)
**Author:** [@chabow](https://discuss.elastic.co/u/chabow)\ **Replies:** 3\ **Last updated:** [October 8, 2020, 9:15pm UTC](https://discuss.elastic.co/t/which-schema-to-use-with-elasticsearch/251430 "2020-10-08T21:15:07Z")
This is hopefully an easy question for the experts. We just started with an instance of Elasticsearch. And we need to add metadata to a big part of our content. Now the question is: which schema to use? We are aware that… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1200) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1202)