# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1279 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1280 --- ## [Monitoring the health of the Cassandra NO SQL database](https://discuss.elastic.co/t/monitoring-the-health-of-the-cassandra-no-sql-database/245284)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 0\ **Last updated:** [August 17, 2020, 4:42pm UTC](https://discuss.elastic.co/t/monitoring-the-health-of-the-cassandra-no-sql-database/245284 "2020-08-17T16:42:28Z")
Is it possible to monitor the health of the Cassandra server using Elastic Stack? --- ## [Tips and Best Practices for working / debugging Logstash pipelines on Kubernetes](https://discuss.elastic.co/t/tips-and-best-practices-for-working-debugging-logstash-pipelines-on-kubernetes/245280)
**Author:** [@Xavier\_Krantz](https://discuss.elastic.co/u/Xavier_Krantz)\ **Replies:** 0\ **Last updated:** [August 17, 2020, 4:31pm UTC](https://discuss.elastic.co/t/tips-and-best-practices-for-working-debugging-logstash-pipelines-on-kubernetes/245280 "2020-08-17T16:31:28Z")
Hi everyone :wave: I have setup a BLEK (Beats, Logstash, ElasticSearch, Kibana) stack on Kubernetes :stuck\_out\_tongue: I would like to parse and enrich some logs output from my services collected through Filebeat. Hav… --- ## [Elasticsearch search query size limit](https://discuss.elastic.co/t/elasticsearch-search-query-size-limit/245278)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 0\ **Last updated:** [August 17, 2020, 4:25pm UTC](https://discuss.elastic.co/t/elasticsearch-search-query-size-limit/245278 "2020-08-17T16:25:02Z")
Hi all, I am using elasticsearch input in my logstash config file. logstash input part is as following: input { elasticsearch { hosts =\> \["http://10.0.0.1:9200/"\] index =\> "my-log\*" query =\> '{ "from" : 0, "size" : … --- ## [Help debugging ingestion flow Filebeat + Logstas](https://discuss.elastic.co/t/help-debugging-ingestion-flow-filebeat-logstas/245277)
**Author:** [@Xavier\_Krantz](https://discuss.elastic.co/u/Xavier_Krantz)\ **Replies:** 0\ **Last updated:** [August 17, 2020, 4:23pm UTC](https://discuss.elastic.co/t/help-debugging-ingestion-flow-filebeat-logstas/245277 "2020-08-17T16:23:27Z")
Hi everybody, I have setup an BLEK (Beats, Logstash, ElasticSearch, Kibana) stack :stuck\_out\_tongue: ES and Kibana are running in ES Cloud a "cluster" of Logstash instances are running on a Kubernetes cluster A servic… --- ## [Best way to handle Customer Specific Visibility](https://discuss.elastic.co/t/best-way-to-handle-customer-specific-visibility/245271)
**Author:** [@mrkresc](https://discuss.elastic.co/u/mrkresc)\ **Replies:** 2\ **Last updated:** [August 17, 2020, 4:04pm UTC](https://discuss.elastic.co/t/best-way-to-handle-customer-specific-visibility/245271 "2020-08-17T16:04:53Z")
Hey guys, This question may have been asked before, but when searching, I was not able to find an answer. I am new to the forums and elasticsearch so please bear with me. I am currently working with the search applica… --- ## [Logstash Config error](https://discuss.elastic.co/t/logstash-config-error/245274)
**Author:** [@Nur\_Syahirah\_Ashri](https://discuss.elastic.co/u/Nur_Syahirah_Ashri)\ **Replies:** 0\ **Last updated:** [August 17, 2020, 4:03pm UTC](https://discuss.elastic.co/t/logstash-config-error/245274 "2020-08-17T16:03:25Z")
hi, i am new in using ELK. I have these problem that i couldn't find the solution yet. it is the cmd for logstash configuration. i have use many kind of commands but still have the same error. if anyone can help me, pl… --- ## [Huge number of open files on data node with multiple paths](https://discuss.elastic.co/t/huge-number-of-open-files-on-data-node-with-multiple-paths/245272)
**Author:** [@luiz.ooliveira](https://discuss.elastic.co/u/luiz.ooliveira)\ **Replies:** 0\ **Last updated:** [August 17, 2020, 3:57pm UTC](https://discuss.elastic.co/t/huge-number-of-open-files-on-data-node-with-multiple-paths/245272 "2020-08-17T15:57:41Z")
Hi, I added a new data node to my cluster with a different configuration from the others. I have 3 data nodes that use a single "path.data" and it is working fine. The new one was configured to use multiple data paths,… --- ## [Logstash com.mysql.jdbc.Driver error](https://discuss.elastic.co/t/logstash-com-mysql-jdbc-driver-error/245256)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 2\ **Last updated:** [August 17, 2020, 3:44pm UTC](https://discuss.elastic.co/t/logstash-com-mysql-jdbc-driver-error/245256 "2020-08-17T15:44:19Z")
Hi. I have logstash 7.4.2 , mysql 5.7 , This is my config: filter { jdbc\_static { loaders =\> \[ { id =\> "products-table" query =\> "select id,name from products;" local\_table =\> "prod… --- ## [Logstash add field based on external source](https://discuss.elastic.co/t/logstash-add-field-based-on-external-source/245236)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 2\ **Last updated:** [August 17, 2020, 1:57pm UTC](https://discuss.elastic.co/t/logstash-add-field-based-on-external-source/245236 "2020-08-17T13:57:04Z")
Hi, I have a stream server. I store the logs on elasticsearch. The stream server's log contain requested urls from clients. The logs are similar to nginx logs but with more fields. one of the query params in the url is "… --- ## [Logstash Ruby filter error](https://discuss.elastic.co/t/logstash-ruby-filter-error/245216)
**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\ **Replies:** 4\ **Last updated:** [August 17, 2020, 3:29pm UTC](https://discuss.elastic.co/t/logstash-ruby-filter-error/245216 "2020-08-17T15:29:17Z")
Hello all, Running Logstash v7.8.1. Ruby codec v3.1.5. Been playing around using the ruby filter plugin. Great filter plugin btw!! I have a couple of logstash confs that have small ruby script filters. While all the f… --- ## [How to provide custom start\_date and time to rollup job’s indexer at rollup job’s creation time](https://discuss.elastic.co/t/how-to-provide-custom-start-date-and-time-to-rollup-job-s-indexer-at-rollup-job-s-creation-time/245262)
**Author:** [@darkwarrior](https://discuss.elastic.co/u/darkwarrior)\ **Replies:** 0\ **Last updated:** [August 17, 2020, 3:20pm UTC](https://discuss.elastic.co/t/how-to-provide-custom-start-date-and-time-to-rollup-job-s-indexer-at-rollup-job-s-creation-time/245262 "2020-08-17T15:20:23Z")
Hey all, On our ES cluster we do create daily indices with index-pattern like this =\> "index-20200101" and now we want to rollup documents from those indices with 1-day interval. But we don't want to rollup data from a… --- ## [Submitting False Positives](https://discuss.elastic.co/t/submitting-false-positives/232322)
**Author:** [@mark.dufresne](https://discuss.elastic.co/u/mark.dufresne)\ **Replies:** 0\ **Last updated:** [May 12, 2020, 8:43pm UTC](https://discuss.elastic.co/t/submitting-false-positives/232322 "2020-05-12T20:43:13Z")
We welcome your False Positive (FP) report for Elastic’s malware detection engine. These FP reports help us improve our security products. Please note that as of June 5, 2024 we have updated our False Positive review pr… --- ## [Logstash S3 Input Plugin Error](https://discuss.elastic.co/t/logstash-s3-input-plugin-error/245201)
**Author:** [@elasticus3r](https://discuss.elastic.co/u/elasticus3r)\ **Replies:** 5\ **Last updated:** [August 17, 2020, 2:55pm UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-error/245201 "2020-08-17T14:55:13Z")
Hello All, Hoping someone could help please. I have got a simple ELk stack running and using s3 input plugin to ingest from an endpoint with the following config: input { s3 { bucket =\> "mybucket" endpoint =\>… --- ## [Filebeat, logstash handle logrotation quesiton/help](https://discuss.elastic.co/t/filebeat-logstash-handle-logrotation-quesiton-help/245254)
**Author:** [@lingfei\_ouyang](https://discuss.elastic.co/u/lingfei_ouyang)\ **Replies:** 0\ **Last updated:** [August 17, 2020, 2:52pm UTC](https://discuss.elastic.co/t/filebeat-logstash-handle-logrotation-quesiton-help/245254 "2020-08-17T14:52:35Z")
Hi, Currently hitting an issues when I setup the filebeat -\> logstash. Here is situation that I'm facing: On filebeat (application) server, if the application log been rotated, (i.e app.log -\> rotate to app.log.08172… --- ## [How does JDBC input plugin keeps timestamp last value?](https://discuss.elastic.co/t/how-does-jdbc-input-plugin-keeps-timestamp-last-value/245246)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 2\ **Last updated:** [August 17, 2020, 2:52pm UTC](https://discuss.elastic.co/t/how-does-jdbc-input-plugin-keeps-timestamp-last-value/245246 "2020-08-17T14:52:04Z")
Hello I just want to figure it out how does JDBC input plugin writes the state value to the last\_run\_metadata\_path file. Let me explain: We have a SQL Server database and we are ingesting a table that now has a "last… --- ## [Create new field on object using painless](https://discuss.elastic.co/t/create-new-field-on-object-using-painless/245211)
**Author:** [@david.preston](https://discuss.elastic.co/u/david.preston)\ **Replies:** 11\ **Last updated:** [August 17, 2020, 2:50pm UTC](https://discuss.elastic.co/t/create-new-field-on-object-using-painless/245211 "2020-08-17T14:50:44Z")
Hi I'm trying to set an object field from another using an update query but am getting an error. Currently by doc has an event object in the root of the doc with a field: id i.e. { event { id: 1 } } all the docume… --- ## [Cluster.initial\_master\_nodes mandatory when upgrading?](https://discuss.elastic.co/t/cluster-initial-master-nodes-mandatory-when-upgrading/245035)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 3\ **Last updated:** [August 17, 2020, 2:45pm UTC](https://discuss.elastic.co/t/cluster-initial-master-nodes-mandatory-when-upgrading/245035 "2020-08-17T14:45:55Z")
Hello Elasticians ! I'm asking is cluster.initial\_master\_nodes is mandatory when we upgrade from a already running 6.8 cluster to 7.8 cluster I don't think so but if you could confirm.. Thanks :wink: --- ## [SEQUENTIAL FIELD WHEN MATCH ID DOC](https://discuss.elastic.co/t/sequential-field-when-match-id-doc/245196)
**Author:** [@Daniel\_Lopez](https://discuss.elastic.co/u/Daniel_Lopez)\ **Replies:** 1\ **Last updated:** [August 17, 2020, 2:27pm UTC](https://discuss.elastic.co/t/sequential-field-when-match-id-doc/245196 "2020-08-17T14:27:36Z")
Hi I will try to explain what I'm in I have these lines in a log ID:1,PID:123, Path:\\123\\123 ID:2,PID:234, Path:\\234\\234 ID:1,PID:345, Path:\\345\\345 The result of indexed doc I need to get \_Id: 1 PID0:123 Path0:… --- ## [Using aggregate filter to count number of events and sum field's values](https://discuss.elastic.co/t/using-aggregate-filter-to-count-number-of-events-and-sum-fields-values/244448)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 28\ **Last updated:** [August 17, 2020, 2:24pm UTC](https://discuss.elastic.co/t/using-aggregate-filter-to-count-number-of-events-and-sum-fields-values/244448 "2020-08-17T14:24:06Z")
Hi all, I have an index in elasticsearch name as "myindex" so that have fields like"date\_eng","company\_name","service\_name", "amount". I want to use aggregate filter so that counts the times which an services has been u… --- ## [Best approach to 50+ input sources](https://discuss.elastic.co/t/best-approach-to-50-input-sources/245249)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 0\ **Last updated:** [August 17, 2020, 2:20pm UTC](https://discuss.elastic.co/t/best-approach-to-50-input-sources/245249 "2020-08-17T14:20:42Z")
Hello I'd appreciate your thoughts on how to approcah the following use case: I have to configure a Logstash pipeline to index a table in SQL Server The thing is, although the table structure is the same for every cli… --- ## [SIEM not show country flag](https://discuss.elastic.co/t/siem-not-show-country-flag/244960)
**Author:** [@Luan\_Ph\_m](https://discuss.elastic.co/u/Luan_Ph_m)\ **Replies:** 1\ **Last updated:** [August 17, 2020, 2:13pm UTC](https://discuss.elastic.co/t/siem-not-show-country-flag/244960 "2020-08-17T14:13:11Z")
Hi I have an issue with SIEM app, my SIEM not show country flag. Here my screenshot Thanks --- ## [Connecting to the SAP Hana Database](https://discuss.elastic.co/t/connecting-to-the-sap-hana-database/245210)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 1\ **Last updated:** [August 17, 2020, 2:07pm UTC](https://discuss.elastic.co/t/connecting-to-the-sap-hana-database/245210 "2020-08-17T14:07:06Z")
Is it possible to connect to the SAP Hana Database using the logstash jdbc input plugin? Whether it is officially supported database just like MySQL and Oracle? --- ## [Sort fields on numeric part, and the alpha part](https://discuss.elastic.co/t/sort-fields-on-numeric-part-and-the-alpha-part/244163)
**Author:** [@JjOon](https://discuss.elastic.co/u/JjOon)\ **Replies:** 1\ **Last updated:** [August 17, 2020, 1:54pm UTC](https://discuss.elastic.co/t/sort-fields-on-numeric-part-and-the-alpha-part/244163 "2020-08-17T13:54:20Z")
Hi all, I am facing the following issue. I have some addresses, and when we sort them on the number, we have a alphanumeric sort. Like : 1 11 2 etc... My problem is : this number can contains letters or others char… --- ## [Problems with path.data change on local machine](https://discuss.elastic.co/t/problems-with-path-data-change-on-local-machine/245243)
**Author:** [@vbelobragin](https://discuss.elastic.co/u/vbelobragin)\ **Replies:** 0\ **Last updated:** [August 17, 2020, 1:33pm UTC](https://discuss.elastic.co/t/problems-with-path-data-change-on-local-machine/245243 "2020-08-17T13:33:46Z")
Hello everyone. I can not change local ES location - can not modify path.data . That's probably some elementary mistake, but I am stuck and greatly appreciate any assistance. So: Fresh local installation of ES 7.8.1 … --- ## [ES Backup restore](https://discuss.elastic.co/t/es-backup-restore/245241)
**Author:** [@Sagar\_Gulia](https://discuss.elastic.co/u/Sagar_Gulia)\ **Replies:** 0\ **Last updated:** [August 17, 2020, 1:24pm UTC](https://discuss.elastic.co/t/es-backup-restore/245241 "2020-08-17T13:24:10Z")
Can anyone tell me how can I pick latest snapshot while restoring my es backup in java. As I am keeping a snapshot every 30 min whole day and I want to shutdown es for night and in morning i want to restore the latest ba… --- ## [Can't find master nodes after node restart](https://discuss.elastic.co/t/cant-find-master-nodes-after-node-restart/245138)
**Author:** [@Barak](https://discuss.elastic.co/u/Barak)\ **Replies:** 13\ **Last updated:** [August 17, 2020, 1:29pm UTC](https://discuss.elastic.co/t/cant-find-master-nodes-after-node-restart/245138 "2020-08-17T13:29:36Z")
After upgrading to 7.7.1, the data nodes can't find the master nodes after a restart of the data node. I am using EC2 discovery plugin, and on the initial startup it joins the cluster as expected, but once restarted in … --- ## [New Platform Plugin - disallowed syntax found](https://discuss.elastic.co/t/new-platform-plugin-disallowed-syntax-found/243625)
**Author:** [@AndreaTosti](https://discuss.elastic.co/u/AndreaTosti)\ **Replies:** 2\ **Last updated:** [August 17, 2020, 1:28pm UTC](https://discuss.elastic.co/t/new-platform-plugin-disallowed-syntax-found/243625 "2020-08-17T13:28:43Z")
Hello everyone, in legacy plugins I was able to run the following import: import EditorJs from 'react-editor-js'; In the new platform (v7.8.2) I can no longer do that import. This generates the following errors (when … --- ## [Saved "field" parameter is now invalid. Please select a new field](https://discuss.elastic.co/t/saved-field-parameter-is-now-invalid-please-select-a-new-field/244886)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 6\ **Last updated:** [August 17, 2020, 1:15pm UTC](https://discuss.elastic.co/t/saved-field-parameter-is-now-invalid-please-select-a-new-field/244886 "2020-08-17T13:15:31Z")
hello everybody, I am setting up ILM and I am having an error in kibana dashboards: Saved "field" parameter is now invalid. Please select a new field. here are the steps that I followed: Create ILM policy: PUT \_ilm/p… --- ## [Growing field mapping management](https://discuss.elastic.co/t/growing-field-mapping-management/245235)
**Author:** [@WDK](https://discuss.elastic.co/u/WDK)\ **Replies:** 0\ **Last updated:** [August 17, 2020, 12:35pm UTC](https://discuss.elastic.co/t/growing-field-mapping-management/245235 "2020-08-17T12:35:15Z")
Hi all, I wonder how people here manage the growing amount of mappings you see in some indices. Especially kubernetes logs tend to have a wild variety of field. In my situation, all kubernetes logs end up in the same in… --- ## [Use custom field instead of doc\_count](https://discuss.elastic.co/t/use-custom-field-instead-of-doc-count/245234)
**Author:** [@sesha](https://discuss.elastic.co/u/sesha)\ **Replies:** 0\ **Last updated:** [August 17, 2020, 12:34pm UTC](https://discuss.elastic.co/t/use-custom-field-instead-of-doc-count/245234 "2020-08-17T12:34:14Z")
Need to use custom field instead of doc\_count Is it possible to change the default configuration to change doc\_count to sum by custom field Query: GET test/\_search { "aggs": { "NAME": { "term… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1278) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1280)