# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1292 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1293 --- ## [How to retrieve the last page of my documents even if it is more than 10,000th document?](https://discuss.elastic.co/t/how-to-retrieve-the-last-page-of-my-documents-even-if-it-is-more-than-10-000th-document/244331)
**Author:** [@Noctis17](https://discuss.elastic.co/u/Noctis17)\ **Replies:** 1\ **Last updated:** [August 10, 2020, 4:38am UTC](https://discuss.elastic.co/t/how-to-retrieve-the-last-page-of-my-documents-even-if-it-is-more-than-10-000th-document/244331 "2020-08-10T04:38:57Z")
Hello and good day! As the title says, we're expecting that we're able to get the last page of our search. But unfortunately, we're encountering an error message: Things beforehand: We're aware the with the relations… --- ## [Convert epoch time columns to date in lostash config file](https://discuss.elastic.co/t/convert-epoch-time-columns-to-date-in-lostash-config-file/244122)
**Author:** [@Bucky101](https://discuss.elastic.co/u/Bucky101)\ **Replies:** 2\ **Last updated:** [August 10, 2020, 4:35am UTC](https://discuss.elastic.co/t/convert-epoch-time-columns-to-date-in-lostash-config-file/244122 "2020-08-10T04:35:26Z")
Hey as per below, i have am polling a http and passing through the csv filter pulling date which works fine. However I need to convert the epoch timestamp to readable date and time. I have tried a few different ways wi… --- ## [How to manage phisycal logs file after moving to ELK 5:12 if we want to delete text files](https://discuss.elastic.co/t/how-to-manage-phisycal-logs-file-after-moving-to-elk-5-12-if-we-want-to-delete-text-files/243555)
**Author:** [@Puneeth\_S\_B\_Gowda1](https://discuss.elastic.co/u/Puneeth_S_B_Gowda1)\ **Replies:** 2\ **Last updated:** [August 10, 2020, 4:18am UTC](https://discuss.elastic.co/t/how-to-manage-phisycal-logs-file-after-moving-to-elk-5-12-if-we-want-to-delete-text-files/243555 "2020-08-10T04:18:29Z")
how to manage physical logs file after moving to ELK if we want to delete text files after moving to ELK how do we do? --- ## [ES Snapshot Delete](https://discuss.elastic.co/t/es-snapshot-delete/243902)
**Author:** [@bhuvaneshdct](https://discuss.elastic.co/u/bhuvaneshdct)\ **Replies:** 5\ **Last updated:** [August 10, 2020, 3:37am UTC](https://discuss.elastic.co/t/es-snapshot-delete/243902 "2020-08-10T03:37:23Z")
Elasticsearch backups are always incremental. Let's say I have a daily backup job. After one week I have 7 snapshots. On the 8th day if Im going to delete the day1's snapshot, then the rest of the snapshots will become … --- ## [Vincular sinônimos dentro do contexto de um filter](https://discuss.elastic.co/t/vincular-sinonimos-dentro-do-contexto-de-um-filter/196397)
**Author:** [@lucianocarvalho](https://discuss.elastic.co/u/lucianocarvalho)\ **Replies:** 2\ **Last updated:** [August 10, 2020, 2:59am UTC](https://discuss.elastic.co/t/vincular-sinonimos-dentro-do-contexto-de-um-filter/196397 "2020-08-10T02:59:44Z")
Eu consigo organizar melhor os sinônimos dentro de um contexto do filter? Imagine que tenho uma lista de sinônimos diferentes para blog e para loja, mas ambos estão no mesmo índice. Ex: Vincular apenas a lista de sinô… --- ## [Looking for recommendations on elasticsearch set up for logging](https://discuss.elastic.co/t/looking-for-recommendations-on-elasticsearch-set-up-for-logging/243947)
**Author:** [@sbk-elk](https://discuss.elastic.co/u/sbk-elk)\ **Replies:** 9\ **Last updated:** [August 10, 2020, 2:38am UTC](https://discuss.elastic.co/t/looking-for-recommendations-on-elasticsearch-set-up-for-logging/243947 "2020-08-10T02:38:58Z")
Hi, I am looking for recommendations on spanning my cluster on cloud across multi region. Any sample ideas? The problem statement is as below and i don't see much info on a set up like this: -- Need to connect my apps… --- ## [Export raw data of Kibana dashboard shot to CSV](https://discuss.elastic.co/t/export-raw-data-of-kibana-dashboard-shot-to-csv/244322)
**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\ **Replies:** 1\ **Last updated:** [August 9, 2020, 11:29pm UTC](https://discuss.elastic.co/t/export-raw-data-of-kibana-dashboard-shot-to-csv/244322 "2020-08-09T23:29:29Z")
I want to get csv report with all the raw data of a specific shot of dashboard visualizations ? do I need to create a script for that? and how can I do that from Kibana dashboard? (without script, raw data for specif… --- ## [Search query for Address Search](https://discuss.elastic.co/t/search-query-for-address-search/243912)
**Author:** [@allAbout\_Gaming](https://discuss.elastic.co/u/allAbout_Gaming)\ **Replies:** 1\ **Last updated:** [August 9, 2020, 11:14pm UTC](https://discuss.elastic.co/t/search-query-for-address-search/243912 "2020-08-09T23:14:47Z")
Hi All , Need help to frame a search query that will be able to search address. We have fields like House Name , Street Name, City, Country. We have concatenated all fields into a single field. But I am not able to fram… --- ## [A kind of transposition - is it possible](https://discuss.elastic.co/t/a-kind-of-transposition-is-it-possible/243921)
**Author:** [@Raster](https://discuss.elastic.co/u/Raster)\ **Replies:** 1\ **Last updated:** [August 9, 2020, 11:14pm UTC](https://discuss.elastic.co/t/a-kind-of-transposition-is-it-possible/243921 "2020-08-09T23:14:02Z")
Hi, Let's say I have data in a table with columnames of key, col1, col2, col3. Note name of first column is key in this example- could be anything. Can I have this data converted into a table having these columns - key,… --- ## [Cisco ESA-WSA parser](https://discuss.elastic.co/t/cisco-esa-wsa-parser/243917)
**Author:** [@stressedsalmon](https://discuss.elastic.co/u/stressedsalmon)\ **Replies:** 1\ **Last updated:** [August 9, 2020, 11:13pm UTC](https://discuss.elastic.co/t/cisco-esa-wsa-parser/243917 "2020-08-09T23:13:28Z")
Hello, Does the current default Cisco parser have capability of parsing Cisco Web security appliance and Email security appliance? I am trying to log these machines and it seems like the default Cisco parser inst worki… --- ## [Usage of coordinating node for threadpool or http request limits](https://discuss.elastic.co/t/usage-of-coordinating-node-for-threadpool-or-http-request-limits/243964)
**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\ **Replies:** 1\ **Last updated:** [August 9, 2020, 11:05pm UTC](https://discuss.elastic.co/t/usage-of-coordinating-node-for-threadpool-or-http-request-limits/243964 "2020-08-09T23:05:54Z")
I read through elasticsearch and understood that there is no way to limit the connections by users I came across the topic on threadpool size configuration per nodes. https://www.elastic.co/guide/en/elasticsearch/refer… --- ## [Grant access to Stack Monitoring tab](https://discuss.elastic.co/t/grant-access-to-stack-monitoring-tab/244185)
**Author:** [@Thomas74](https://discuss.elastic.co/u/Thomas74)\ **Replies:** 1\ **Last updated:** [August 9, 2020, 10:54pm UTC](https://discuss.elastic.co/t/grant-access-to-stack-monitoring-tab/244185 "2020-08-09T22:54:10Z")
Hi, I would like to grant access to Stack monitoring for --- ## [Dockerizing a working ELK project, 'Dead ES instance'](https://discuss.elastic.co/t/dockerizing-a-working-elk-project-dead-es-instance/243639)
**Author:** [@kl29](https://discuss.elastic.co/u/kl29)\ **Replies:** 6\ **Last updated:** [August 9, 2020, 10:18pm UTC](https://discuss.elastic.co/t/dockerizing-a-working-elk-project-dead-es-instance/243639 "2020-08-09T22:18:09Z")
My setup works without Dockerizing. Now, making a Dockerized project, logstash cannot connect to the ES instance. I set http.host: "0.0.0.0" in logstash.yml, and my pipeline.conf is: input { exec { command =\> "loc… --- ## [How to upload a file into ElastiSearch](https://discuss.elastic.co/t/how-to-upload-a-file-into-elastisearch/243491)
**Author:** [@noor\_basha](https://discuss.elastic.co/u/noor_basha)\ **Replies:** 11\ **Last updated:** [August 9, 2020, 9:35pm UTC](https://discuss.elastic.co/t/how-to-upload-a-file-into-elastisearch/243491 "2020-08-09T21:35:39Z")
Hi I am new to ELK, I need to upload different types of files into ELASTIC SEARCH, is it possible to do that. if it is anyone can please help me how to do with sample code. As of now, I am doing with reading the file an… --- ## [Not able to see all fields when trying to create visualisation](https://discuss.elastic.co/t/not-able-to-see-all-fields-when-trying-to-create-visualisation/244058)
**Author:** [@Dinesh\_Potey](https://discuss.elastic.co/u/Dinesh_Potey)\ **Replies:** 3\ **Last updated:** [August 9, 2020, 8:09pm UTC](https://discuss.elastic.co/t/not-able-to-see-all-fields-when-trying-to-create-visualisation/244058 "2020-08-09T20:09:29Z")
Hi , I am trying to create error dashboard for which firstly I have to create a visualization out of my Index pattern. I am not able to see all the elements of my xml when I am trying to filter out to create the visuali… --- ## [Get service-now.com data](https://discuss.elastic.co/t/get-service-now-com-data/244320)
**Author:** [@netscape](https://discuss.elastic.co/u/netscape)\ **Replies:** 1\ **Last updated:** [August 9, 2020, 6:53pm UTC](https://discuss.elastic.co/t/get-service-now-com-data/244320 "2020-08-09T18:53:28Z")
Hi, we´re using servicenow.com system and I want to have stats of service-now tickets (INC|REQ) in our ELK. Service-now have an API, but how can I retrieve only new tickets since last sync? Anybody got an idea? --- ## [Logstash timestamp issue - the log line date is one hour ahead the actual date](https://discuss.elastic.co/t/logstash-timestamp-issue-the-log-line-date-is-one-hour-ahead-the-actual-date/244303)
**Author:** [@Muhammad\_Badawy](https://discuss.elastic.co/u/Muhammad_Badawy)\ **Replies:** 7\ **Last updated:** [August 9, 2020, 6:00pm UTC](https://discuss.elastic.co/t/logstash-timestamp-issue-the-log-line-date-is-one-hour-ahead-the-actual-date/244303 "2020-08-09T18:00:37Z")
Hello, I'm trying to read input from JDBC and applied date filter but logstash logs is one hour ahead the actual date. I don't where this difference came from. Logstash conf file input { jdbc { jdbc\_driver\_library =\> "… --- ## [\[ERROR\]\[o.e.x.m.c.n.NodeStatsCollector\] collector \[node\_stats\] timed out when collecting data](https://discuss.elastic.co/t/error-o-e-x-m-c-n-nodestatscollector-collector-node-stats-timed-out-when-collecting-data/244194)
**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\ **Replies:** 6\ **Last updated:** [August 9, 2020, 5:32pm UTC](https://discuss.elastic.co/t/error-o-e-x-m-c-n-nodestatscollector-collector-node-stats-timed-out-when-collecting-data/244194 "2020-08-09T17:32:49Z")
Hi Guys , we just have an issue with part of the logs haven't been indexed , in almost all elastic nodes logs I see error : \[ERROR\]\[o.e.x.m.c.n.NodeStatsCollector\] collector \[node\_stats\] timed out when collecting … --- ## [Kibana dashboard not showing data lower resolution 15 minutes from metricbeat](https://discuss.elastic.co/t/kibana-dashboard-not-showing-data-lower-resolution-15-minutes-from-metricbeat/244243)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 1\ **Last updated:** [August 9, 2020, 4:21pm UTC](https://discuss.elastic.co/t/kibana-dashboard-not-showing-data-lower-resolution-15-minutes-from-metricbeat/244243 "2020-08-09T16:21:40Z")
Dear all, kibana is not showing data on tvsb panel if i select a time period lower than \[15 minutes -\> now\] i have an empty chart. 15 min -\> now 5 min -\> now This is happening with all tvsb time series charts --- ## [Increasing heap size - Logstash](https://discuss.elastic.co/t/increasing-heap-size-logstash/244310)
**Author:** [@Natarajan](https://discuss.elastic.co/u/Natarajan)\ **Replies:** 0\ **Last updated:** [August 9, 2020, 4:13pm UTC](https://discuss.elastic.co/t/increasing-heap-size-logstash/244310 "2020-08-09T16:13:12Z")
I am using Logstash 7.6.2 and I set LS\_JAVA\_OPTS="-Xmx2g -Xms2g" as evirnoment variable in docker command. I am not sure it is reflected in docker container . How can we validate this once we set from command. --- ## [Grok filter not adding new fields](https://discuss.elastic.co/t/grok-filter-not-adding-new-fields/240825)
**Author:** [@vamshisiddarth](https://discuss.elastic.co/u/vamshisiddarth)\ **Replies:** 3\ **Last updated:** [August 9, 2020, 1:26pm UTC](https://discuss.elastic.co/t/grok-filter-not-adding-new-fields/240825 "2020-08-09T13:26:02Z")
We have the below grok filter configured for our journlabeat. The same was deployed on our local for filebeat was working fine but isn't adding the new fields on journalbeat. filter { grok { patterns\_dir =\> \[… --- ## [Ingest pipelines with Serial Difference aggregation](https://discuss.elastic.co/t/ingest-pipelines-with-serial-difference-aggregation/241511)
**Author:** [@dg1](https://discuss.elastic.co/u/dg1)\ **Replies:** 5\ **Last updated:** [August 9, 2020, 12:21pm UTC](https://discuss.elastic.co/t/ingest-pipelines-with-serial-difference-aggregation/241511 "2020-08-09T12:21:13Z")
I'm storing quality metrics in elastic. One of those metrics is code coverage (extracted from sonar). I want to calculate the difference in average code coverage for a project between weeks. So this week the average code… --- ## [Manual heap dump in elasticsearch not working](https://discuss.elastic.co/t/manual-heap-dump-in-elasticsearch-not-working/244299)
**Author:** [@Prashanth\_123](https://discuss.elastic.co/u/Prashanth_123)\ **Replies:** 0\ **Last updated:** [August 9, 2020, 10:12am UTC](https://discuss.elastic.co/t/manual-heap-dump-in-elasticsearch-not-working/244299 "2020-08-09T10:12:09Z")
Over last few days noticed more GC in my es server and was trying to take a look at heap .. My ES is running on EC2 , with Amazon linux AMI OS. When i tried to take heap dump with "jmap -dump:format=b,file=/var/lib/e… --- ## [Logstash filter doesn't return correct results based on conditionals](https://discuss.elastic.co/t/logstash-filter-doesnt-return-correct-results-based-on-conditionals/244234)
**Author:** [@nmoham](https://discuss.elastic.co/u/nmoham)\ **Replies:** 2\ **Last updated:** [August 9, 2020, 1:15am UTC](https://discuss.elastic.co/t/logstash-filter-doesnt-return-correct-results-based-on-conditionals/244234 "2020-08-09T01:15:16Z")
I've have the following conf file in logstash; based on the incoming data from beats containing the environment field, I want to add a new field "\[@metadata\]\[shared\_env\_category\]". I am testing the it using stdin and wi… --- ## [Parsing complex xml](https://discuss.elastic.co/t/parsing-complex-xml/244271)
**Author:** [@zmundo](https://discuss.elastic.co/u/zmundo)\ **Replies:** 1\ **Last updated:** [August 8, 2020, 11:30pm UTC](https://discuss.elastic.co/t/parsing-complex-xml/244271 "2020-08-08T23:30:55Z")
I am working with cnc machine data reporting back in a complex xml structure. The data is only generated when the component changes value. If a machine sits ideal, things like the path component won't report any data,… --- ## [Logstash instantnly shut down after importing .csv file inside pipeline folder, also I dont have permisions inside CLI of logstash container or other containers](https://discuss.elastic.co/t/logstash-instantnly-shut-down-after-importing-csv-file-inside-pipeline-folder-also-i-dont-have-permisions-inside-cli-of-logstash-container-or-other-containers/244268)
**Author:** [@giganttus](https://discuss.elastic.co/u/giganttus)\ **Replies:** 0\ **Last updated:** [August 8, 2020, 8:39pm UTC](https://discuss.elastic.co/t/logstash-instantnly-shut-down-after-importing-csv-file-inside-pipeline-folder-also-i-dont-have-permisions-inside-cli-of-logstash-container-or-other-containers/244268 "2020-08-08T20:39:25Z")
So I configured ELK - Stack with this config. And as result my logstash container shuts down and also while I was trying to fix it through CLI of logstash container I found out that I have no permission of any container… --- ## [How to update a record in ES if storing of field data in \_id will be removed in future?](https://discuss.elastic.co/t/how-to-update-a-record-in-es-if-storing-of-field-data-in-id-will-be-removed-in-future/244265)
**Author:** [@aryaman](https://discuss.elastic.co/u/aryaman)\ **Replies:** 0\ **Last updated:** [August 8, 2020, 8:01pm UTC](https://discuss.elastic.co/t/how-to-update-a-record-in-es-if-storing-of-field-data-in-id-will-be-removed-in-future/244265 "2020-08-08T20:01:21Z")
Hi, I use python Elasticsearch client for sending new documents to Elasticsearch and updating already existing records as well. My client request looks like this: es.index(index='index\_name',ignore=400,id=dict\['Logica… --- ## [Trouble connecting to Microsoft SQL Server in Logstash via jdbc](https://discuss.elastic.co/t/trouble-connecting-to-microsoft-sql-server-in-logstash-via-jdbc/244266)
**Author:** [@logicalblonde](https://discuss.elastic.co/u/logicalblonde)\ **Replies:** 0\ **Last updated:** [August 8, 2020, 8:04pm UTC](https://discuss.elastic.co/t/trouble-connecting-to-microsoft-sql-server-in-logstash-via-jdbc/244266 "2020-08-08T20:04:06Z")
I'm having trouble connecting logstash to MS Sql Server via the jdbc driver. I'm using jdk 11.0.8 and MSS Sql Server jdbc driver 4.2 (jre8). I've had success setting up other machines with 11.0.7 and 4.2, but with this… --- ## [Indexing a threaded conversation](https://discuss.elastic.co/t/indexing-a-threaded-conversation/244257)
**Author:** [@dansei](https://discuss.elastic.co/u/dansei)\ **Replies:** 0\ **Last updated:** [August 8, 2020, 4:26pm UTC](https://discuss.elastic.co/t/indexing-a-threaded-conversation/244257 "2020-08-08T16:26:05Z")
I would like to use Elasticsearch to index and search a threaded conversation, like a blog's comments where there are top-level comments and replies to those comments. I have tried making a single document like this, wi… --- ## [Can I use an existing field in the event to create the columns for a CSV filter?](https://discuss.elastic.co/t/can-i-use-an-existing-field-in-the-event-to-create-the-columns-for-a-csv-filter/244258)
**Author:** [@crickes](https://discuss.elastic.co/u/crickes)\ **Replies:** 2\ **Last updated:** [August 8, 2020, 5:10pm UTC](https://discuss.elastic.co/t/can-i-use-an-existing-field-in-the-event-to-create-the-columns-for-a-csv-filter/244258 "2020-08-08T17:10:27Z")
I've been struugling with this for far too long and I'm giving up and asking for help. I am being sent data via a Kafka topic which contains a field called 'headers' which is a CSV string of column headers, and a field c… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1291) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1293)