# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1303 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1304 --- ## [Documents with date (epoch\_millis) sent in bursts and not in time-increasing order are indexed stragely](https://discuss.elastic.co/t/documents-with-date-epoch-millis-sent-in-bursts-and-not-in-time-increasing-order-are-indexed-stragely/243332)
**Author:** [@mujina93](https://discuss.elastic.co/u/mujina93)\ **Replies:** 2\ **Last updated:** [August 3, 2020, 7:47am UTC](https://discuss.elastic.co/t/documents-with-date-epoch-millis-sent-in-bursts-and-not-in-time-increasing-order-are-indexed-stragely/243332 "2020-08-03T07:47:56Z")
Does elasticsearch expect the date field to be in increasing order? I am sending docs from python using elasticsearch-py. The documents I send are sent in bursts (think sending some documents every random interval, like… --- ## [Time taken to execute query fluctuates](https://discuss.elastic.co/t/time-taken-to-execute-query-fluctuates/243359)
**Author:** [@techie\_2020](https://discuss.elastic.co/u/techie_2020)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 7:08am UTC](https://discuss.elastic.co/t/time-taken-to-execute-query-fluctuates/243359 "2020-08-03T07:08:30Z")
I have this query GET \_search { "query": { "bool": { "must" : \[{"match" : {"track\_id" : 4}}\] } } } However the time take fluctuates between… --- ## [All shards failed](https://discuss.elastic.co/t/all-shards-failed/242935)
**Author:** [@Alvaro\_Sanz](https://discuss.elastic.co/u/Alvaro_Sanz)\ **Replies:** 8\ **Last updated:** [August 3, 2020, 6:49am UTC](https://discuss.elastic.co/t/all-shards-failed/242935 "2020-08-03T06:49:13Z")
Hello, I am running elastic Stack (beats -\> logstash -\> elasticsearch -\> kibana). It is a single server (no cluster) that is collecting data from 10 or so servers (auditbeat and filebeat). Today, it stopped working. I … --- ## [Metricbeat Module is not visible in Infrastructure Host Overview](https://discuss.elastic.co/t/metricbeat-module-is-not-visible-in-infrastructure-host-overview/239747)
**Author:** [@matthiasbaldi](https://discuss.elastic.co/u/matthiasbaldi)\ **Replies:** 4\ **Last updated:** [August 3, 2020, 6:48am UTC](https://discuss.elastic.co/t/metricbeat-module-is-not-visible-in-infrastructure-host-overview/239747 "2020-08-03T06:48:15Z")
Hi We enabled over our cloud instance multiple Metricbeat host monitorings. On every host we enabled the System, Nginx and MongoDB monitoring. All hosts are now visible under the metrics view in Kibana and we get deta… --- ## [Filebeat error](https://discuss.elastic.co/t/filebeat-error/243385)
**Author:** [@ishan.abhinit](https://discuss.elastic.co/u/ishan.abhinit)\ **Replies:** 3\ **Last updated:** [August 3, 2020, 6:42am UTC](https://discuss.elastic.co/t/filebeat-error/243385 "2020-08-03T06:42:44Z")
I am using nginx as a frontend for Kibana. I am trying to load the logs onto kibana using a Filebeat module. This is how Kibana portion of filebeat.yml file looks like # =================================== Kibana =====… --- ## [3 node cluster behind F5 VIP, how to configure?](https://discuss.elastic.co/t/3-node-cluster-behind-f5-vip-how-to-configure/243296)
**Author:** [@wardallen](https://discuss.elastic.co/u/wardallen)\ **Replies:** 4\ **Last updated:** [August 3, 2020, 4:03am UTC](https://discuss.elastic.co/t/3-node-cluster-behind-f5-vip-how-to-configure/243296 "2020-08-03T04:03:15Z")
I have a 3 node cluster, and I'm wondering how to configure the network settings in the nodes now that an F5 VIP has entered the picture. The hosts: node1 - 10.1.1.1 node2 - 10.1.1.2 node3 - 10.1.1.3 The F5 VIP is s… --- ## [Logstash가 처음엔 실행되었다가 이후에 실행이 안됩니다](https://discuss.elastic.co/t/logstash/243427)
**Author:** [@Jun.8](https://discuss.elastic.co/u/Jun.8)\ **Replies:** 1\ **Last updated:** [August 3, 2020, 3:57am UTC](https://discuss.elastic.co/t/logstash/243427 "2020-08-03T03:57:56Z")
ubuntu@ip-10-0-1-50:~$ sudo /usr/share/logstash/bin/logstash -f /etc/logstash/logstash.conf WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the pat… --- ## [Edit logstash.yml but it's not updating](https://discuss.elastic.co/t/edit-logstash-yml-but-its-not-updating/243493)
**Author:** [@evacch](https://discuss.elastic.co/u/evacch)\ **Replies:** 0\ **Last updated:** [August 3, 2020, 3:55am UTC](https://discuss.elastic.co/t/edit-logstash-yml-but-its-not-updating/243493 "2020-08-03T03:55:06Z")
I edited my logstash.yml to make some changes on the pipeline.batch.size to 1000, pipeline.batch.delay to 30 and enable xpack monitoring. After that I restart the Logstash service with the following command: systemctl … --- ## [How to configuring system settings on elasticsearch cloud](https://discuss.elastic.co/t/how-to-configuring-system-settings-on-elasticsearch-cloud/243336)
**Author:** [@chautm](https://discuss.elastic.co/u/chautm)\ **Replies:** 2\ **Last updated:** [August 3, 2020, 2:39am UTC](https://discuss.elastic.co/t/how-to-configuring-system-settings-on-elasticsearch-cloud/243336 "2020-08-03T02:39:04Z")
Hi everybody, I'm try to config system settings on elastic cloud, as bootstrap.memory\_lock by PUT /\_cluster/settings but failed. Anyone know how to configure it? Thanks. --- ## [Update by query on nested mapping](https://discuss.elastic.co/t/update-by-query-on-nested-mapping/243290)
**Author:** [@e-rossi](https://discuss.elastic.co/u/e-rossi)\ **Replies:** 3\ **Last updated:** [August 2, 2020, 9:44pm UTC](https://discuss.elastic.co/t/update-by-query-on-nested-mapping/243290 "2020-08-02T21:44:50Z")
So, I've successfully created a field and added a value for it in existing documents using the put mapping and update by query APIs with the following NEW\_FIELD = { 'properties': { 'deleted': { … --- ## [Failed to connect to backoff, data path already locked by another beat](https://discuss.elastic.co/t/failed-to-connect-to-backoff-data-path-already-locked-by-another-beat/243480)
**Author:** [@Anthony\_Allen](https://discuss.elastic.co/u/Anthony_Allen)\ **Replies:** 0\ **Last updated:** [August 2, 2020, 8:33pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-data-path-already-locked-by-another-beat/243480 "2020-08-02T20:33:45Z")
Elasticsearch and filebeats, auditbeats, packetbeats, metricbeats and Logstash are running on the following: Ubuntu 18.04 2 core , 64 bit, 4GB RAM All the aformentioned beats and Logstash have been systemctl stopped (… --- ## [Unable to get Date Time from logs into Timestamp](https://discuss.elastic.co/t/unable-to-get-date-time-from-logs-into-timestamp/243467)
**Author:** [@JonnB](https://discuss.elastic.co/u/JonnB)\ **Replies:** 2\ **Last updated:** [August 2, 2020, 6:00pm UTC](https://discuss.elastic.co/t/unable-to-get-date-time-from-logs-into-timestamp/243467 "2020-08-02T18:00:16Z")
Hi, I have gone through previous posts which do not seem to help with my specific issue and its taking a long time to figure out without progress, if you can assist in the group? I want to get the datetime from my logf… --- ## [Java heap space issue with logstash](https://discuss.elastic.co/t/java-heap-space-issue-with-logstash/243459)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 1\ **Last updated:** [August 2, 2020, 4:12pm UTC](https://discuss.elastic.co/t/java-heap-space-issue-with-logstash/243459 "2020-08-02T16:12:27Z")
Hi All, I have been trying to ingest data which is of 6000 documents, its around 73 MB, but i'm repeatedly getting java heap space issue. below is the error. java.lang.OutOfMemoryError: Java heap space Dumping heap to… --- ## [Finaliser la récupération de logs Nginx via la stack Elastic/ECK](https://discuss.elastic.co/t/finaliser-la-recuperation-de-logs-nginx-via-la-stack-elastic-eck/242034)
**Author:** [@LomigFR](https://discuss.elastic.co/u/LomigFR)\ **Replies:** 11\ **Last updated:** [August 2, 2020, 4:04pm UTC](https://discuss.elastic.co/t/finaliser-la-recuperation-de-logs-nginx-via-la-stack-elastic-eck/242034 "2020-08-02T16:04:56Z")
Bonjour, Je reviens vers vous pour une demande d'aide quant à la récolte de logs Nginx. Je me permets de poster en deux fois étant donnée la limitation sur le nombre de caractères. La situation est la suivante : Win1… --- ## [Searching for content in pdf and word documents](https://discuss.elastic.co/t/searching-for-content-in-pdf-and-word-documents/243454)
**Author:** [@tnkumar](https://discuss.elastic.co/u/tnkumar)\ **Replies:** 6\ **Last updated:** [August 2, 2020, 3:30pm UTC](https://discuss.elastic.co/t/searching-for-content-in-pdf-and-word-documents/243454 "2020-08-02T15:30:19Z")
I have many word and pdf documents. I want to search for some content in these documents. For such an application, are elasticsearch and kibana used? If so, and I have the free trial (signed up yesterday), how do I inges… --- ## [Cardinality aggregation always returning one extra count](https://discuss.elastic.co/t/cardinality-aggregation-always-returning-one-extra-count/243462)
**Author:** [@Hardik\_Jain](https://discuss.elastic.co/u/Hardik_Jain)\ **Replies:** 0\ **Last updated:** [August 2, 2020, 2:49pm UTC](https://discuss.elastic.co/t/cardinality-aggregation-always-returning-one-extra-count/243462 "2020-08-02T14:49:15Z")
I am new to elasticsearch and wanted to query the number of clients at fixed\_interval of 1 hour and hence used the cardinality aggregation along with date\_histogram aggregation. The problem is, the cardinality aggregatio… --- ## [Filebeat lit des lignes 2 fois](https://discuss.elastic.co/t/filebeat-lit-des-lignes-2-fois/236452)
**Author:** [@IneedHelp](https://discuss.elastic.co/u/IneedHelp)\ **Replies:** 12\ **Last updated:** [August 2, 2020, 11:28am UTC](https://discuss.elastic.co/t/filebeat-lit-des-lignes-2-fois/236452 "2020-08-02T11:28:13Z")
Bonjour, J'accuse filebeat mais je ne suis sûr de rien. J'utilise ELK pour analyser des logs et des fichiers csv. Pendant plusieurs semaines tout fonctionnait comme il faut mais hier en voulant ingérer des fichiers, j'… --- ## [Import Apache Log File from Win10 to Kibana/Logstash on Debian](https://discuss.elastic.co/t/import-apache-log-file-from-win10-to-kibana-logstash-on-debian/242948)
**Author:** [@imransarkar](https://discuss.elastic.co/u/imransarkar)\ **Replies:** 22\ **Last updated:** [August 2, 2020, 10:15am UTC](https://discuss.elastic.co/t/import-apache-log-file-from-win10-to-kibana-logstash-on-debian/242948 "2020-08-02T10:15:38Z")
Hi Everyone, I am new to Kibana, I have recently uploaded Apache Log File through Filebeat (Installed on Win10) but when I check on Kibana Discovery it is displaying only single entry of entire logfile. My Setup: File… --- ## [Kibana Discover not showing the quick visualize option for the fields in Kibana 7.8.0](https://discuss.elastic.co/t/kibana-discover-not-showing-the-quick-visualize-option-for-the-fields-in-kibana-7-8-0/242804)
**Author:** [@abi.mc](https://discuss.elastic.co/u/abi.mc)\ **Replies:** 2\ **Last updated:** [August 2, 2020, 9:58am UTC](https://discuss.elastic.co/t/kibana-discover-not-showing-the-quick-visualize-option-for-the-fields-in-kibana-7-8-0/242804 "2020-08-02T09:58:36Z")
I've installed ELK Stack 7.8.0 using docker with basic license enabled and TLS between the ES nodes. Passwords has been created for the built in users and configured. Everything works fine. But in Kibana in the discover… --- ## [Best specs for a single cluster?](https://discuss.elastic.co/t/best-specs-for-a-single-cluster/243389)
**Author:** [@elk6](https://discuss.elastic.co/u/elk6)\ **Replies:** 5\ **Last updated:** [August 2, 2020, 7:07am UTC](https://discuss.elastic.co/t/best-specs-for-a-single-cluster/243389 "2020-08-02T07:07:08Z")
Bossman wants to deploy a cluster of logstash, elasticsearch and kibana on one machine. He says high availability doesn't matter much since we have a different platform to monitor servers and this would be used to store … --- ## [Snapshot Deletion Takes a very long time](https://discuss.elastic.co/t/snapshot-deletion-takes-a-very-long-time/242222)
**Author:** [@proton](https://discuss.elastic.co/u/proton)\ **Replies:** 10\ **Last updated:** [August 2, 2020, 6:35am UTC](https://discuss.elastic.co/t/snapshot-deletion-takes-a-very-long-time/242222 "2020-08-02T06:35:05Z")
Hello, We have snapshots for ES 7.5.2 cluster in Google Cloud Storage(GCS). We have a lot of snapshots going almost a year back and now we are trying to delete the snapshots and keep only last 90 days of data. In the pr… --- ## [I want to achieve conditional query in elastic search as described](https://discuss.elastic.co/t/i-want-to-achieve-conditional-query-in-elastic-search-as-described/243431)
**Author:** [@Saumya\_Mishra](https://discuss.elastic.co/u/Saumya_Mishra)\ **Replies:** 1\ **Last updated:** [August 1, 2020, 10:03pm UTC](https://discuss.elastic.co/t/i-want-to-achieve-conditional-query-in-elastic-search-as-described/243431 "2020-08-01T22:03:19Z")
/\* I want to achieve this kind of conditional query in ElasticSearch using PHP client library, I want to execute the match clause(In ElasticSearch) only if the the value is set or if there is some value \*/ $sql="select … --- ## [From where should i start elastic search, I am beginner for Elastic search?](https://discuss.elastic.co/t/from-where-should-i-start-elastic-search-i-am-beginner-for-elastic-search/243426)
**Author:** [@prabhunath](https://discuss.elastic.co/u/prabhunath)\ **Replies:** 1\ **Last updated:** [August 1, 2020, 6:34pm UTC](https://discuss.elastic.co/t/from-where-should-i-start-elastic-search-i-am-beginner-for-elastic-search/243426 "2020-08-01T18:34:05Z")
From where should I start the elastic search, I am a beginner for Elastic search? Please, anyone, suggest to me. --- ## [Connect to mongodb using logstash Jdbc\_streaming filter plugin](https://discuss.elastic.co/t/connect-to-mongodb-using-logstash-jdbc-streaming-filter-plugin/242082)
**Author:** [@\_Rasitha\_Ariyarathna](https://discuss.elastic.co/u/_Rasitha_Ariyarathna)\ **Replies:** 2\ **Last updated:** [August 1, 2020, 1:47pm UTC](https://discuss.elastic.co/t/connect-to-mongodb-using-logstash-jdbc-streaming-filter-plugin/242082 "2020-08-01T13:47:03Z")
I'm trying to fetch data from mongodb using Jdbc\_streaming filter plugin in logstash in windows. I'm using mongo-java-driver-3.4.2.jar to connect to the database but, getting a error like this JavaSql::SQLException: N… --- ## [Realtime search based on 2 indexes](https://discuss.elastic.co/t/realtime-search-based-on-2-indexes/240402)
**Author:** [@mexekanez](https://discuss.elastic.co/u/mexekanez)\ **Replies:** 3\ **Last updated:** [August 1, 2020, 11:57am UTC](https://discuss.elastic.co/t/realtime-search-based-on-2-indexes/240402 "2020-08-01T11:57:47Z")
Hello to all! I need some kind of advice, so in general, I have 2 indexes: The first index its aliases ex: my\_name -\> Barak Trump (an amount in first interactions about 50 000 can be much more) Seconds Index it's … --- ## [Can I filter logs with if else condition?](https://discuss.elastic.co/t/can-i-filter-logs-with-if-else-condition/243421)
**Author:** [@Bhavin\_Varsur](https://discuss.elastic.co/u/Bhavin_Varsur)\ **Replies:** 1\ **Last updated:** [August 1, 2020, 10:54am UTC](https://discuss.elastic.co/t/can-i-filter-logs-with-if-else-condition/243421 "2020-08-01T10:54:12Z")
my logs chain is Filebeat =\> Logstash =\> Elasticsearch Now i want to filterize logs with my own field. like match or if else condition key value. So Can I do that or what? need to know how can i do? any blog suggest… --- ## [Elasticsearch change log level](https://discuss.elastic.co/t/elasticsearch-change-log-level/243293)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 4\ **Last updated:** [July 31, 2020, 7:38am UTC](https://discuss.elastic.co/t/elasticsearch-change-log-level/243293 "2020-07-31T07:38:14Z")
Hi There are lot of configurations in log4j properties. I'm using logstash to insert records to elasticsearch and I need to log those. what is the effect of changing below config? logger.action.name = org.elasticsearc… --- ## [KIBANA : String Length based Filter to my documents](https://discuss.elastic.co/t/kibana-string-length-based-filter-to-my-documents/242927)
**Author:** [@Nivas\_Sundar](https://discuss.elastic.co/u/Nivas_Sundar)\ **Replies:** 6\ **Last updated:** [August 1, 2020, 6:38am UTC](https://discuss.elastic.co/t/kibana-string-length-based-filter-to-my-documents/242927 "2020-08-01T06:38:08Z")
I need to Get the Length of a String datatype value and exclude the documents which have more than 4 characters using Elastic search custom query. I tried below query and didn't work. NO LUCK ! Could anyone help . { "q… --- ## [Elasticsearch nodes are leaving the cluster continuously](https://discuss.elastic.co/t/elasticsearch-nodes-are-leaving-the-cluster-continuously/242853)
**Author:** [@darshan](https://discuss.elastic.co/u/darshan)\ **Replies:** 20\ **Last updated:** [August 1, 2020, 6:29am UTC](https://discuss.elastic.co/t/elasticsearch-nodes-are-leaving-the-cluster-continuously/242853 "2020-08-01T06:29:29Z")
Hi, The nodes in the cluster are leaving continuously and rejoins after few seconds. when I checked for error it says "master not discovered yet: have discovered" error. I don't have any clue what is happening. please c… --- ## [How to auto login in Kibana using apache?](https://discuss.elastic.co/t/how-to-auto-login-in-kibana-using-apache/242596)
**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\ **Replies:** 1\ **Last updated:** [August 1, 2020, 6:20am UTC](https://discuss.elastic.co/t/how-to-auto-login-in-kibana-using-apache/242596 "2020-08-01T06:20:31Z")
I have seen many post about auto login using Nginx. However, how can i auto login to Kibana using apache? I want to user only acess 'sample' space without login. So i configured apache configuration like below: P… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1302) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1304)