# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1305 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1306 --- ## [Discover - ordering in text columns does not work](https://discuss.elastic.co/t/discover-ordering-in-text-columns-does-not-work/242073)
**Author:** [@Moretti\_Edmar](https://discuss.elastic.co/u/Moretti_Edmar)\ **Replies:** 2\ **Last updated:** [July 31, 2020, 12:50pm UTC](https://discuss.elastic.co/t/discover-ordering-in-text-columns-does-not-work/242073 "2020-07-31T12:50:29Z")
The option to sort fields does not work for text types. Upon inspecting the requisition, I noticed that the field type is marked as a number and should be as text. This error did not occur in version 7.5. 7.7: erro 7… --- ## [Issue with replacing @timestamp field with the timestamp from logs using date filter in logstash](https://discuss.elastic.co/t/issue-with-replacing-timestamp-field-with-the-timestamp-from-logs-using-date-filter-in-logstash/243176)
**Author:** [@saurabhsule82](https://discuss.elastic.co/u/saurabhsule82)\ **Replies:** 3\ **Last updated:** [July 31, 2020, 12:43pm UTC](https://discuss.elastic.co/t/issue-with-replacing-timestamp-field-with-the-timestamp-from-logs-using-date-filter-in-logstash/243176 "2020-07-31T12:43:37Z")
Hi, We are just learning to setup the ELK stack that includes Filebeats --\> Logstash --\> Elasticsearch \<-- Kibana. Filebeats on our server sends the logs to Logstash, which is configured to send it to Elasticsearch and … --- ## [Logstash wants JVM to use /proc/](https://discuss.elastic.co/t/logstash-wants-jvm-to-use-proc/243313)
**Author:** [@bn1980](https://discuss.elastic.co/u/bn1980)\ **Replies:** 0\ **Last updated:** [July 31, 2020, 6:41am UTC](https://discuss.elastic.co/t/logstash-wants-jvm-to-use-proc/243313 "2020-07-31T06:41:35Z")
Logstash wants JVM to access /procfs but it is not available in a FreeBSD Jail \> \[2020-07-31T14:32:10,897\]\[ERROR\]\[org.logstash.Logstash \] java.lang.InternalError: errno: 2 error: Unable to open /proc/curproc/map I… --- ## [Percentage shows top of line graph](https://discuss.elastic.co/t/percentage-shows-top-of-line-graph/240096)
**Author:** [@krille.com](https://discuss.elastic.co/u/krille.com)\ **Replies:** 10\ **Last updated:** [July 31, 2020, 12:36pm UTC](https://discuss.elastic.co/t/percentage-shows-top-of-line-graph/240096 "2020-07-31T12:36:59Z")
Is it possible to have the percentage lines showed over the Y-axis instead of the top of the graph? It look likes this now: Is it possible to have them like these lines instead? --- ## [Is it possible to show old logs(previous year) in the ELK a visualization?](https://discuss.elastic.co/t/is-it-possible-to-show-old-logs-previous-year-in-the-elk-a-visualization/242747)
**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\ **Replies:** 8\ **Last updated:** [July 31, 2020, 12:36pm UTC](https://discuss.elastic.co/t/is-it-possible-to-show-old-logs-previous-year-in-the-elk-a-visualization/242747 "2020-07-31T12:36:11Z")
Hi Team, Below is the log message that have captured to the ELK from the server , i have configured the filebeat on july 24th ,the below date July 24th is the time and in message we have a logs of the year 2018. My req… --- ## [Logstash s3 input plugin specify dynamic prefix](https://discuss.elastic.co/t/logstash-s3-input-plugin-specify-dynamic-prefix/243353)
**Author:** [@Orest\_Gulman](https://discuss.elastic.co/u/Orest_Gulman)\ **Replies:** 0\ **Last updated:** [July 31, 2020, 12:35pm UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-specify-dynamic-prefix/243353 "2020-07-31T12:35:52Z")
Hi. I would like to use a dynamicaly changing path in prefix based on the current month and year, prefix =\> "elasticloadbalancing/region/YYYY/MM" input { s3 { access\_key\_id =\> "" secret\_access\_key =\> "38/" … --- ## [Logstash s3 input plugin file extension in prefix not working](https://discuss.elastic.co/t/logstash-s3-input-plugin-file-extension-in-prefix-not-working/243352)
**Author:** [@Orest\_Gulman](https://discuss.elastic.co/u/Orest_Gulman)\ **Replies:** 0\ **Last updated:** [July 31, 2020, 12:24pm UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-file-extension-in-prefix-not-working/243352 "2020-07-31T12:24:30Z")
Hi. I would like to specify a file extension that should be read by logstash. Below my config that I've tried and it's not working. input { s3 { access\_key\_id =\> "" secret\_access\_key =\> "" bucket =\> "log… --- ## [Elasticsearch node disk space?](https://discuss.elastic.co/t/elasticsearch-node-disk-space/242174)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 7\ **Last updated:** [July 31, 2020, 12:24pm UTC](https://discuss.elastic.co/t/elasticsearch-node-disk-space/242174 "2020-07-31T12:24:27Z")
How much disk space should be given to : Dedicated Client Node Dedicated Kibana Node Will 10gb suffice? Currently the setup is, 3 Master node, 15 gb ram, 100Gb hard disk 4 Data node, 62 gb ram, 1tb hard disk 2 cli… --- ## [Number of events in logstash node stats on pipelines](https://discuss.elastic.co/t/number-of-events-in-logstash-node-stats-on-pipelines/243345)
**Author:** [@benvl](https://discuss.elastic.co/u/benvl)\ **Replies:** 0\ **Last updated:** [July 31, 2020, 11:48am UTC](https://discuss.elastic.co/t/number-of-events-in-logstash-node-stats-on-pipelines/243345 "2020-07-31T11:48:55Z")
Hi, when viewing logstash node stats, in particular the number of events. then I get reasonable high numbers on the 'in' and 'out' values. Eg. on a logstash 6.7 # curl -s -XGET 'localhost:9600/\_node/stats/pipelines'… --- ## [How do I add a new field based on the contents of a file?](https://discuss.elastic.co/t/how-do-i-add-a-new-field-based-on-the-contents-of-a-file/243340)
**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\ **Replies:** 1\ **Last updated:** [July 31, 2020, 11:14am UTC](https://discuss.elastic.co/t/how-do-i-add-a-new-field-based-on-the-contents-of-a-file/243340 "2020-07-31T11:14:38Z")
Hi, I'm currently using the netflow codec to decode netflow data and store in elastic. I want to introduce a new field called "site\_id". The site ID is going to be present in a file called /tmp/site.id This file will co… --- ## [Course enrolled before training portal migration](https://discuss.elastic.co/t/course-enrolled-before-training-portal-migration/243206)
**Author:** [@jkhere](https://discuss.elastic.co/u/jkhere)\ **Replies:** 2\ **Last updated:** [July 31, 2020, 10:11am UTC](https://discuss.elastic.co/t/course-enrolled-before-training-portal-migration/243206 "2020-07-31T10:11:18Z")
I enrolled for 'ECE Fundamentals' course on the old training portal. I did not start the course, my understanding was I need to finish it in 15 days once I start it. Before the portal migration, I got the following. O… --- ## [Run elasticsearch code source without docker](https://discuss.elastic.co/t/run-elasticsearch-code-source-without-docker/243060)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 4\ **Last updated:** [July 31, 2020, 10:03am UTC](https://discuss.elastic.co/t/run-elasticsearch-code-source-without-docker/243060 "2020-07-31T10:03:30Z")
Hello everybody, I am trying to run elasticsearch code source, and when I try to run the command ./gradlew assemble I am getting this exception: ======================================= Elasticsearch Build Hamster says… --- ## [Logstash jdbc input schedule](https://discuss.elastic.co/t/logstash-jdbc-input-schedule/243311)
**Author:** [@Luismg](https://discuss.elastic.co/u/Luismg)\ **Replies:** 2\ **Last updated:** [July 31, 2020, 9:57am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-schedule/243311 "2020-07-31T09:57:55Z")
Hi, I'm currently trying to import data from a DB into ES using the jdbc input plugin. I want to run the pipeline during the night between 9pm and 4am. How can I define my schedule? I've tried '\*/1 21-04 \* \* \*' but th… --- ## [JDBC input type "store output into single field"](https://discuss.elastic.co/t/jdbc-input-type-store-output-into-single-field/243169)
**Author:** [@rguptarg](https://discuss.elastic.co/u/rguptarg)\ **Replies:** 2\ **Last updated:** [July 31, 2020, 7:29am UTC](https://discuss.elastic.co/t/jdbc-input-type-store-output-into-single-field/243169 "2020-07-31T07:29:39Z")
Hi, I am using jdbc input type and execute the oracle query, is it possible to store query output into a single variable/field ? Query Output : - ID 100 101 102 Above output store into three different JSON into ela… --- ## [Reading just once in Elastic (Multi-instance)](https://discuss.elastic.co/t/reading-just-once-in-elastic-multi-instance/243317)
**Author:** [@Ullas7](https://discuss.elastic.co/u/Ullas7)\ **Replies:** 1\ **Last updated:** [July 31, 2020, 9:15am UTC](https://discuss.elastic.co/t/reading-just-once-in-elastic-multi-instance/243317 "2020-07-31T09:15:22Z")
Is it possible to read only once in elastic? Assume I have 4 microservices which reads by timestamp, assuming four microservice has same query and timestamp as a query param. What I am trying to achieve is if any micros… --- ## [Filebeat doesn't sent the logs to elastic cloud (circuit\_breaking\_exception)](https://discuss.elastic.co/t/filebeat-doesnt-sent-the-logs-to-elastic-cloud-circuit-breaking-exception/243204)
**Author:** [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\ **Replies:** 9\ **Last updated:** [July 31, 2020, 8:50am UTC](https://discuss.elastic.co/t/filebeat-doesnt-sent-the-logs-to-elastic-cloud-circuit-breaking-exception/243204 "2020-07-31T08:50:10Z")
Hi! I don't know why I get this error (agents filebeat in kubernetes cluster), if we increased the size of the cluster so that it had more performance and changed the indexes so that instead of 1 shard and 1 replica th… --- ## [Repository-gcs plugin 5.2.2 and Google Global HTTP batch endpoint](https://discuss.elastic.co/t/repository-gcs-plugin-5-2-2-and-google-global-http-batch-endpoint/243229)
**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\ **Replies:** 1\ **Last updated:** [July 31, 2020, 8:01am UTC](https://discuss.elastic.co/t/repository-gcs-plugin-5-2-2-and-google-global-http-batch-endpoint/243229 "2020-07-31T08:01:56Z")
Hi, Google is deprecating Global HTTP batch endpoint on Aug 12th: https://www.google.com/url?q=https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html On the ES 5.2 cluster, the repository… --- ## [The allocation of machines for different in ELK](https://discuss.elastic.co/t/the-allocation-of-machines-for-different-in-elk/243238)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 2\ **Last updated:** [July 31, 2020, 7:41am UTC](https://discuss.elastic.co/t/the-allocation-of-machines-for-different-in-elk/243238 "2020-07-31T07:41:45Z")
I have 5 machines to form a elasticsearch cluster. How should I use them in order to maximise the performance? Should I install elasticsearch and logstash on each machine and install kibana on one of them? or should I i… --- ## [Logstash - if - indexOf](https://discuss.elastic.co/t/logstash-if-indexof/243314)
**Author:** [@daemon](https://discuss.elastic.co/u/daemon)\ **Replies:** 1\ **Last updated:** [July 31, 2020, 7:14am UTC](https://discuss.elastic.co/t/logstash-if-indexof/243314 "2020-07-31T07:14:05Z")
Java if("str||aaa").indexOf("||") logstash filter if? ps. What should I do? --- ## [Way to add proxy host settings for repository-gcs plugin in ES 7.5.2?](https://discuss.elastic.co/t/way-to-add-proxy-host-settings-for-repository-gcs-plugin-in-es-7-5-2/243309)
**Author:** [@nishant.saini](https://discuss.elastic.co/u/nishant.saini)\ **Replies:** 0\ **Last updated:** [July 31, 2020, 6:31am UTC](https://discuss.elastic.co/t/way-to-add-proxy-host-settings-for-repository-gcs-plugin-in-es-7-5-2/243309 "2020-07-31T06:31:16Z")
Is there a way to provide proxy.host and proxy.port for repository-gcs plugin. The same can be easily done for repository-s3 by setting the following in elasticsearch.yml: s3.client.default.protocol: http s3.client.defa… --- ## [Autocomplete that matches phrase prefix](https://discuss.elastic.co/t/autocomplete-that-matches-phrase-prefix/243318)
**Author:** [@emanu](https://discuss.elastic.co/u/emanu)\ **Replies:** 0\ **Last updated:** [July 31, 2020, 7:03am UTC](https://discuss.elastic.co/t/autocomplete-that-matches-phrase-prefix/243318 "2020-07-31T07:03:20Z")
Hello, I'm trying to achive an autocomplete that will match an exact phrase prefix. But I don't care where this phrase will be a.k.a in the start of the sentence, in the middle or the end. For exapmle: "Brown f" -\> "… --- ## [Logstash - Filter - Error message(LogStash::ConfigurationError)](https://discuss.elastic.co/t/logstash-filter-error-message-logstash-configurationerror/243307)
**Author:** [@daemon](https://discuss.elastic.co/u/daemon)\ **Replies:** 1\ **Last updated:** [July 31, 2020, 6:06am UTC](https://discuss.elastic.co/t/logstash-filter-error-message-logstash-configurationerror/243307 "2020-07-31T06:06:09Z")
When I start Logstash I get the below error. filter{ mutate { } grok { match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:requestTime}||%{WORD:type}||%{WORD:jobId}||%{DATA:edgeId}||%{GREEDYDATA:other}"} #match =\> { "mess… --- ## [Elasticsearch Delete Index Performance](https://discuss.elastic.co/t/elasticsearch-delete-index-performance/243301)
**Author:** [@es\_is\_hard](https://discuss.elastic.co/u/es_is_hard)\ **Replies:** 4\ **Last updated:** [July 31, 2020, 6:03am UTC](https://discuss.elastic.co/t/elasticsearch-delete-index-performance/243301 "2020-07-31T06:03:20Z")
Hello! I'm looking into the performance of the delete index API and had a few questions: How fast is deleting an Elasticsearch index? Any estimates on how long it would take to delete an index with 100s of GB of data? … --- ## [Elasticsearch service gets killed](https://discuss.elastic.co/t/elasticsearch-service-gets-killed/243039)
**Author:** [@Abdul\_Hameed](https://discuss.elastic.co/u/Abdul_Hameed)\ **Replies:** 7\ **Last updated:** [July 31, 2020, 5:14am UTC](https://discuss.elastic.co/t/elasticsearch-service-gets-killed/243039 "2020-07-31T05:14:07Z")
Hi, I have a setup of ELK on one server. Elasticsearch service and kibana run fine until I start the logstash service. When I start logstash, elasticsearch gets killed instantly and I see this error: elasticsearch sys… --- ## [To exclude around 350 fields in JSON in Logstash](https://discuss.elastic.co/t/to-exclude-around-350-fields-in-json-in-logstash/239019)
**Author:** [@tamilarasanbravo](https://discuss.elastic.co/u/tamilarasanbravo)\ **Replies:** 15\ **Last updated:** [July 31, 2020, 5:12am UTC](https://discuss.elastic.co/t/to-exclude-around-350-fields-in-json-in-logstash/239019 "2020-07-31T05:12:43Z")
Hi, I am trying to exclude many Keys in the JSON field. The data is actually of a Github payload. As the contributors are bit high, the details it carries is also high. For example, the total fields/kvp are around 720 b… --- ## [Security index goes yellow when 1 of 3 masters go down](https://discuss.elastic.co/t/security-index-goes-yellow-when-1-of-3-masters-go-down/243036)
**Author:** [@sudeera](https://discuss.elastic.co/u/sudeera)\ **Replies:** 7\ **Last updated:** [July 31, 2020, 5:07am UTC](https://discuss.elastic.co/t/security-index-goes-yellow-when-1-of-3-masters-go-down/243036 "2020-07-31T05:07:21Z")
Hi Support, We have 6 node elasticsearch cluster. Node 1 is master and Node 2 and 6 are master eligible. Node 3, 4, 5, 6 are data nodes. Node 1,2,3,4,5 have same rack\_id and Node6 has a different rack\_id. When we have… --- ## [Issue with Kibana Time Filter-7.5.2](https://discuss.elastic.co/t/issue-with-kibana-time-filter-7-5-2/241888)
**Author:** [@Sanjana17](https://discuss.elastic.co/u/Sanjana17)\ **Replies:** 1\ **Last updated:** [July 20, 2020, 10:19pm UTC](https://discuss.elastic.co/t/issue-with-kibana-time-filter-7-5-2/241888 "2020-07-20T22:19:43Z")
Hi, We have 2 servers set- one for Elasticsearch and the other for Kibana (ES version-7.5.1 and Kibana's version- 7.5.2 respectively). Both servers have their timezone set to IST. No filebeat or collector is being used … --- ## [After reindex, new index has same documents but data size is much less](https://discuss.elastic.co/t/after-reindex-new-index-has-same-documents-but-data-size-is-much-less/243068)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 3\ **Last updated:** [July 31, 2020, 4:45am UTC](https://discuss.elastic.co/t/after-reindex-new-index-has-same-documents-but-data-size-is-much-less/243068 "2020-07-31T04:45:26Z")
As part of preparation for moving from Elasticsearch 6 to 7, I've reindexed an index which the Kibana Upgade Assistant flagged as "Index has more than one mapping type". The reindex completed without apparent error, the… --- ## [Can I filter logstash logs with my own log file fields?](https://discuss.elastic.co/t/can-i-filter-logstash-logs-with-my-own-log-file-fields/243300)
**Author:** [@Bhavin\_Varsur](https://discuss.elastic.co/u/Bhavin_Varsur)\ **Replies:** 0\ **Last updated:** [July 31, 2020, 4:02am UTC](https://discuss.elastic.co/t/can-i-filter-logstash-logs-with-my-own-log-file-fields/243300 "2020-07-31T04:02:52Z")
I have my own log file layout so i want to filter logstash filter in pipepines so that i can see my fields and view my own layout logs data . Is that Possible? if yes then how can i filterize ? --- ## [Geo shape self-intersection](https://discuss.elastic.co/t/geo-shape-self-intersection/242584)
**Author:** [@DenisDeis](https://discuss.elastic.co/u/DenisDeis)\ **Replies:** 4\ **Last updated:** [July 31, 2020, 3:56am UTC](https://discuss.elastic.co/t/geo-shape-self-intersection/242584 "2020-07-31T03:56:13Z")
I have the following feature: { "type": "Feature", "properties": { }, "geometry": { "type": "Polygon", "coordinates": \[\[ \[77.500, 13.500\], \[77.600, 13.500\], \[77.600, 13.400\], \[77.590, 13.400\], \[77.590, 13.390\], \[77.600,… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1304) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1306)