# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1307 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1308 --- ## [Query takes to much time in elastic compare to sphinx](https://discuss.elastic.co/t/query-takes-to-much-time-in-elastic-compare-to-sphinx/243032)
**Author:** [@KrishK](https://discuss.elastic.co/u/KrishK)\ **Replies:** 4\ **Last updated:** [July 30, 2020, 1:06pm UTC](https://discuss.elastic.co/t/query-takes-to-much-time-in-elastic-compare-to-sphinx/243032 "2020-07-30T13:06:38Z")
Hi Support, We moved Sphinx to ElasticSearch. Elastic and Sphinx server configuration is the same. OS: Ubuntu 18.04 RAM: 60GB(50% occupied Elastic) Disc : 2TB Processor: 4 Core Elastic Configuration: ELK - 7.7.X W… --- ## [Unable to join to my new cluster](https://discuss.elastic.co/t/unable-to-join-to-my-new-cluster/240321)
**Author:** [@hgpit](https://discuss.elastic.co/u/hgpit)\ **Replies:** 1\ **Last updated:** [July 30, 2020, 1:03pm UTC](https://discuss.elastic.co/t/unable-to-join-to-my-new-cluster/240321 "2020-07-30T13:03:39Z")
Hello, We are very inexperienced with ES, so we imagine we are just overlooking something simple. We have built two machines, running ES (OSS) 7.8. Hostname: g000057.domain.com, IP: 10.40.1.62, Node name: g000057 Hos… --- ## [Error in visualisation \[esaggs\] \> Internal Server Error ELK 7.8](https://discuss.elastic.co/t/error-in-visualisation-esaggs-internal-server-error-elk-7-8/243217)
**Author:** [@Feriel\_Mufti](https://discuss.elastic.co/u/Feriel_Mufti)\ **Replies:** 1\ **Last updated:** [July 30, 2020, 12:59pm UTC](https://discuss.elastic.co/t/error-in-visualisation-esaggs-internal-server-error-elk-7-8/243217 "2020-07-30T12:59:30Z")
Hello , i am using Elasricsearch and kibana 7.8 , while trying to vizualise filebeat pie chart using aggregation it shows this errror : Error in visualisation \[esaggs\] \> Internal Server Error , what is the problem and … --- ## [Master nodes lost](https://discuss.elastic.co/t/master-nodes-lost/243075)
**Author:** [@Marcus\_Simonsen](https://discuss.elastic.co/u/Marcus_Simonsen)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 12:40pm UTC](https://discuss.elastic.co/t/master-nodes-lost/243075 "2020-07-30T12:40:26Z")
Hello Users + Experts. Due to unfortunate operator error the PVs of the master nodes were deleted, due to a out of disk error from the master nodes. We had 3 dedicated master nodes and 12 data nodes. The data nodes ar… --- ## [Elapsed filter - keeps crashing](https://discuss.elastic.co/t/elapsed-filter-keeps-crashing/243215)
**Author:** [@Tommie](https://discuss.elastic.co/u/Tommie)\ **Replies:** 0\ **Last updated:** [July 30, 2020, 12:19pm UTC](https://discuss.elastic.co/t/elapsed-filter-keeps-crashing/243215 "2020-07-30T12:19:52Z")
Can anyone please help me with the following: This logstash config is working fine (only with the elapsed part commented): filter { csv { separator =\> "|" columns =\> \[ "datum","level","uniek","mes… --- ## [How to parse Proxmox log format?](https://discuss.elastic.co/t/how-to-parse-proxmox-log-format/243089)
**Author:** [@gmbynkrkrqz](https://discuss.elastic.co/u/gmbynkrkrqz)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 12:04pm UTC](https://discuss.elastic.co/t/how-to-parse-proxmox-log-format/243089 "2020-07-30T12:04:50Z")
Hello, I would like to store all my Proxmox logs in Elasticsearch. I know there are Groks and I already use its for some other logs. However, as you can see below, the log format is often different : the fields are not … --- ## [Iterate\_on in Logstash no working properly](https://discuss.elastic.co/t/iterate-on-in-logstash-no-working-properly/243091)
**Author:** [@tasipasin](https://discuss.elastic.co/u/tasipasin)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 12:04pm UTC](https://discuss.elastic.co/t/iterate-on-in-logstash-no-working-properly/243091 "2020-07-30T12:04:17Z")
I don't know if I'm using this wrongly or if it's a problem with the filter, but, I have the following structure: { ..., "eventDataSplit" =\> { "1" =\> { "valueKey" : "1.1.1" }, "2" =\> { "valueKey" : "2.1.1" }, "… --- ## [Boost 5.x -\> 7.x migartion performance for Gbs of data (C# Nest)](https://discuss.elastic.co/t/boost-5-x-7-x-migartion-performance-for-gbs-of-data-c-nest/243212)
**Author:** [@yBother](https://discuss.elastic.co/u/yBother)\ **Replies:** 0\ **Last updated:** [July 30, 2020, 11:55am UTC](https://discuss.elastic.co/t/boost-5-x-7-x-migartion-performance-for-gbs-of-data-c-nest/243212 "2020-07-30T11:55:51Z")
I need to migrate existing ES data from version 5.2.2 to 7.6.0. I do that by reindexing index per index to V6 and then bulk inserting index per index to a new created index and then delete the source index. I cannot us… --- ## [How to create a default index pattern via python api](https://discuss.elastic.co/t/how-to-create-a-default-index-pattern-via-python-api/243085)
**Author:** [@momora9809](https://discuss.elastic.co/u/momora9809)\ **Replies:** 9\ **Last updated:** [July 30, 2020, 11:42am UTC](https://discuss.elastic.co/t/how-to-create-a-default-index-pattern-via-python-api/243085 "2020-07-30T11:42:36Z")
Hi, I saw How to create a default index pattern via kibana api that used Kibana API. I wanted to use python, but didn't know what uri should I use. header = { "kbn-xsrf": "true", 'Content-Type': 'application/j… --- ## [Field is not renaming](https://discuss.elastic.co/t/field-is-not-renaming/243026)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 5\ **Last updated:** [July 29, 2020, 12:19pm UTC](https://discuss.elastic.co/t/field-is-not-renaming/243026 "2020-07-29T12:19:43Z")
I am using winlogbeat and i want to create an index which stores user sessions info. but i am doing this step by step that is i am storing successfull login of user. Everything is going good but now i am facing some prob… --- ## [Need help in listing syslog data (10000 +)](https://discuss.elastic.co/t/need-help-in-listing-syslog-data-10000/242902)
**Author:** [@nisaxena](https://discuss.elastic.co/u/nisaxena)\ **Replies:** 4\ **Last updated:** [July 30, 2020, 10:27am UTC](https://discuss.elastic.co/t/need-help-in-listing-syslog-data-10000/242902 "2020-07-30T10:27:11Z")
Hi There, I am new to ELK and need help. I am working on syslog data collected from all zonal rsyslog servers. Now I am putting some visualization to this data. there are around 10000+ unique hosts data collected everyd… --- ## [How to add time of ingestion to the document?](https://discuss.elastic.co/t/how-to-add-time-of-ingestion-to-the-document/243042)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 10:02am UTC](https://discuss.elastic.co/t/how-to-add-time-of-ingestion-to-the-document/243042 "2020-07-30T10:02:30Z")
Hi Elasticians, I've created pipeline pipeline\_add\_ingest\_timestamp. I would like to achieve add time of ingesting by elasticsearch to the document using this pipeline. What am I doing wrong? The field is not populate t… --- ## [Elasticsearch Gradle build failed: PKIX path building failed](https://discuss.elastic.co/t/elasticsearch-gradle-build-failed-pkix-path-building-failed/243195)
**Author:** [@Crab2died](https://discuss.elastic.co/u/Crab2died)\ **Replies:** 0\ **Last updated:** [July 30, 2020, 9:55am UTC](https://discuss.elastic.co/t/elasticsearch-gradle-build-failed-pkix-path-building-failed/243195 "2020-07-30T09:55:14Z")
P1: git clone GitHub - elastic/elasticsearch: Free and Open, Distributed, RESTful Search Engine elasticsearch P2: import https://jcenter.bintray.com certification to JAVA\_HOME/lib/security/cacerts I'm sure the certi… --- ## [How to patch eck-operator image](https://discuss.elastic.co/t/how-to-patch-eck-operator-image/243187)
**Author:** [@CHU\_XU](https://discuss.elastic.co/u/CHU_XU)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 10:00am UTC](https://discuss.elastic.co/t/how-to-patch-eck-operator-image/243187 "2020-07-30T10:00:22Z")
Hi there, I need to do some security update of the eck-operator image. Usually I run a docker image and with --entrypoint /bin/bash, just like docker run -it --entrypoint /bin/bash image and do the update there. Then… --- ## [In-between Query for IP data type](https://discuss.elastic.co/t/in-between-query-for-ip-data-type/242882)
**Author:** [@shankarlogs](https://discuss.elastic.co/u/shankarlogs)\ **Replies:** 12\ **Last updated:** [July 30, 2020, 9:19am UTC](https://discuss.elastic.co/t/in-between-query-for-ip-data-type/242882 "2020-07-30T09:19:14Z")
I need to understand how to create in-between query for IP datatype. I need a specific example for IPv6 addresses --- ## [Introduction to Observability: Logging](https://discuss.elastic.co/t/introduction-to-observability-logging/241998)
**Author:** [@Nhavene](https://discuss.elastic.co/u/Nhavene)\ **Replies:** 3\ **Last updated:** [July 30, 2020, 9:29am UTC](https://discuss.elastic.co/t/introduction-to-observability-logging/241998 "2020-07-30T09:29:48Z")
I'm getting the below error when trying to enable nginx module on filebeat. elastic@ip-172-31-13-13:~/filebeat-7.8.0-darwin-x86\_64$ ./filebeat modules enable nginx -bash: ./filebeat: cannot execute binary file: Exec fo… --- ## [Query a range of values in phrase](https://discuss.elastic.co/t/query-a-range-of-values-in-phrase/242621)
**Author:** [@Sahithi\_Muddasani](https://discuss.elastic.co/u/Sahithi_Muddasani)\ **Replies:** 6\ **Last updated:** [July 30, 2020, 9:22am UTC](https://discuss.elastic.co/t/query-a-range-of-values-in-phrase/242621 "2020-07-30T09:22:33Z")
Hi I already have a log in the message field as below Message:Info matched and sent Http/1.2 200(345). Message:Info mismatch http/1.2 404(21) The value 200 is the status , but I don't have it in a separate field. How… --- ## [Change default for "index\_options"](https://discuss.elastic.co/t/change-default-for-index-options/243191)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 0\ **Last updated:** [July 30, 2020, 9:21am UTC](https://discuss.elastic.co/t/change-default-for-index-options/243191 "2020-07-30T09:21:49Z")
Hi, I'm trying to get rid of anything unnecessary in my cluster and want to change the default for "index\_options", from positions to docs. At least generally on an index level. I don't have any query that'd benefit fro… --- ## [Out of the box Refiners](https://discuss.elastic.co/t/out-of-the-box-refiners/242716)
**Author:** [@aakhiezer](https://discuss.elastic.co/u/aakhiezer)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 8:48am UTC](https://discuss.elastic.co/t/out-of-the-box-refiners/242716 "2020-07-30T08:48:56Z")
I'm pretty new at elastic and I'm wondering is there out of the box feature of Refiners, like in SharePoint search? Thanks a lot! --- ## [Logstash Filebeat module Configuration - No data has been received from this module yet](https://discuss.elastic.co/t/logstash-filebeat-module-configuration-no-data-has-been-received-from-this-module-yet/242990)
**Author:** [@GraceYu](https://discuss.elastic.co/u/GraceYu)\ **Replies:** 11\ **Last updated:** [July 30, 2020, 8:44am UTC](https://discuss.elastic.co/t/logstash-filebeat-module-configuration-no-data-has-been-received-from-this-module-yet/242990 "2020-07-30T08:44:54Z")
Hi, I have been trying to configure Logstash Filebeat module. However I received message "No data has been received from this module yet". I have installed Logstash. The following log from console: Sending Logstash… --- ## [Pairing nested properties in nested filter](https://discuss.elastic.co/t/pairing-nested-properties-in-nested-filter/243185)
**Author:** [@Yonatan\_Omer](https://discuss.elastic.co/u/Yonatan_Omer)\ **Replies:** 0\ **Last updated:** [July 30, 2020, 8:37am UTC](https://discuss.elastic.co/t/pairing-nested-properties-in-nested-filter/243185 "2020-07-30T08:37:51Z")
Hi Our documents have a nested array tasks. We need to filter documents having task.cpu \> X for tasks entries having tasks.id = 'foo' { "tasks" : { "type" : "nested", "properties" : { "cpu" : { "type" : "floa… --- ## [Only one node in cluster(6 nodes) slow query and high read I/O when querying](https://discuss.elastic.co/t/only-one-node-in-cluster-6-nodes-slow-query-and-high-read-i-o-when-querying/243158)
**Author:** [@Sunghoon\_Jo](https://discuss.elastic.co/u/Sunghoon_Jo)\ **Replies:** 6\ **Last updated:** [July 30, 2020, 8:17am UTC](https://discuss.elastic.co/t/only-one-node-in-cluster-6-nodes-slow-query-and-high-read-i-o-when-querying/243158 "2020-07-30T08:17:23Z")
Hi All, I have some problem when querying. My cluster have 6 data nodes. When I query, only one node has unusual symptoms. my query is very simple. I'm doing stress tests, only one node shows high Read I/O(3000/s) , L… --- ## [All index missing every 1-2 days. What is happening?](https://discuss.elastic.co/t/all-index-missing-every-1-2-days-what-is-happening/243152)
**Author:** [@Oh\_Chee\_Peng](https://discuss.elastic.co/u/Oh_Chee_Peng)\ **Replies:** 4\ **Last updated:** [July 30, 2020, 7:50am UTC](https://discuss.elastic.co/t/all-index-missing-every-1-2-days-what-is-happening/243152 "2020-07-30T07:50:13Z")
I created an instance on Google Cloud, using Elasticsearch Certified by Bitnami. There is no issue with creating index, but every 1 or 2 days, all index will be mysteriously missing, and I am having hard time troublesho… --- ## [Time-range search query help](https://discuss.elastic.co/t/time-range-search-query-help/243161)
**Author:** [@sandeepgdba](https://discuss.elastic.co/u/sandeepgdba)\ **Replies:** 1\ **Last updated:** [July 30, 2020, 7:47am UTC](https://discuss.elastic.co/t/time-range-search-query-help/243161 "2020-07-30T07:47:18Z")
Hi, I need help in time-range search aggregations, I am trying to figure out aggregated visits for every 2 hours below is the query which doesn't work. help needed on this POST index\_name/\_search { "size": 0, "quer… --- ## [Unable to import saved objects in Kibana](https://discuss.elastic.co/t/unable-to-import-saved-objects-in-kibana/243020)
**Author:** [@leo.hamon](https://discuss.elastic.co/u/leo.hamon)\ **Replies:** 7\ **Last updated:** [July 30, 2020, 7:42am UTC](https://discuss.elastic.co/t/unable-to-import-saved-objects-in-kibana/243020 "2020-07-30T07:42:56Z")
Hi all, I'm looking for some help to import saved objects on Kibana. I have about 75 visualizations and 10 dashboards on my computer and I want to export and import them in Kibana on a server. But when I drop my .ndjso… --- ## [Elastic Cloud on Kubernets not starting - advice needed on (probable) cause](https://discuss.elastic.co/t/elastic-cloud-on-kubernets-not-starting-advice-needed-on-probable-cause/242533)
**Author:** [@paoloyx](https://discuss.elastic.co/u/paoloyx)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 6:57am UTC](https://discuss.elastic.co/t/elastic-cloud-on-kubernets-not-starting-advice-needed-on-probable-cause/242533 "2020-07-30T06:57:21Z")
Hi all, i'me currently after an elasticsearch cluster that is not starting up. Cluster has been deployed by others using a home-made helm chart, and the Elastic Cloud on Kubernetes All the Helm chart is based on the fo… --- ## [Is there connector or plugin to pull or push nagios monitoring data to ELK?](https://discuss.elastic.co/t/is-there-connector-or-plugin-to-pull-or-push-nagios-monitoring-data-to-elk/243163)
**Author:** [@Jaya\_Nehru\_Kumar](https://discuss.elastic.co/u/Jaya_Nehru_Kumar)\ **Replies:** 0\ **Last updated:** [July 30, 2020, 6:46am UTC](https://discuss.elastic.co/t/is-there-connector-or-plugin-to-pull-or-push-nagios-monitoring-data-to-elk/243163 "2020-07-30T06:46:32Z")
is there connector or plugin to pull or push nagios monitoring data to ELK? --- ## [Filebeat Multiline Not Working At All, Please Help](https://discuss.elastic.co/t/filebeat-multiline-not-working-at-all-please-help/242537)
**Author:** [@gratefulted](https://discuss.elastic.co/u/gratefulted)\ **Replies:** 1\ **Last updated:** [July 30, 2020, 6:39am UTC](https://discuss.elastic.co/t/filebeat-multiline-not-working-at-all-please-help/242537 "2020-07-30T06:39:46Z")
Hi all, I'm fairly new to ELK stack and am helping a client with an issue they are having getting multiline logs formatted in kibana. Here is my filebeat.yml: #=========================== Filebeat inputs ==============… --- ## [Split a JSON array into individual documents in Logstash](https://discuss.elastic.co/t/split-a-json-array-into-individual-documents-in-logstash/243151)
**Author:** [@jclemons7](https://discuss.elastic.co/u/jclemons7)\ **Replies:** 7\ **Last updated:** [July 30, 2020, 6:29am UTC](https://discuss.elastic.co/t/split-a-json-array-into-individual-documents-in-logstash/243151 "2020-07-30T06:29:08Z")
I'm sorry to ask this honestly.. normally I'm a decently smart fella.. but I can't seem to grasp this. I have some JSON coming that I need to split into individual documents. { "lan": { "inkbps": 756.27034713779… --- ## [Multiple/Join query on same index](https://discuss.elastic.co/t/multiple-join-query-on-same-index/243160)
**Author:** [@mohitbharti](https://discuss.elastic.co/u/mohitbharti)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 6:05am UTC](https://discuss.elastic.co/t/multiple-join-query-on-same-index/243160 "2020-07-30T06:05:53Z")
I want to know the Elastic search query for select \* from (Select sum(income) from users where users.name like '%abc%' group by users.address) aResult, (select count(\*), phone number from users where users.name like '%… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1306) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1308)