# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1389 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1390 --- ## [Nested Objects in Elastic](https://discuss.elastic.co/t/nested-objects-in-elastic/236321)
**Author:** [@Ayyappa\_P](https://discuss.elastic.co/u/Ayyappa_P)\ **Replies:** 2\ **Last updated:** [June 15, 2020, 4:15am UTC](https://discuss.elastic.co/t/nested-objects-in-elastic/236321 "2020-06-15T04:15:00Z")
Hi, I have a data in the following format. I'm trying with ELastic 7.6 and using Kibana. {"l1f1":"f1Value","l1f2":\[{"l2f1":"l1f1Value","l2f2":"l2f2Value","l2f3":"l2f3Value"}\]} I want to index this data using bulk inse… --- ## [How do i find out "stale primary" quickly](https://discuss.elastic.co/t/how-do-i-find-out-stale-primary-quickly/237049)
**Author:** [@yc1024](https://discuss.elastic.co/u/yc1024)\ **Replies:** 0\ **Last updated:** [June 15, 2020, 3:09am UTC](https://discuss.elastic.co/t/how-do-i-find-out-stale-primary-quickly/237049 "2020-06-15T03:09:43Z")
There are 50,000 shards and 70 nodes in my cluster.I have two nodes with hardware failure，I want to use allocate\_stale\_primary for recovery. How can I quickly find out the "stale primary". curl -X POST "http://localhos… --- ## [Count instances of a field in Elasticsearch index](https://discuss.elastic.co/t/count-instances-of-a-field-in-elasticsearch-index/236907)
**Author:** [@gitterhh](https://discuss.elastic.co/u/gitterhh)\ **Replies:** 3\ **Last updated:** [June 15, 2020, 2:08am UTC](https://discuss.elastic.co/t/count-instances-of-a-field-in-elasticsearch-index/236907 "2020-06-15T02:08:07Z")
How to count the instances of a particular field, across all documents, in a given Elasticsearch index. For example, if I've got the following documents in index goober : { '\_id':'foo', 'field1':'a value', … --- ## [Kibana Visualization Error using scripted Date field](https://discuss.elastic.co/t/kibana-visualization-error-using-scripted-date-field/235874)
**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\ **Replies:** 3\ **Last updated:** [June 15, 2020, 1:58am UTC](https://discuss.elastic.co/t/kibana-visualization-error-using-scripted-date-field/235874 "2020-06-15T01:58:09Z")
I have a scripted Date field (called "yyyy\_mm\_dd") in Kibana 7.7.0 Script Date date = new Date(doc\['ts'\].value.millis); Calendar cal = Calendar.getInstance(); cal.setTime(date); cal.set(Calendar.HOUR\_OF\_DAY, 0); cal.s… --- ## [Scripted fields not working on multiline Events](https://discuss.elastic.co/t/scripted-fields-not-working-on-multiline-events/236554)
**Author:** [@amityadav](https://discuss.elastic.co/u/amityadav)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 4:55pm UTC](https://discuss.elastic.co/t/scripted-fields-not-working-on-multiline-events/236554 "2020-06-10T16:55:54Z")
I am using multiline codec in my logstash config file in input section to merge few lines of log file. Lines 5,6,7,8,9 are getting merged into a single line and the same is visible in Kibana screen for message and sub\_cl… --- ## [Edit default logstash index template](https://discuss.elastic.co/t/edit-default-logstash-index-template/236682)
**Author:** [@FabioAntunes](https://discuss.elastic.co/u/FabioAntunes)\ **Replies:** 0\ **Last updated:** [June 11, 2020, 10:49am UTC](https://discuss.elastic.co/t/edit-default-logstash-index-template/236682 "2020-06-11T10:49:13Z")
Hey folks, been going back and forth on documentation and discuss topics. Unfortunately, I couldn't found a solution to my problem. I have a default index template for logstash, if I do GET /\_template/elasticsearch-temp… --- ## [Issue with \_update command](https://discuss.elastic.co/t/issue-with-update-command/236841)
**Author:** [@Ayyappa\_P](https://discuss.elastic.co/u/Ayyappa_P)\ **Replies:** 0\ **Last updated:** [June 12, 2020, 7:27am UTC](https://discuss.elastic.co/t/issue-with-update-command/236841 "2020-06-12T07:27:39Z")
Hi, I've a data in the following format. { "uTestTokenId": "8488DA03-447F-46DF-B431-03C027674A16", "vTestTokenNumber": "", "uCycleId": "0FDDDE67-6793-4093-9790-9E3611356C8B", "uPupil… --- ## [Elasticsearch vs Oracle](https://discuss.elastic.co/t/elasticsearch-vs-oracle/236968)
**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\ **Replies:** 3\ **Last updated:** [June 14, 2020, 11:19pm UTC](https://discuss.elastic.co/t/elasticsearch-vs-oracle/236968 "2020-06-14T23:19:40Z")
Hi, I am a student and my project is about Elastic Stack. the company I work for is currently using oracle for managing its data. they want assess Elasticsearch as a replacement. according to my project success they … --- ## [Remove spaces from field names after JSON parsing from filebeat](https://discuss.elastic.co/t/remove-spaces-from-field-names-after-json-parsing-from-filebeat/236806)
**Author:** [@nmoham](https://discuss.elastic.co/u/nmoham)\ **Replies:** 2\ **Last updated:** [June 14, 2020, 11:14pm UTC](https://discuss.elastic.co/t/remove-spaces-from-field-names-after-json-parsing-from-filebeat/236806 "2020-06-14T23:14:41Z")
Sample data { "time": "2020-06-11 01:59:16.9760 -05:00", "level": "Info", "threadId": "164", "Message": "GetContactDataForCustomAutoAssignWorker", "Message": "Completed", "Call Tracker Id": "7e6a1602-6a89-4933-9329-d173… --- ## [Unable to parse date in logstash getting \_grokparsefailure in elasticsearch](https://discuss.elastic.co/t/unable-to-parse-date-in-logstash-getting-grokparsefailure-in-elasticsearch/237039)
**Author:** [@Ankit\_Goel1](https://discuss.elastic.co/u/Ankit_Goel1)\ **Replies:** 1\ **Last updated:** [June 14, 2020, 10:33pm UTC](https://discuss.elastic.co/t/unable-to-parse-date-in-logstash-getting-grokparsefailure-in-elasticsearch/237039 "2020-06-14T22:33:12Z")
I am using beats to read logs from my log file and log format is like: 2020-06-07T17:45:35.8964992Z|101|Info|136|ThreadPool|ValidationService.GetValidValueDate.LookupByCurrencyAndOwnersOfClientId I tried many patterns … --- ## [Metricbeat to logstash parsing error: illegal\_state\_exception & Can't get text on a START\_OBJECT](https://discuss.elastic.co/t/metricbeat-to-logstash-parsing-error-illegal-state-exception-cant-get-text-on-a-start-object/237035)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 1\ **Last updated:** [June 14, 2020, 7:40pm UTC](https://discuss.elastic.co/t/metricbeat-to-logstash-parsing-error-illegal-state-exception-cant-get-text-on-a-start-object/237035 "2020-06-14T19:40:39Z")
Hello, I am using the following configuration to get metrics from a Raspebrry Pi (running Raspberry OS) using Metricbeat. It works flawlessly when I send the logs directly to elasticsearch. However, I want to move my ing… --- ## [Logstash giving this error when I am running it in my Command prompt](https://discuss.elastic.co/t/logstash-giving-this-error-when-i-am-running-it-in-my-command-prompt/237036)
**Author:** [@TUSHAR\_Sinha](https://discuss.elastic.co/u/TUSHAR_Sinha)\ **Replies:** 0\ **Last updated:** [June 14, 2020, 7:17pm UTC](https://discuss.elastic.co/t/logstash-giving-this-error-when-i-am-running-it-in-my-command-prompt/237036 "2020-06-14T19:17:01Z")
Error: Could not find or load main class Stack\\logstash-7.7.1\\logstash-7.7.1\\logstash-core\\lib\\jars\\animal-sniffer-annotations-1.14.jar I have installed the logstash and while running it. It is showing me this error. Ho… --- ## [Sum of miliseconds Kibana](https://discuss.elastic.co/t/sum-of-miliseconds-kibana/236790)
**Author:** [@gribeiro](https://discuss.elastic.co/u/gribeiro)\ **Replies:** 4\ **Last updated:** [June 14, 2020, 5:43pm UTC](https://discuss.elastic.co/t/sum-of-miliseconds-kibana/236790 "2020-06-14T17:43:49Z")
Hi, I have in my SQL Server a DateTime2 Field which represents how long a task took to be completed. In a simple way, the value is StartDateTimeOfTask - GetDate(), that gives me the result in seconds, and it would be s… --- ## [Parse inconsistent XML trace using logstash](https://discuss.elastic.co/t/parse-inconsistent-xml-trace-using-logstash/236985)
**Author:** [@joshua.stanley](https://discuss.elastic.co/u/joshua.stanley)\ **Replies:** 1\ **Last updated:** [June 14, 2020, 5:12pm UTC](https://discuss.elastic.co/t/parse-inconsistent-xml-trace-using-logstash/236985 "2020-06-14T17:12:09Z")
I am very new to ELK , need your guidance in my below usecase development. We have lot of XML files generated from source server(around 55GB per day )..but, from each file, we need only very few lines. There are 2 para… --- ## [Could not send Elasticresearch via logstash](https://discuss.elastic.co/t/could-not-send-elasticresearch-via-logstash/237013)
**Author:** [@sssjin](https://discuss.elastic.co/u/sssjin)\ **Replies:** 1\ **Last updated:** [June 14, 2020, 4:20pm UTC](https://discuss.elastic.co/t/could-not-send-elasticresearch-via-logstash/237013 "2020-06-14T16:20:26Z")
Want to send my original log for CPU usage to elasticsearch via logstash. Here is the log file pasth:/opt/dev/resource/cpu/log file name:result.log 06/14/2020:22:30:02,41 2.logstash input file input { file { pat… --- ## [Optimize multiple queries with the same filters](https://discuss.elastic.co/t/optimize-multiple-queries-with-the-same-filters/236925)
**Author:** [@solenom85](https://discuss.elastic.co/u/solenom85)\ **Replies:** 1\ **Last updated:** [June 14, 2020, 3:28pm UTC](https://discuss.elastic.co/t/optimize-multiple-queries-with-the-same-filters/236925 "2020-06-14T15:28:35Z")
Hi I have a question related with optimization, I have a page lets call it global page that haves N components on each. Each component will perform an elasticsearch query that is going to be composed of two parts Quer… --- ## [Where can I find the grok pattern for the COMBINEDAPACHELOG in logstash?](https://discuss.elastic.co/t/where-can-i-find-the-grok-pattern-for-the-combinedapachelog-in-logstash/236990)
**Author:** [@curiousmind](https://discuss.elastic.co/u/curiousmind)\ **Replies:** 4\ **Last updated:** [June 14, 2020, 2:41pm UTC](https://discuss.elastic.co/t/where-can-i-find-the-grok-pattern-for-the-combinedapachelog-in-logstash/236990 "2020-06-14T14:41:53Z")
When I try parsing the apache access logs with the following grok rule, it comes out with 0 grokparsefailures match =\> { "message" =\> \["%{COMBINEDAPACHELOG}"\] } But when I try doing the same with the following grok pa… --- ## [When Do Plugin Hacks Trigger](https://discuss.elastic.co/t/when-do-plugin-hacks-trigger/237010)
**Author:** [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\ **Replies:** 3\ **Last updated:** [June 14, 2020, 1:20pm UTC](https://discuss.elastic.co/t/when-do-plugin-hacks-trigger/237010 "2020-06-14T13:20:38Z")
When on a dashboard my hacks will trigger the first time. If I click the breadcrumbs to go back to dashboard and click on other dashboards hacks.js will not trigger again until I click another app and the page reloads. I… --- ## [Logstash output condition to filter a string in syslog](https://discuss.elastic.co/t/logstash-output-condition-to-filter-a-string-in-syslog/237024)
**Author:** [@sanjedi](https://discuss.elastic.co/u/sanjedi)\ **Replies:** 1\ **Last updated:** [June 14, 2020, 12:50pm UTC](https://discuss.elastic.co/t/logstash-output-condition-to-filter-a-string-in-syslog/237024 "2020-06-14T12:50:37Z")
Hi, I am new to ELK and trying to send syslogs based on a customer code to different ES indexes using Logstash. I am trying following with no luck. input { udp { type =\> syslogs port =\> 5001 } } output { if \[… --- ## [CorruptIndexException missing .si file](https://discuss.elastic.co/t/corruptindexexception-missing-si-file/236994)
**Author:** [@keduadoi](https://discuss.elastic.co/u/keduadoi)\ **Replies:** 4\ **Last updated:** [June 14, 2020, 10:20am UTC](https://discuss.elastic.co/t/corruptindexexception-missing-si-file/236994 "2020-06-14T10:20:44Z")
Our cluster has 3 nodes, primary shards are about 10K, and replica = 1. The cluster had worked normally until 1 cluster showed error message: \[root@server2014 ~\]# uncaught exception in thread \[main\] ElasticsearchExcept… --- ## [Logstash email output plugin throwing error](https://discuss.elastic.co/t/logstash-email-output-plugin-throwing-error/237018)
**Author:** [@Mahebub\_Sayyed](https://discuss.elastic.co/u/Mahebub_Sayyed)\ **Replies:** 0\ **Last updated:** [June 14, 2020, 10:09am UTC](https://discuss.elastic.co/t/logstash-email-output-plugin-throwing-error/237018 "2020-06-14T10:09:03Z")
Below is logstash config email { to =\> "to@email" from =\> "noreply@fromemail" subject =\> "Alert" body =\> '%{message}' port =\> 25 debug =\> "true" address =\> "emailserverIP" … --- ## [Pie chart from a single event](https://discuss.elastic.co/t/pie-chart-from-a-single-event/236095)
**Author:** [@GilKor](https://discuss.elastic.co/u/GilKor)\ **Replies:** 4\ **Last updated:** [June 14, 2020, 10:04am UTC](https://discuss.elastic.co/t/pie-chart-from-a-single-event/236095 "2020-06-14T10:04:54Z")
Hi, Is it possible to make a pie chart using the value itself in the top hit event? for example, I have in my top hit event : passCount: 3 failCount: 1 skipCount: 0 I want to make a pie chart from that information,… --- ## [Failed to create shard, failure IOException\[failed to obtain in-memory shard lock\]](https://discuss.elastic.co/t/failed-to-create-shard-failure-ioexception-failed-to-obtain-in-memory-shard-lock/236973)
**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\ **Replies:** 4\ **Last updated:** [June 14, 2020, 7:50am UTC](https://discuss.elastic.co/t/failed-to-create-shard-failure-ioexception-failed-to-obtain-in-memory-shard-lock/236973 "2020-06-14T07:50:03Z")
We just rebuilt our cluster and are running into a problem we have not had before. We see almost constant relocating. During this process, we will eventually (every couple hours) run into a node or two stuck in Uninitial… --- ## [Can't run logstash. pathname contains null byte](https://discuss.elastic.co/t/cant-run-logstash-pathname-contains-null-byte/237008)
**Author:** [@Mahathir\_Mohammad](https://discuss.elastic.co/u/Mahathir_Mohammad)\ **Replies:** 13\ **Last updated:** [June 14, 2020, 7:25am UTC](https://discuss.elastic.co/t/cant-run-logstash-pathname-contains-null-byte/237008 "2020-06-14T07:25:54Z")
I'm trying to run logstash for elasticsearch but getting this error. I don't know what is the reason. Please help me. \[ERROR\] 2020-06-14 01:17:31.633 \[\[main\]-pipeline-manager\] javapipeline - Pipeline aborted due to … --- ## [Update prebuilt ML jobs](https://discuss.elastic.co/t/update-prebuilt-ml-jobs/236896)
**Author:** [@Harm](https://discuss.elastic.co/u/Harm)\ **Replies:** 1\ **Last updated:** [June 14, 2020, 4:36am UTC](https://discuss.elastic.co/t/update-prebuilt-ml-jobs/236896 "2020-06-14T04:36:08Z")
Hi, According to this site, there should be over 100 prebuilt ML rules. However when I'm going to our Elastic Cloud based Stack, Machine Learning, Job Management, then I only see 20 jobs, some of the versions even look … --- ## [Get elasticsearch hostnames from kibana plugin](https://discuss.elastic.co/t/get-elasticsearch-hostnames-from-kibana-plugin/235967)
**Author:** [@McKittrick\_Kaminski](https://discuss.elastic.co/u/McKittrick_Kaminski)\ **Replies:** 2\ **Last updated:** [June 14, 2020, 12:49am UTC](https://discuss.elastic.co/t/get-elasticsearch-hostnames-from-kibana-plugin/235967 "2020-06-14T00:49:51Z")
I removed a hard coded entry for a test environment, and realized that my code to detect the ES endpoints doesn't work anymore. I was doing this const config = server.config() // server is passed down from plugin initi… --- ## [How to use the time-series-plugin in Kibana](https://discuss.elastic.co/t/how-to-use-the-time-series-plugin-in-kibana/237002)
**Author:** [@tenet\_testuser1](https://discuss.elastic.co/u/tenet_testuser1)\ **Replies:** 1\ **Last updated:** [June 14, 2020, 12:31am UTC](https://discuss.elastic.co/t/how-to-use-the-time-series-plugin-in-kibana/237002 "2020-06-14T00:31:54Z")
I came across a github repo "time-series-plugin" but I am unable to find the instructions on how to use that in a dashboard. I see quite some activitiy on this repo until mid-2019. It's quite after that. Anyone know ho… --- ## [Dedicated master nodes: JVM usage](https://discuss.elastic.co/t/dedicated-master-nodes-jvm-usage/237000)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 0\ **Last updated:** [June 13, 2020, 11:18pm UTC](https://discuss.elastic.co/t/dedicated-master-nodes-jvm-usage/237000 "2020-06-13T23:18:35Z")
We have 3 dedicated master nodes in the cluster, and I have noticed from ES monitoring that their JVM does get used, even though only one master is active at any time. Do the inactive master nodes perform tasks? I’ve ass… --- ## [Logstash crashes, restarts and then it just duplicates the data over and over](https://discuss.elastic.co/t/logstash-crashes-restarts-and-then-it-just-duplicates-the-data-over-and-over/236997)
**Author:** [@jensolsson.se](https://discuss.elastic.co/u/jensolsson.se)\ **Replies:** 0\ **Last updated:** [June 13, 2020, 9:17pm UTC](https://discuss.elastic.co/t/logstash-crashes-restarts-and-then-it-just-duplicates-the-data-over-and-over/236997 "2020-06-13T21:17:51Z")
I have set up logstash to index data from AWS ELB logs. I download the logs to the machine every minute and then I index the logs using logstash. Now I believe since the log files are in .gz that there is a corrupt gzip… --- ## [Is there any way to handle the time format returned by elasticsearch?](https://discuss.elastic.co/t/is-there-any-way-to-handle-the-time-format-returned-by-elasticsearch/236964)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 1\ **Last updated:** [June 13, 2020, 1:38pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-handle-the-time-format-returned-by-elasticsearch/236964 "2020-06-13T13:38:36Z")
Convert to YYYY.MM.DD HH:mm:ss [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1388) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1390)