# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1418 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1419 --- ## [Suppress Dissector mapping failure logs](https://discuss.elastic.co/t/suppress-dissector-mapping-failure-logs/185785)
**Author:** [@vivekkarne](https://discuss.elastic.co/u/vivekkarne)\ **Replies:** 2\ **Last updated:** [May 29, 2020, 8:58pm UTC](https://discuss.elastic.co/t/suppress-dissector-mapping-failure-logs/185785 "2020-05-29T20:58:46Z")
Hi, I have some dissect filters in my configuration file which fail at certain points in time. Failure as such causes logstash to write a message on the lines of: \[2019-06-14T00:00:00,232\]\[WARN \]\[org.logstash.dissect.D… --- ## [Iterate\_on in translate filter](https://discuss.elastic.co/t/iterate-on-in-translate-filter/234980)
**Author:** [@theo1991](https://discuss.elastic.co/u/theo1991)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 8:37pm UTC](https://discuss.elastic.co/t/iterate-on-in-translate-filter/234980 "2020-05-29T20:37:41Z")
Hi, I encounter a problem with iterate\_on. I have multiple config files for different client, which are the same except the name of the files. The translation with the dictionnary works for the indexes from some config… --- ## [?refresh=wait\_for in elasticsearch output](https://discuss.elastic.co/t/refresh-wait-for-in-elasticsearch-output/232859)
**Author:** [@Fernando\_Ruben\_Otero](https://discuss.elastic.co/u/Fernando_Ruben_Otero)\ **Replies:** 2\ **Last updated:** [May 29, 2020, 6:37pm UTC](https://discuss.elastic.co/t/refresh-wait-for-in-elasticsearch-output/232859 "2020-05-29T18:37:30Z")
Hi, I can't find in the documentation if there's a way to specify the refresh parameter on a \_bulk operation, in particular I wanted to try wait\_for https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-… --- ## [Install multiple version on the same server (just for test)](https://discuss.elastic.co/t/install-multiple-version-on-the-same-server-just-for-test/234969)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 0\ **Last updated:** [May 29, 2020, 6:28pm UTC](https://discuss.elastic.co/t/install-multiple-version-on-the-same-server-just-for-test/234969 "2020-05-29T18:28:19Z")
hi, for test purpose, I would like to install on the same server serverA two different Elasticsearch version. Currently, I have version 6.8.9 and I want a second instance with version 7.7. My first instance has been i… --- ## [TOO\_MANY\_REQUESTS/12/index read-only / allow delete (api](https://discuss.elastic.co/t/too-many-requests-12-index-read-only-allow-delete-api/234901)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 2\ **Last updated:** [May 29, 2020, 6:16pm UTC](https://discuss.elastic.co/t/too-many-requests-12-index-read-only-allow-delete-api/234901 "2020-05-29T18:16:31Z")
Why i am getting below logs in Logstash logs? \[2020-05-29T03:21:20,840\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\]\[220c76045b556cf67d246e54931c092b729b0e8dcc83cd8283a28d6d531fc2bd\] retrying failed action with response… --- ## [CSP warning toast displays in latest browsers](https://discuss.elastic.co/t/csp-warning-toast-displays-in-latest-browsers/234625)
**Author:** [@braddre](https://discuss.elastic.co/u/braddre)\ **Replies:** 2\ **Last updated:** [May 29, 2020, 5:39pm UTC](https://discuss.elastic.co/t/csp-warning-toast-displays-in-latest-browsers/234625 "2020-05-29T17:39:57Z")
I've added server.customResponseHeaders.Content-Security-Policy to kibana.kml to have the browser enforce some CSP restrictions. This ticket CSP unsafe-eval auditing · Issue #36311 · elastic/kibana · GitHub discusses th… --- ## [How to increase the number of transaction in logstash](https://discuss.elastic.co/t/how-to-increase-the-number-of-transaction-in-logstash/234951)
**Author:** [@Md\_Iburahimsha\_S](https://discuss.elastic.co/u/Md_Iburahimsha_S)\ **Replies:** 2\ **Last updated:** [May 29, 2020, 4:41pm UTC](https://discuss.elastic.co/t/how-to-increase-the-number-of-transaction-in-logstash/234951 "2020-05-29T16:41:42Z")
My goal has to reach 600 login/sec. when i run with single client, transaction going 170-200/sec. So i have added few more client machine to achieve this goal. how ever i unable to reach my goal, maximum transaction goin… --- ## [Elasticsearch creating too many directories in /tmp](https://discuss.elastic.co/t/elasticsearch-creating-too-many-directories-in-tmp/234591)
**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\ **Replies:** 4\ **Last updated:** [May 29, 2020, 4:26pm UTC](https://discuss.elastic.co/t/elasticsearch-creating-too-many-directories-in-tmp/234591 "2020-05-29T16:26:52Z")
I am running into an issue since upgrading elasticsearch from 6.7.2 to 7.5.2, where elasticsearch is now creating 1000's of files in /tmp on the host machines. Filenames are elasticsearch-\* and controller\_log\_\* Elastic… --- ## [Stopwords in analyzer doesn't seem to work](https://discuss.elastic.co/t/stopwords-in-analyzer-doesnt-seem-to-work/234825)
**Author:** [@chari](https://discuss.elastic.co/u/chari)\ **Replies:** 2\ **Last updated:** [May 29, 2020, 4:07pm UTC](https://discuss.elastic.co/t/stopwords-in-analyzer-doesnt-seem-to-work/234825 "2020-05-29T16:07:10Z")
I am creating an index using the following code : es.indices.create(index= "newtest", body= { "settings": { "analysis": { "analyzer": { "std\_english": { … --- ## [Masking the password and handling two client IP's in apache\_access log](https://discuss.elastic.co/t/masking-the-password-and-handling-two-client-ips-in-apache-access-log/234927)
**Author:** [@marco2005](https://discuss.elastic.co/u/marco2005)\ **Replies:** 4\ **Last updated:** [May 29, 2020, 3:44pm UTC](https://discuss.elastic.co/t/masking-the-password-and-handling-two-client-ips-in-apache-access-log/234927 "2020-05-29T15:44:42Z")
Sometimes, I have standard apache logs starting with a single client IP and sometimes with two client IP's like this which my logstash config does not handle. Shall I use a 3rd pattern in Grok ? 1.2.3.4,5.6.7.8 Also,… --- ## [Could not find or load main class files in logstash](https://discuss.elastic.co/t/could-not-find-or-load-main-class-files-in-logstash/234919)
**Author:** [@Sri\_Subiksha](https://discuss.elastic.co/u/Sri_Subiksha)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 3:35pm UTC](https://discuss.elastic.co/t/could-not-find-or-load-main-class-files-in-logstash/234919 "2020-05-29T15:35:59Z")
Continuing the discussion from Could not find or load main class Files: can you help me with this error? --- ## [MultiIndex query with sort and search filters different for each indices](https://discuss.elastic.co/t/multiindex-query-with-sort-and-search-filters-different-for-each-indices/234948)
**Author:** [@ArunVenkat](https://discuss.elastic.co/u/ArunVenkat)\ **Replies:** 0\ **Last updated:** [May 29, 2020, 3:26pm UTC](https://discuss.elastic.co/t/multiindex-query-with-sort-and-search-filters-different-for-each-indices/234948 "2020-05-29T15:26:35Z")
Hi Team, Hope you are doing doing good!!! Can you help me on this??? I need a MutiIndex search query, where I can sort the columns of each Indices and specify the Columns for each Indices(\_Source) and with filter cond… --- ## [Filtering the output columns in multi index search query](https://discuss.elastic.co/t/filtering-the-output-columns-in-multi-index-search-query/234947)
**Author:** [@Muna](https://discuss.elastic.co/u/Muna)\ **Replies:** 0\ **Last updated:** [May 29, 2020, 3:21pm UTC](https://discuss.elastic.co/t/filtering-the-output-columns-in-multi-index-search-query/234947 "2020-05-29T15:21:29Z")
Hi, we are trying to get the specific field of source \[output columns\] for specific indices for the multi index search query . applying '\_source' at route level is not working . please advise how to get this. GET langu… --- ## [Node roles](https://discuss.elastic.co/t/node-roles/234944)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 3:08pm UTC](https://discuss.elastic.co/t/node-roles/234944 "2020-05-29T15:08:11Z")
what is node roles = r means This role pop up after upgrade to 7.7 this node is suppose to be co-ordinating node only 10.29.249.104 7 29 0 0.37 0.51 0.25 r - elkm05 config… --- ## [Need advice how to organize data / schema?](https://discuss.elastic.co/t/need-advice-how-to-organize-data-schema/234926)
**Author:** [@hrvoj3e](https://discuss.elastic.co/u/hrvoj3e)\ **Replies:** 0\ **Last updated:** [May 29, 2020, 1:27pm UTC](https://discuss.elastic.co/t/need-advice-how-to-organize-data-schema/234926 "2020-05-29T13:27:02Z")
I need to index book texts (mainly extracted from images OCR) and search those pages as fulltext. TLDR: Should I index each part as doc or is it better to index records as docs and have dynamic field for pages Record… --- ## [Line sequence with logstash](https://discuss.elastic.co/t/line-sequence-with-logstash/234922)
**Author:** [@Katia](https://discuss.elastic.co/u/Katia)\ **Replies:** 7\ **Last updated:** [May 29, 2020, 2:37pm UTC](https://discuss.elastic.co/t/line-sequence-with-logstash/234922 "2020-05-29T14:37:19Z")
Good morning, Can I get some help ! I have a log file, where the first data on each line is in timestamp format. to do my analysis I need to know the order of these lines, so I used a new "seq" field with the ruby fil… --- ## [Indexed field to only contain synonyms](https://discuss.elastic.co/t/indexed-field-to-only-contain-synonyms/233797)
**Author:** [@hatoms](https://discuss.elastic.co/u/hatoms)\ **Replies:** 6\ **Last updated:** [May 29, 2020, 2:32pm UTC](https://discuss.elastic.co/t/indexed-field-to-only-contain-synonyms/233797 "2020-05-29T14:32:25Z")
My thinking may be flawed but here is the problem I am attempting to solve. I have a synonym filter/analyzer configured like this: analyzer: { synonym\_analyzer: { tokenizer: 'standard', … --- ## [ERROR: Failed to set password for user \[apm\_system\] yet again](https://discuss.elastic.co/t/error-failed-to-set-password-for-user-apm-system-yet-again/233836)
**Author:** [@zippycup](https://discuss.elastic.co/u/zippycup)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 2:21pm UTC](https://discuss.elastic.co/t/error-failed-to-set-password-for-user-apm-system-yet-again/233836 "2020-05-29T14:21:23Z")
Im running elasticsearch 7.6.2 Basic license 3 master nodes cluster: name: dev node: master: true data: false ingest: false network.host: "0.0.0.0" cluster.initial\_master\_nodes: "es-master-0,es-master-1,es-mas… --- ## [Remote cold storage node?](https://discuss.elastic.co/t/remote-cold-storage-node/234844)
**Author:** [@skluthe1](https://discuss.elastic.co/u/skluthe1)\ **Replies:** 2\ **Last updated:** [May 29, 2020, 2:12pm UTC](https://discuss.elastic.co/t/remote-cold-storage-node/234844 "2020-05-29T14:12:50Z")
My company has decided that it is going to be more economical to use elastic cloud for our high performance storage but long term data retention would be too expensive. We do have a large amount of lower performance stor… --- ## [Search for exact field in an array](https://discuss.elastic.co/t/search-for-exact-field-in-an-array/234931)
**Author:** [@Jawad](https://discuss.elastic.co/u/Jawad)\ **Replies:** 0\ **Last updated:** [May 29, 2020, 2:06pm UTC](https://discuss.elastic.co/t/search-for-exact-field-in-an-array/234931 "2020-05-29T14:06:18Z")
Elasticsearch version: 7.1.1 Hi, I try a lot but could not found any solution in my index, I have a field which is containing strings. so, for example, I have two documents containing different values in locations ar… --- ## [ElasticsearchStatusException Elasticsearch exception](https://discuss.elastic.co/t/elasticsearchstatusexception-elasticsearch-exception/234704)
**Author:** [@vinay123](https://discuss.elastic.co/u/vinay123)\ **Replies:** 3\ **Last updated:** [May 29, 2020, 1:40pm UTC](https://discuss.elastic.co/t/elasticsearchstatusexception-elasticsearch-exception/234704 "2020-05-29T13:40:15Z")
i am writing a search on index doc. but i am getting error as "ElasticsearchStatusException\[Elasticsearch exception \[type=illegal\_argument\_exception, reason=request \[/index/\_search\] contains unrecognized parameters: \[ig… --- ## [Rename the message field from the original log](https://discuss.elastic.co/t/rename-the-message-field-from-the-original-log/234674)
**Author:** [@marco2005](https://discuss.elastic.co/u/marco2005)\ **Replies:** 2\ **Last updated:** [May 29, 2020, 1:29pm UTC](https://discuss.elastic.co/t/rename-the-message-field-from-the-original-log/234674 "2020-05-29T13:29:34Z")
I have a log line. 1590644837.665697 2020-05-28 07:47:17,665 to:004915122898981|id:Hello there|status\_code:SentSMSOK|status\_message:abc.exmaple.com - 200|message:(2020-05-28 07:46:41) TEST: stuck-daily@example.com… --- ## [ES query to check the existence of a document\_id?](https://discuss.elastic.co/t/es-query-to-check-the-existence-of-a-document-id/234854)
**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\ **Replies:** 9\ **Last updated:** [May 29, 2020, 1:29pm UTC](https://discuss.elastic.co/t/es-query-to-check-the-existence-of-a-document-id/234854 "2020-05-29T13:29:08Z")
I'm using a file input in logstash to input files but I encounter duplicates time to time. Currently, I'm using the following the below options in ES output plugin to avoid duplicates. document\_id =\> "%{message}" ac… --- ## [Adding Netty4HttpRequestHandler dependency to my project](https://discuss.elastic.co/t/adding-netty4httprequesthandler-dependency-to-my-project/234925)
**Author:** [@rahulkarajgikar](https://discuss.elastic.co/u/rahulkarajgikar)\ **Replies:** 0\ **Last updated:** [May 29, 2020, 1:23pm UTC](https://discuss.elastic.co/t/adding-netty4httprequesthandler-dependency-to-my-project/234925 "2020-05-29T13:23:52Z")
Hi, I'm trying to extend the Netty4HttpRequestHandler class in my project, but IntelliJ isn't recognizing the class. I have this dependency in my build.gradle file : compile 'org.elasticsearch:elasticsearch:7.7.0' I … --- ## [Error connecting MongoDB and Elasticseach through Logstash](https://discuss.elastic.co/t/error-connecting-mongodb-and-elasticseach-through-logstash/234762)
**Author:** [@FernandoMOTA](https://discuss.elastic.co/u/FernandoMOTA)\ **Replies:** 16\ **Last updated:** [May 29, 2020, 1:14pm UTC](https://discuss.elastic.co/t/error-connecting-mongodb-and-elasticseach-through-logstash/234762 "2020-05-29T13:14:24Z")
I can't do the ingestion between the MongoBD database and Elasticseach using Logstash, below is my .conf file input { uri =\> 'mongodb://localhost:27017/exemplo' placeholder\_db\_dir =\> '/opt/logstash-m… --- ## [ECK pod re-scheduling explanation](https://discuss.elastic.co/t/eck-pod-re-scheduling-explanation/234908)
**Author:** [@Virajsl](https://discuss.elastic.co/u/Virajsl)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 1:05pm UTC](https://discuss.elastic.co/t/eck-pod-re-scheduling-explanation/234908 "2020-05-29T13:05:58Z")
I would be grateful if someone can explain behavior for following scenario. k8s cluster with 3 master nodes 6 worker nodes. 3 nodes from workers are selected to run dedicated master ( these nodes have calculated spec fo… --- ## [External Ruby Script to enrich multiple Fields](https://discuss.elastic.co/t/external-ruby-script-to-enrich-multiple-fields/234916)
**Author:** [@muraliv](https://discuss.elastic.co/u/muraliv)\ **Replies:** 0\ **Last updated:** [May 29, 2020, 12:43pm UTC](https://discuss.elastic.co/t/external-ruby-script-to-enrich-multiple-fields/234916 "2020-05-29T12:43:53Z")
Hi All, I am currently enriching 4 fields using translate filter. I would like to know if it's possible to create an external ruby script with the following code. Here is a code for one such field. translate… --- ## [IllegalArgumentException: numHits must be \> 0 in ES 7.7.0](https://discuss.elastic.co/t/illegalargumentexception-numhits-must-be-0-in-es-7-7-0/234915)
**Author:** [@Gregor\_Weckbecker](https://discuss.elastic.co/u/Gregor_Weckbecker)\ **Replies:** 0\ **Last updated:** [May 29, 2020, 12:40pm UTC](https://discuss.elastic.co/t/illegalargumentexception-numhits-must-be-0-in-es-7-7-0/234915 "2020-05-29T12:40:37Z")
When using ES 7.7.0 the following query curl -X POST -H "Content-Type:application/json" http://localhost:9200/bug\\\*/\_search -d '{"size":1,"query":{"term":{"test":{"value":"test","boost":1.0}}},"sort":\[{"@timestamp":{"o… --- ## [How to write a Logstash Multi-line Pattern for the Windows Events](https://discuss.elastic.co/t/how-to-write-a-logstash-multi-line-pattern-for-the-windows-events/234913)
**Author:** [@sharmad](https://discuss.elastic.co/u/sharmad)\ **Replies:** 0\ **Last updated:** [May 29, 2020, 12:38pm UTC](https://discuss.elastic.co/t/how-to-write-a-logstash-multi-line-pattern-for-the-windows-events/234913 "2020-05-29T12:38:25Z")
can someone guide me to create a Multi-line Pattern for the below windows events with event ID and need to parse my log data Event\[0\]: Log Name: Application Source: Desktop Window Manager Date: 2020-05-29T16:53:12.00… --- ## [Help Getting Exact matches on text field](https://discuss.elastic.co/t/help-getting-exact-matches-on-text-field/234905)
**Author:** [@Babis\_Kokmotos](https://discuss.elastic.co/u/Babis_Kokmotos)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 12:05pm UTC](https://discuss.elastic.co/t/help-getting-exact-matches-on-text-field/234905 "2020-05-29T12:05:42Z")
Hey guys , i am facing an issue with exact match on text fields. i am using the keyword analyzer during mapping but i have an exact match requirement. Example data item1 : "Hamburger" ,item2: "Big Hamburger my issue… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1417) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1419)