# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1449

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1450

---

## [Is ECK ready / compatible with ElasticSearch & Kibana 7.7](https://discuss.elastic.co/t/is-eck-ready-compatible-with-elasticsearch-kibana-7-7/232566)

<div class="topic-metadata">

**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\
**Replies:** 2\
**Last updated:** [May 14, 2020, 12:48pm UTC](https://discuss.elastic.co/t/is-eck-ready-compatible-with-elasticsearch-kibana-7-7/232566 "2020-05-14T12:48:01Z")

</div>

Hi guys, I would like to ask if ECK is ready / compatible with the newly released version 7.7 of ElasticSearch and Kibana? I was hoping to find this information here: https://www.elastic.co/guide/en/cloud-on-k8s/curren…

---

## [Failure when parsing logs -\> results in a lot of worthless Logs](https://discuss.elastic.co/t/failure-when-parsing-logs-results-in-a-lot-of-worthless-logs/232612)

<div class="topic-metadata">

**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\
**Replies:** 3\
**Last updated:** [May 14, 2020, 12:28pm UTC](https://discuss.elastic.co/t/failure-when-parsing-logs-results-in-a-lot-of-worthless-logs/232612 "2020-05-14T12:28:16Z")

</div>

Hello community - i've set up a logstash config to parse some VmWare Host Logs, but i see an error in my Logstash logs: error: :response=\>{"index"=\>{"\_index"=\>"vmware-2020.05.14", "\_type"=\>"\_doc", "\_id"=\>"ejurEnIBcPJ…

---

## [Logstash is not picking up the files](https://discuss.elastic.co/t/logstash-is-not-picking-up-the-files/232132)

<div class="topic-metadata">

**Author:** [@srinjan\_dutta](https://discuss.elastic.co/u/srinjan_dutta)\
**Replies:** 6\
**Last updated:** [May 14, 2020, 12:26pm UTC](https://discuss.elastic.co/t/logstash-is-not-picking-up-the-files/232132 "2020-05-14T12:26:47Z")

</div>

Hi All, I am stuck with this for 3 -4 weeks . I have a configuration file as below and trying to pick up a xml file using logstash. I have used all the resources available under the sun to resolve it but to no avail. I…

---

## [Transform - can I "group by" splitting values in one row?](https://discuss.elastic.co/t/transform-can-i-group-by-splitting-values-in-one-row/231383)

<div class="topic-metadata">

**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\
**Replies:** 8\
**Last updated:** [May 14, 2020, 12:26pm UTC](https://discuss.elastic.co/t/transform-can-i-group-by-splitting-values-in-one-row/231383 "2020-05-14T12:26:32Z")

</div>

I'd like to add a dimension (a single field in each document with values, "buy" or "sell") to create 2 values in a single output record/row. So in Excel, this would look like splitting a value into 2 columns. Is this p…

---

## [Getting from in search response](https://discuss.elastic.co/t/getting-from-in-search-response/232616)

<div class="topic-metadata">

**Author:** [@guruprasadkk](https://discuss.elastic.co/u/guruprasadkk)\
**Replies:** 1\
**Last updated:** [May 14, 2020, 12:23pm UTC](https://discuss.elastic.co/t/getting-from-in-search-response/232616 "2020-05-14T12:23:31Z")

</div>

Previously we were using the solr, now we migrated to elastic search. We are using basic pagination with rows, offset. In solr from search response we can get the offset value we used for that query by using #SolrDocum…

---

## [Elastic Search integration with Magneto 2.3.3](https://discuss.elastic.co/t/elastic-search-integration-with-magneto-2-3-3/232636)

<div class="topic-metadata">

**Author:** [@parthipan\_p](https://discuss.elastic.co/u/parthipan_p)\
**Replies:** 2\
**Last updated:** [May 14, 2020, 12:19pm UTC](https://discuss.elastic.co/t/elastic-search-integration-with-magneto-2-3-3/232636 "2020-05-14T12:19:23Z")

</div>

I have tried to use and configure the Elastic search feature. I have installed the below packages and respective versions, Java - 11.0.7 Magento 2.3.3 Elastic search: 6.8.8 Module installed from git branch is: 2.8.x …

---

## [Where is the merge policy defined?](https://discuss.elastic.co/t/where-is-the-merge-policy-defined/232496)

<div class="topic-metadata">

**Author:** [@Emanuel\_Velzi](https://discuss.elastic.co/u/Emanuel_Velzi)\
**Replies:** 9\
**Last updated:** [May 14, 2020, 11:49am UTC](https://discuss.elastic.co/t/where-is-the-merge-policy-defined/232496 "2020-05-14T11:49:16Z")

</div>

Hi, I am using ES 7.6.2 and I can not find the merge policy for my indices. I don't see it in \_settings. In addition, I can not find the default merge policy in the elastic documentation. Can someone help me please?

---

## [Cannot get xpack disabled on logstash.yml](https://discuss.elastic.co/t/cannot-get-xpack-disabled-on-logstash-yml/232628)

<div class="topic-metadata">

**Author:** [@Fernando\_A](https://discuss.elastic.co/u/Fernando_A)\
**Replies:** 0\
**Last updated:** [May 14, 2020, 11:37am UTC](https://discuss.elastic.co/t/cannot-get-xpack-disabled-on-logstash-yml/232628 "2020-05-14T11:37:17Z")

</div>

I am trying to run Logstash in my kubernetes-cluster but I get this error: OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release. …

---

## [Index template resulting in missing all fields in kibana](https://discuss.elastic.co/t/index-template-resulting-in-missing-all-fields-in-kibana/232601)

<div class="topic-metadata">

**Author:** [@Deny7](https://discuss.elastic.co/u/Deny7)\
**Replies:** 1\
**Last updated:** [May 14, 2020, 11:12am UTC](https://discuss.elastic.co/t/index-template-resulting-in-missing-all-fields-in-kibana/232601 "2020-05-14T11:12:57Z")

</div>

Hi, I defined template on existing index. But when the template is applied on index creation, all fields dissapear in kibana. I cant see any error in logs. Without template defined its showing data. Can anybody help? Ki…

---

## [Cluster configuration, shards, and replica](https://discuss.elastic.co/t/cluster-configuration-shards-and-replica/232587)

<div class="topic-metadata">

**Author:** [@carmine.fabrizio](https://discuss.elastic.co/u/carmine.fabrizio)\
**Replies:** 3\
**Last updated:** [May 14, 2020, 11:01am UTC](https://discuss.elastic.co/t/cluster-configuration-shards-and-replica/232587 "2020-05-14T11:01:33Z")

</div>

Hi, I have a cluster of 9 nodes, 3 master-hot, 3warm, and 3 cold, they have the same amount of ram 32GB but different disk-space, the hot is on SSD, the others on the mechanic. I haven't followed the ratio best practic…

---

## [Grok pattern extraction help](https://discuss.elastic.co/t/grok-pattern-extraction-help/232610)

<div class="topic-metadata">

**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\
**Replies:** 2\
**Last updated:** [May 14, 2020, 10:47am UTC](https://discuss.elastic.co/t/grok-pattern-extraction-help/232610 "2020-05-14T10:47:06Z")

</div>

Hi All, Can any one please help to divide the message in to 3 parts using grok filter Complete message : Exception SAPClient.execute method com.sap.conn.jco.JCoException: (104) RFC\_ERROR\_SYSTEM\_FAILURE: No more memor…

---

## [Resource Management of all requests in the system](https://discuss.elastic.co/t/resource-management-of-all-requests-in-the-system/232354)

<div class="topic-metadata">

**Author:** [@sohami](https://discuss.elastic.co/u/sohami)\
**Replies:** 5\
**Last updated:** [May 14, 2020, 7:55am UTC](https://discuss.elastic.co/t/resource-management-of-all-requests-in-the-system/232354 "2020-05-14T07:55:27Z")

</div>

Hi, I am looking for some feedback on my understanding and question related to resource management done in ES. Today in ES, I see there are circuit breakers which provides a way to manage the high JVM heap usage and the…

---

## [Get the aggregation that measures unique users from different cities using elasticsearch event log index](https://discuss.elastic.co/t/get-the-aggregation-that-measures-unique-users-from-different-cities-using-elasticsearch-event-log-index/232237)

<div class="topic-metadata">

**Author:** [@Nisrein\_Sada](https://discuss.elastic.co/u/Nisrein_Sada)\
**Replies:** 6\
**Last updated:** [May 14, 2020, 10:23am UTC](https://discuss.elastic.co/t/get-the-aggregation-that-measures-unique-users-from-different-cities-using-elasticsearch-event-log-index/232237 "2020-05-14T10:23:38Z")

</div>

I am trying to measure the number of users from different countries by reading the events\_log\_index ES, this index has all the user interactions from a mobile. Therefore the user might have several records in the event i…

---

## [Elasticsearch service is crashing while indexing](https://discuss.elastic.co/t/elasticsearch-service-is-crashing-while-indexing/232472)

<div class="topic-metadata">

**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\
**Replies:** 5\
**Last updated:** [May 14, 2020, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-service-is-crashing-while-indexing/232472 "2020-05-14T10:23:15Z")

</div>

Hi, I am running Elasticsearch on CentOS, and to indexing the 5GB files automatically using fsCrawler commands in a python script.When I am running that script, elastic search is crashing. below is the status using sys…

---

## [Logstash cannot start because of Config Error - can't find the issue](https://discuss.elastic.co/t/logstash-cannot-start-because-of-config-error-cant-find-the-issue/232575)

<div class="topic-metadata">

**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\
**Replies:** 6\
**Last updated:** [May 14, 2020, 9:42am UTC](https://discuss.elastic.co/t/logstash-cannot-start-because-of-config-error-cant-find-the-issue/232575 "2020-05-14T09:42:53Z")

</div>

So i've reconfigured my logstash-config files - to seperate different logs. Now if i try to start it - i get the following error: Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, …

---

## [How to change @timestamp from UTC timezone to Other timezone](https://discuss.elastic.co/t/how-to-change-timestamp-from-utc-timezone-to-other-timezone/231838)

<div class="topic-metadata">

**Author:** [@abdorrezahadi](https://discuss.elastic.co/u/abdorrezahadi)\
**Replies:** 2\
**Last updated:** [May 14, 2020, 9:01am UTC](https://discuss.elastic.co/t/how-to-change-timestamp-from-utc-timezone-to-other-timezone/231838 "2020-05-14T09:01:04Z")

</div>

Logstash generates indexes based on @timestamp with UTC time, if I want to get documents from 2020-05-08 to 2020-05-09 with my timezone, I need to search indexes logstash-2020-05-07 and logstash-2020-05-08, if I can ch…

---

## [Pass elastic index from url to kibana](https://discuss.elastic.co/t/pass-elastic-index-from-url-to-kibana/232573)

<div class="topic-metadata">

**Author:** [@Stab\_Ones](https://discuss.elastic.co/u/Stab_Ones)\
**Replies:** 1\
**Last updated:** [May 14, 2020, 8:59am UTC](https://discuss.elastic.co/t/pass-elastic-index-from-url-to-kibana/232573 "2020-05-14T08:59:12Z")

</div>

Hi, is there any way to pass index from url params to kibana? app/canvas?index=myIndex#/workpad/workpad query={ string "SELECT MONTH\_OF\_YEAR(dateBegin) month, SUM(someValue) value, some AS some, Type title FROM "{urlpa…

---

## [Grok check if exists](https://discuss.elastic.co/t/grok-check-if-exists/232433)

<div class="topic-metadata">

**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\
**Replies:** 3\
**Last updated:** [May 14, 2020, 8:53am UTC](https://discuss.elastic.co/t/grok-check-if-exists/232433 "2020-05-14T08:53:48Z")

</div>

Hi, I have 2 type of nginx logs: x.x.x.x - - \[13/May/2020:16:42:27 +0430\] "GET /cache/68/fb/68fb0ff0cf190dc7fcc567e76e1e4c2b.jpg HTTP/1.1" 200 79059 x.x.x.x - - \[13/May/2020:16:40:06 +0430\] "GET /dl-apk/1585150257\_v…

---

## [Can't list snapshot in S3 repository](https://discuss.elastic.co/t/cant-list-snapshot-in-s3-repository/232583)

<div class="topic-metadata">

**Author:** [@Antoine-Leveque](https://discuss.elastic.co/u/Antoine-Leveque)\
**Replies:** 0\
**Last updated:** [May 14, 2020, 8:38am UTC](https://discuss.elastic.co/t/cant-list-snapshot-in-s3-repository/232583 "2020-05-14T08:38:59Z")

</div>

Hello ! I'm facing some issues with snapshot on an S3 compatible storage behind an nginx proxy. I don't have any error when registering the repository and i can take a snapshot : Success log on elasticsearch cluster N…

---

## [How to ingest / adapt my data with many arrays of objects](https://discuss.elastic.co/t/how-to-ingest-adapt-my-data-with-many-arrays-of-objects/232582)

<div class="topic-metadata">

**Author:** [@twright8](https://discuss.elastic.co/u/twright8)\
**Replies:** 0\
**Last updated:** [May 14, 2020, 8:34am UTC](https://discuss.elastic.co/t/how-to-ingest-adapt-my-data-with-many-arrays-of-objects/232582 "2020-05-14T08:34:45Z")

</div>

I have about 500000 documents of json data which are quite complex. see below for an example. Essentially i'd like to be able to visualise individual elements of objects within arrays but using the nested data type seems…

---

## [Forward only ERROR or Warn log lines to Splunk](https://discuss.elastic.co/t/forward-only-error-or-warn-log-lines-to-splunk/232561)

<div class="topic-metadata">

**Author:** [@Shivhare](https://discuss.elastic.co/u/Shivhare)\
**Replies:** 4\
**Last updated:** [May 14, 2020, 8:27am UTC](https://discuss.elastic.co/t/forward-only-error-or-warn-log-lines-to-splunk/232561 "2020-05-14T08:27:59Z")

</div>

Need your expert advise on how can I configure my logstash.conf file to forward only the ERROR OR WARN log lines to Splunk. I have done some online research that a grok filter or wrapping the output with if condition can…

---

## [How to use aggregation when range query size is greater than 10000](https://discuss.elastic.co/t/how-to-use-aggregation-when-range-query-size-is-greater-than-10000/232579)

<div class="topic-metadata">

**Author:** [@JavaDeveloper](https://discuss.elastic.co/u/JavaDeveloper)\
**Replies:** 0\
**Last updated:** [May 14, 2020, 8:21am UTC](https://discuss.elastic.co/t/how-to-use-aggregation-when-range-query-size-is-greater-than-10000/232579 "2020-05-14T08:21:53Z")

</div>

Hi everyone. I want to create a date range query on my documents. It is possible that my user request a full day query (00:00:00 to 23:59:59) and often the result size is nearly 40000 (greater than 10000). I want to …

---

## [Field boost vs query text boost](https://discuss.elastic.co/t/field-boost-vs-query-text-boost/232305)

<div class="topic-metadata">

**Author:** [@Lalit\_Kumar](https://discuss.elastic.co/u/Lalit_Kumar)\
**Replies:** 1\
**Last updated:** [May 14, 2020, 8:20am UTC](https://discuss.elastic.co/t/field-boost-vs-query-text-boost/232305 "2020-05-14T08:20:43Z")

</div>

In elaticsearch7.x either of these queries are not working please correct me where i'm wrong. i want a search which is boosted with field and specific word in a query. query = ("winter foxˆ2" OR "summer ice") query = …

---

## [Failed to process cluster event (put-mapping) within 30s at UTC 00:00:00](https://discuss.elastic.co/t/failed-to-process-cluster-event-put-mapping-within-30s-at-utc-0000/231919)

<div class="topic-metadata">

**Author:** [@vissu](https://discuss.elastic.co/u/vissu)\
**Replies:** 4\
**Last updated:** [May 14, 2020, 7:57am UTC](https://discuss.elastic.co/t/failed-to-process-cluster-event-put-mapping-within-30s-at-utc-0000/231919 "2020-05-14T07:57:16Z")

</div>

Hi Team, every day during UTC 00:00:00 we start receiving this error( failed to process cluster event (put-mapping) within 30s ). will the mappings be put all the data nodes ?? i mean will this API hit all the data node…

---

## [Did I hit bug related to scroll and too many scroll contexts](https://discuss.elastic.co/t/did-i-hit-bug-related-to-scroll-and-too-many-scroll-contexts/230954)

<div class="topic-metadata">

**Author:** [@crs](https://discuss.elastic.co/u/crs)\
**Replies:** 1\
**Last updated:** [May 14, 2020, 7:47am UTC](https://discuss.elastic.co/t/did-i-hit-bug-related-to-scroll-and-too-many-scroll-contexts/230954 "2020-05-14T07:47:23Z")

</div>

Hi, I've probably hit bug related to scrolling feature. I'm running ES 7.6.2 and have one process iterating over all entries from one of indices. It uses scroll feature and was working fine till yesterday. Now when I'm …

---

## [Imap Plugin Parsing Error](https://discuss.elastic.co/t/imap-plugin-parsing-error/232569)

<div class="topic-metadata">

**Author:** [@Stefano\_Serano](https://discuss.elastic.co/u/Stefano_Serano)\
**Replies:** 0\
**Last updated:** [May 14, 2020, 7:25am UTC](https://discuss.elastic.co/t/imap-plugin-parsing-error/232569 "2020-05-14T07:25:33Z")

</div>

Hi all. I've configured logstash multiple input: Filebeat Input Imap Plugin Input and output to two different Elasticsearch index. After upgrade form 7.2 to 7.6 logstash not index mails anymore prompting this erro…

---

## [Kibana navigation very slow](https://discuss.elastic.co/t/kibana-navigation-very-slow/232141)

<div class="topic-metadata">

**Author:** [@vikramaddagulla](https://discuss.elastic.co/u/vikramaddagulla)\
**Replies:** 8\
**Last updated:** [May 14, 2020, 7:06am UTC](https://discuss.elastic.co/t/kibana-navigation-very-slow/232141 "2020-05-14T07:06:53Z")

</div>

Hello, I could observe that kibana navigation between different pages is very slow. The search looks fine. But if I go to discover and then to dashboards etc...that navigation is taking a lot of time. Please note, tha…

---

## [Difference in two timestamp fields](https://discuss.elastic.co/t/difference-in-two-timestamp-fields/232151)

<div class="topic-metadata">

**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\
**Replies:** 2\
**Last updated:** [May 14, 2020, 6:31am UTC](https://discuss.elastic.co/t/difference-in-two-timestamp-fields/232151 "2020-05-14T06:31:41Z")

</div>

Hello I have two fields closed\_date and open\_date which are in date format and are aggregatable. i want to create a new scripted field using scripting to calculate the difference between them. We are using ELK 7.3.0 ve…

---

## [Kibana Query Displaying Incorrect Results](https://discuss.elastic.co/t/kibana-query-displaying-incorrect-results/228703)

<div class="topic-metadata">

**Author:** [@vikramaddagulla](https://discuss.elastic.co/u/vikramaddagulla)\
**Replies:** 10\
**Last updated:** [May 14, 2020, 6:09am UTC](https://discuss.elastic.co/t/kibana-query-displaying-incorrect-results/228703 "2020-05-14T06:09:24Z")

</div>

Hi, I am trying to view the logs which have higher time-taken parameter. In many of the logs, I can see that the time taken parameter is logged in as 8.000, 15.500, 15.753 etc If I try to search with timetaken \> 8.000 …

---

## [Elasticsearch non loop back address data migration](https://discuss.elastic.co/t/elasticsearch-non-loop-back-address-data-migration/232536)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 7\
**Last updated:** [May 14, 2020, 6:08am UTC](https://discuss.elastic.co/t/elasticsearch-non-loop-back-address-data-migration/232536 "2020-05-14T06:08:17Z")

</div>

Hi I'm using localhost so far and if I'm planning to create a cluster later and if I enable network.host and cluster settings, will I lose my data as ES points to localhost:9200 so far?? Regards Ram

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1448)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1450)
