# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1450 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1451 --- ## [Parse logfiles (haproxy/nginx/apache) and send to APM](https://discuss.elastic.co/t/parse-logfiles-haproxy-nginx-apache-and-send-to-apm/232418)
**Author:** [@wosc](https://discuss.elastic.co/u/wosc)\ **Replies:** 2\ **Last updated:** [May 14, 2020, 6:07am UTC](https://discuss.elastic.co/t/parse-logfiles-haproxy-nginx-apache-and-send-to-apm/232418 "2020-05-14T06:07:04Z")
Hello, is there a common way or guideline how to convert webserver access log information (like from a haproxy/nginx/apache service) into APM transactions/spans? Would it be enough to include typical ECS common schema … --- ## [Collapse on nested inner hits](https://discuss.elastic.co/t/collapse-on-nested-inner-hits/232553)
**Author:** [@mekanix](https://discuss.elastic.co/u/mekanix)\ **Replies:** 0\ **Last updated:** [May 14, 2020, 6:02am UTC](https://discuss.elastic.co/t/collapse-on-nested-inner-hits/232553 "2020-05-14T06:02:33Z")
Can you do collapse on inner\_hits like this: { "query": { "bool": { "filter": \[ { "nested": { "path": "foo", "query": { "match\_all": {} }, … --- ## [Xml PARSING IN LOGSTASH](https://discuss.elastic.co/t/xml-parsing-in-logstash/232385)
**Author:** [@Puneeth\_S\_B\_Gowda](https://discuss.elastic.co/u/Puneeth_S_B_Gowda)\ **Replies:** 2\ **Last updated:** [May 14, 2020, 5:54am UTC](https://discuss.elastic.co/t/xml-parsing-in-logstash/232385 "2020-05-14T05:54:35Z")
Hi I am new to ELK Looking for extracting column from XML i need bedtype as a new column value as D1K from below xml D1K My logstashsetting Sample Logstash configuration for creating a simple Beats -\> Logstash -\> Ela… --- ## [What is the best way to create subquery with elasticsearch](https://discuss.elastic.co/t/what-is-the-best-way-to-create-subquery-with-elasticsearch/231623)
**Author:** [@scofield](https://discuss.elastic.co/u/scofield)\ **Replies:** 4\ **Last updated:** [May 14, 2020, 5:50am UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-create-subquery-with-elasticsearch/231623 "2020-05-14T05:50:46Z")
I have an alert that is trigged every time the last record added has the field rabbitmq.queue.name == 'service\_test\_error' and the field rabbitmq.queue.messages.total.count != '0' The sql query below works for my search… --- ## [Redirection to log messages from graphs/charts](https://discuss.elastic.co/t/redirection-to-log-messages-from-graphs-charts/231983)
**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\ **Replies:** 2\ **Last updated:** [May 14, 2020, 5:24am UTC](https://discuss.elastic.co/t/redirection-to-log-messages-from-graphs-charts/231983 "2020-05-14T05:24:55Z")
Hi All, Can any one please help on the below points ? When we click on the graphical charts( line, bar, pie) it should re-direct to log file of the error. is it possible? Already i have applied grok filter for my log … --- ## [Increasing primary shards number](https://discuss.elastic.co/t/increasing-primary-shards-number/232539)
**Author:** [@hilo21](https://discuss.elastic.co/u/hilo21)\ **Replies:** 2\ **Last updated:** [May 14, 2020, 4:58am UTC](https://discuss.elastic.co/t/increasing-primary-shards-number/232539 "2020-05-14T04:58:17Z")
Hello, I have a three nodes cluster: one dedicated master no data, and two others are data nodes one for HOT and the second one for Warm data. In my use case having replicas isn't necessary so I have one shard per index… --- ## [Alerting help](https://discuss.elastic.co/t/alerting-help/232543)
**Author:** [@kumar6](https://discuss.elastic.co/u/kumar6)\ **Replies:** 1\ **Last updated:** [May 14, 2020, 4:17am UTC](https://discuss.elastic.co/t/alerting-help/232543 "2020-05-14T04:17:23Z")
Hello, I am using AWS elastic search 6.8 and wanted to using alerting in kibana. I want to generate alerts based on a pattern match "Cannot allocate memory". Is it possible to this in kibana? --- ## [Search NOT working for json ingestion](https://discuss.elastic.co/t/search-not-working-for-json-ingestion/232537)
**Author:** [@richylyq](https://discuss.elastic.co/u/richylyq)\ **Replies:** 0\ **Last updated:** [May 14, 2020, 3:09am UTC](https://discuss.elastic.co/t/search-not-working-for-json-ingestion/232537 "2020-05-14T03:09:48Z")
Hi all, I have just written a script for json ingestion into elasticsearch and i have indexed my json document, but when i tried to search for certain terms, it returns this error msg which I do not know how to resolve.… --- ## [How to diagnose when indexing performance suddenly droped](https://discuss.elastic.co/t/how-to-diagnose-when-indexing-performance-suddenly-droped/232436)
**Author:** [@111336](https://discuss.elastic.co/u/111336)\ **Replies:** 2\ **Last updated:** [May 14, 2020, 2:27am UTC](https://discuss.elastic.co/t/how-to-diagnose-when-indexing-performance-suddenly-droped/232436 "2020-05-14T02:27:14Z")
Hi. I'm running a es cluster which has 50 data nodes, 20 for a logging index, 20 for a data index, 10 for other indices, and 4 coordinators and 3 master nodes. One day the indexing performance of the logging index was s… --- ## [What happens when calling reindex in the context of reindex from remote](https://discuss.elastic.co/t/what-happens-when-calling-reindex-in-the-context-of-reindex-from-remote/232528)
**Author:** [@vfiset](https://discuss.elastic.co/u/vfiset)\ **Replies:** 3\ **Last updated:** [May 14, 2020, 1:52am UTC](https://discuss.elastic.co/t/what-happens-when-calling-reindex-in-the-context-of-reindex-from-remote/232528 "2020-05-14T01:52:03Z")
In the context of reindex from remote I don’t quite get what exactly happens when the call to \_reindex? is made. Does it simply replicate the document from the source cluster to destination cluster or shards/replicas … --- ## [Reindex.remote.whitelist wildcard details](https://discuss.elastic.co/t/reindex-remote-whitelist-wildcard-details/232530)
**Author:** [@vfiset](https://discuss.elastic.co/u/vfiset)\ **Replies:** 1\ **Last updated:** [May 14, 2020, 1:47am UTC](https://discuss.elastic.co/t/reindex-remote-whitelist-wildcard-details/232530 "2020-05-14T01:47:17Z")
I don't understand quite well how does the reindex.remote.whitelist works when it comes to wildcards. Is there a way to whitelist \*:\* ? (my cluster is living on a private network) Is something like 10.\*:\* is valid ? S… --- ## [How to select an index template from a logstash pipeline?](https://discuss.elastic.co/t/how-to-select-an-index-template-from-a-logstash-pipeline/232504)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 1\ **Last updated:** [May 14, 2020, 1:34am UTC](https://discuss.elastic.co/t/how-to-select-an-index-template-from-a-logstash-pipeline/232504 "2020-05-14T01:34:45Z")
I have made an index template with the following index pattern: POST \_template/myindex-template { "index\_patterns": \[ "myindex-\*" \], "settings": { ..... for what I understand just by using the index pattern in th… --- ## [How to migrate old index from Old Server to New Server](https://discuss.elastic.co/t/how-to-migrate-old-index-from-old-server-to-new-server/232460)
**Author:** [@dattack13](https://discuss.elastic.co/u/dattack13)\ **Replies:** 5\ **Last updated:** [May 14, 2020, 1:24am UTC](https://discuss.elastic.co/t/how-to-migrate-old-index-from-old-server-to-new-server/232460 "2020-05-14T01:24:03Z")
Hi, I have one index in old elasticsearch server in 6.2.0 version (windows server) and now I am trying to move it to new server (Linux) on 7.6.2 version of elasticsearch. I tried below command to migrate my index from o… --- ## [Logstash - JDBC Plugin - \_\_$seqval](https://discuss.elastic.co/t/logstash-jdbc-plugin-seqval/232525)
**Author:** [@LChand](https://discuss.elastic.co/u/LChand)\ **Replies:** 2\ **Last updated:** [May 14, 2020, 1:05am UTC](https://discuss.elastic.co/t/logstash-jdbc-plugin-seqval/232525 "2020-05-14T01:05:15Z")
Hello, I'm able to connect to a SQL server DB and query a view from a Linux Logstash server. The CDC feature (Change Data Capture) is turned on on the SQL side and I'm trying to use the field \_\_$seqval for :sql\_last\_val… --- ## [How to check/wait until all outstanding bulk (index) operations are complete?](https://discuss.elastic.co/t/how-to-check-wait-until-all-outstanding-bulk-index-operations-are-complete/232490)
**Author:** [@redec](https://discuss.elastic.co/u/redec)\ **Replies:** 10\ **Last updated:** [May 13, 2020, 11:50pm UTC](https://discuss.elastic.co/t/how-to-check-wait-until-all-outstanding-bulk-index-operations-are-complete/232490 "2020-05-13T23:50:21Z")
Is there some way to wait for all outstanding indexing operations to complete, across the entire index? the refresh=wait\_for parameter will only wait for the documents which are modified in this query, and only on the s… --- ## [Setting passwords in elasticsearch cluster](https://discuss.elastic.co/t/setting-passwords-in-elasticsearch-cluster/232477)
**Author:** [@kawalec](https://discuss.elastic.co/u/kawalec)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 11:03pm UTC](https://discuss.elastic.co/t/setting-passwords-in-elasticsearch-cluster/232477 "2020-05-13T23:03:06Z")
I have a working cluster "cluster\_name" : "elk", "status" : "green", "timed\_out" : false, "number\_of\_nodes" : 3, "number\_of\_data\_nodes" : 3, "active\_primary\_shards" : 3, "active\_shards" : 6, "relocating\_shards" :… --- ## [Unable to index data coming from filebeat to elasticsearch](https://discuss.elastic.co/t/unable-to-index-data-coming-from-filebeat-to-elasticsearch/232474)
**Author:** [@Kv\_Karthik](https://discuss.elastic.co/u/Kv_Karthik)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 11:02pm UTC](https://discuss.elastic.co/t/unable-to-index-data-coming-from-filebeat-to-elasticsearch/232474 "2020-05-13T23:02:26Z")
Hi, The problem i am facing is as follows, I developed a config file for the logstash and indexed the event to elastic and everything was working as expected, but when I added file beat as the input, I am unable to ind… --- ## [SOF-ELK?](https://discuss.elastic.co/t/sof-elk/232465)
**Author:** [@oumy](https://discuss.elastic.co/u/oumy)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 3:03pm UTC](https://discuss.elastic.co/t/sof-elk/232465 "2020-05-13T15:03:25Z")
hello there, i came upon a solution called SOF-ELK and i was wondering if any of you have any ides if it's better than an ELK based SIEM? Thank you. --- ## [Bytes In / Bytes Out Empty](https://discuss.elastic.co/t/bytes-in-bytes-out-empty/232441)
**Author:** [@insanity13](https://discuss.elastic.co/u/insanity13)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 10:36pm UTC](https://discuss.elastic.co/t/bytes-in-bytes-out-empty/232441 "2020-05-13T22:36:34Z")
Elastic Cloud with APM via .NET Classic Agent. Goes to the SIEM Source IPs, and see that Bytes In / Bytes Out are Empty AMP transaction contains request and response length. So I think these fields should be filled. --- ## [Rollup - Rollover and destination index date math/patterns](https://discuss.elastic.co/t/rollup-rollover-and-destination-index-date-math-patterns/232136)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 4\ **Last updated:** [May 13, 2020, 10:13pm UTC](https://discuss.elastic.co/t/rollup-rollover-and-destination-index-date-math-patterns/232136 "2020-05-13T22:13:41Z")
I'm trying to use the Rollover in the Rollup. According to the information: Implementation: "id": "index-data.\*", "index\_pattern": "index-data.\*", "rollup\_index": "rollup.index-data-%{+YYYY.MM}", But it does… --- ## [FFT plot in Kibana](https://discuss.elastic.co/t/fft-plot-in-kibana/232515)
**Author:** [@Dimitris\_S](https://discuss.elastic.co/u/Dimitris_S)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 9:11pm UTC](https://discuss.elastic.co/t/fft-plot-in-kibana/232515 "2020-05-13T21:11:02Z")
Hi all, I use Filebeat to fetch data from 2 Arduinos via the UDP interface. The messages are formated within the Arduinos and are sent in JSON format: "message": { "FFT\_Freq": \[ 0, 78.125, … --- ## [Can we stop logstash from "Attempting to install template..."](https://discuss.elastic.co/t/can-we-stop-logstash-from-attempting-to-install-template/232463)
**Author:** [@aviationfan](https://discuss.elastic.co/u/aviationfan)\ **Replies:** 2\ **Last updated:** [May 13, 2020, 8:45pm UTC](https://discuss.elastic.co/t/can-we-stop-logstash-from-attempting-to-install-template/232463 "2020-05-13T20:45:56Z")
I see this in my logstash log every time it starts up and it seems like an redundant and unnecessary step. Can I configure it to not do this? \[2020-05-13T09:51:10,669\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\] Attemp… --- ## [Visualize percentage of time where logs exist / buckets are full](https://discuss.elastic.co/t/visualize-percentage-of-time-where-logs-exist-buckets-are-full/230985)
**Author:** [@kenran](https://discuss.elastic.co/u/kenran)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 8:35pm UTC](https://discuss.elastic.co/t/visualize-percentage-of-time-where-logs-exist-buckets-are-full/230985 "2020-05-13T20:35:59Z")
I am sorry if this better fits in Elasticsearch; feel free to move it! I am currently trying to visualize something for the first time and it doesn't seem to be simple. My data consists of simple events that contain an… --- ## [Accessing nested objects in a filter script](https://discuss.elastic.co/t/accessing-nested-objects-in-a-filter-script/232511)
**Author:** [@johnc1](https://discuss.elastic.co/u/johnc1)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 8:34pm UTC](https://discuss.elastic.co/t/accessing-nested-objects-in-a-filter-script/232511 "2020-05-13T20:34:59Z")
Is there a way to access nested objects in a filter script? I found several relevant questions on this forum, but all are without answers. I got a mapping: "properties": { "locations": { "type": "neste… --- ## [KIbana 7.6.2 with SSL](https://discuss.elastic.co/t/kibana-7-6-2-with-ssl/232471)
**Author:** [@jgarbora](https://discuss.elastic.co/u/jgarbora)\ **Replies:** 2\ **Last updated:** [May 13, 2020, 8:34pm UTC](https://discuss.elastic.co/t/kibana-7-6-2-with-ssl/232471 "2020-05-13T20:34:00Z")
I am trying to enable SSL in Kibana ... and I am getting: Error: 139959624402752:error:14094418:SSL routines:ssl3\_read\_bytes:tlsv1 alert unknown ca:../deps/openssl/openssl/ssl/record/rec\_layer\_s3.c:1544:SSL alert number… --- ## [Multi match returns 1 of 2 available matches](https://discuss.elastic.co/t/multi-match-returns-1-of-2-available-matches/232510)
**Author:** [@ghost1face](https://discuss.elastic.co/u/ghost1face)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 8:30pm UTC](https://discuss.elastic.co/t/multi-match-returns-1-of-2-available-matches/232510 "2020-05-13T20:30:40Z")
Hello, I've been using elastic and have recently run into a puzzling issue. I've got two records with the same first and last name and when I use a phrase prefix query for last name, only 1 returns: { "query": { … --- ## [How to use sum aggregation in scripted field](https://discuss.elastic.co/t/how-to-use-sum-aggregation-in-scripted-field/232380)
**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 7:46am UTC](https://discuss.elastic.co/t/how-to-use-sum-aggregation-in-scripted-field/232380 "2020-05-13T07:46:33Z")
HI, for example when i create a bar visualisation i can do the sum aggregation for specific field but when i do a control visualisation he can take just the field not sum of field so my problem is i need to create a scr… --- ## [Nested Field vs Multiple Indices](https://discuss.elastic.co/t/nested-field-vs-multiple-indices/232500)
**Author:** [@Krishna\_Boppana](https://discuss.elastic.co/u/Krishna_Boppana)\ **Replies:** 2\ **Last updated:** [May 13, 2020, 7:40pm UTC](https://discuss.elastic.co/t/nested-field-vs-multiple-indices/232500 "2020-05-13T19:40:51Z")
Hello - I am new to elastic search. I am trying to figure out the pros and cons of using nested values for a field vs using multiple indexes. A simple use case is a person has multiple addresses. There are two types of … --- ## [Enterprise Search 7.7.0 security update](https://discuss.elastic.co/t/enterprise-search-7-7-0-security-update/232505)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 7:40pm UTC](https://discuss.elastic.co/t/enterprise-search-7-7-0-security-update/232505 "2020-05-13T19:40:02Z")
Elastic App Search Cross Site Scripting flaw (ESA-2020-04) Elastic App Search versions before 7.7.0 contain a cross site scripting (XSS) flaw when displaying document URLs in the Reference UI. If the Reference UI inject… --- ## [🎉 Elastic Stack 7.7.0 released](https://discuss.elastic.co/t/elastic-stack-7-7-0-released/232501)
**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 7:18pm UTC](https://discuss.elastic.co/t/elastic-stack-7-7-0-released/232501 "2020-05-13T19:18:00Z")
:tada: Elastic Stack 7.7.0 released We are pleased to announce the general availability of version 7.7 of the Elastic Stack. There’s a lot to gush about in 7.7. Workplace Search is now generally available, bringing a … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1449) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1451)