# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1482 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1483 --- ## [Questions around \`update\_by\_query\` endpoint](https://discuss.elastic.co/t/questions-around-update-by-query-endpoint/230264)
**Author:** [@ljak](https://discuss.elastic.co/u/ljak)\ **Replies:** 0\ **Last updated:** [April 28, 2020, 10:42pm UTC](https://discuss.elastic.co/t/questions-around-update-by-query-endpoint/230264 "2020-04-28T22:42:57Z")
Hi everyone, Just read the doc page Update By Query API | Elasticsearch Guide \[8.11\] | Elastic and have some questions: all failures that are returned by the failing bulk request are returned in the failures element; … --- ## [Performance split for logstash and s3](https://discuss.elastic.co/t/performance-split-for-logstash-and-s3/230260)
**Author:** [@sc5283](https://discuss.elastic.co/u/sc5283)\ **Replies:** 2\ **Last updated:** [April 28, 2020, 10:25pm UTC](https://discuss.elastic.co/t/performance-split-for-logstash-and-s3/230260 "2020-04-28T22:25:14Z")
Is there a way to split the load on multiple logstash instances to grab data from S3? example: I would like for logstash instance 1 to grab only files ending in 1 and 2 logstash instance 2 to grab files ending in 3 an… --- ## [Float 1.0 does not get converted to boolean true](https://discuss.elastic.co/t/float-1-0-does-not-get-converted-to-boolean-true/230231)
**Author:** [@sc5283](https://discuss.elastic.co/u/sc5283)\ **Replies:** 5\ **Last updated:** [April 28, 2020, 10:19pm UTC](https://discuss.elastic.co/t/float-1-0-does-not-get-converted-to-boolean-true/230231 "2020-04-28T22:19:24Z")
logstash 7.6.2 From mutate filter specifies float 1.0 is converted to boolean true but this is not the case, all others work (0, 0.0, "0", etc). I have tried also the translate filter with no success input : ---\> … --- ## [Error: Received fatal alert: handshake\_failure Exception: Faraday::SSLError](https://discuss.elastic.co/t/error-received-fatal-alert-handshake-failure-exception-faraday-sslerror/230253)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 0\ **Last updated:** [April 28, 2020, 9:14pm UTC](https://discuss.elastic.co/t/error-received-fatal-alert-handshake-failure-exception-faraday-sslerror/230253 "2020-04-28T21:14:15Z")
Hello, I am running into an issue using the input to connect to our elastic nodes to retrieve an index, however, im running into the following error Error: Received fatal alert: handshake\_failure Exception: Faraday::S… --- ## [How to combine transform with rollover?](https://discuss.elastic.co/t/how-to-combine-transform-with-rollover/228841)
**Author:** [@Laurynas](https://discuss.elastic.co/u/Laurynas)\ **Replies:** 4\ **Last updated:** [April 28, 2020, 8:54pm UTC](https://discuss.elastic.co/t/how-to-combine-transform-with-rollover/228841 "2020-04-28T20:54:20Z")
Hello, I was not able to find any information if it is possible to rollover transform destination index? I tried and that did not work, but maybe I am missing something. Currently I set destination index to "foo-00001" … --- ## [org.logstash.beats.InvalidFrameProtocolException](https://discuss.elastic.co/t/org-logstash-beats-invalidframeprotocolexception/229862)
**Author:** [@Louis\_Zhang](https://discuss.elastic.co/u/Louis_Zhang)\ **Replies:** 1\ **Last updated:** [April 28, 2020, 8:51pm UTC](https://discuss.elastic.co/t/org-logstash-beats-invalidframeprotocolexception/229862 "2020-04-28T20:51:34Z")
Looks like logstash is receving incorrect event type, that's due to beats on remote machines mis-configuration, we have hundreds of remote machines, is there any possible way to extrac the remote: 172.16.234.66 inofmrat… --- ## [Elastiflow problem with kibana](https://discuss.elastic.co/t/elastiflow-problem-with-kibana/229852)
**Author:** [@roberto.bertucci](https://discuss.elastic.co/u/roberto.bertucci)\ **Replies:** 2\ **Last updated:** [April 28, 2020, 8:27pm UTC](https://discuss.elastic.co/t/elastiflow-problem-with-kibana/229852 "2020-04-28T20:27:41Z")
Hello, i am new to ELK and i am managing to obtain graphs about Cisco ASA netflow. I followed this very effective guide: My setup is as following: elasticsearch + logstash v.7.6.2 kibana v.7.6.2-1 latest version… --- ## [XML parsing error nil:NilClass \[2020-04-22T16:13:54,199\]\[ERROR\]\[logstash.filters.ruby \]\[main\] Ruby exception occurred: undefined method](https://discuss.elastic.co/t/xml-parsing-error-nil-nilclass-2020-04-22t1654-199-error-logstash-filters-ruby-main-ruby-exception-occurred-undefined-method/230201)
**Author:** [@yagoza](https://discuss.elastic.co/u/yagoza)\ **Replies:** 6\ **Last updated:** [April 28, 2020, 7:54pm UTC](https://discuss.elastic.co/t/xml-parsing-error-nil-nilclass-2020-04-22t1654-199-error-logstash-filters-ruby-main-ruby-exception-occurred-undefined-method/230201 "2020-04-28T19:54:19Z")
Hi I am getting this error while parsing XML data using logstash \[2020-04-22T16:13:54,092\]\[ERROR\]\[logstash.filters.ruby \]\[main\] Ruby exception occurred: undefined method \[\]' for nil:NilClass \[2020-04-22T16:13:54,199\]\[E… --- ## [False positive submission](https://discuss.elastic.co/t/false-positive-submission/230041)
**Author:** [@hamza.g](https://discuss.elastic.co/u/hamza.g)\ **Replies:** 1\ **Last updated:** [April 28, 2020, 7:40pm UTC](https://discuss.elastic.co/t/false-positive-submission/230041 "2020-04-28T19:40:11Z")
Hi, Could you please check this file, as I think it is a false detection. This file has been falsely detected as malware link for the issue : https://www.virustotal.com/gui/file/8363488f279f0f972e048c10aa171a007669b3… --- ## [Coordinating node - just enough information to perform aggregation](https://discuss.elastic.co/t/coordinating-node-just-enough-information-to-perform-aggregation/230070)
**Author:** [@nages](https://discuss.elastic.co/u/nages)\ **Replies:** 5\ **Last updated:** [April 28, 2020, 7:37pm UTC](https://discuss.elastic.co/t/coordinating-node-just-enough-information-to-perform-aggregation/230070 "2020-04-28T19:37:04Z")
I am going through the documentation to better understand the role of coordinating node, the different phases of search request - I come across a phase - Each shard returns just enough information to the coordinatin… --- ## [Support IAM Instance Role Permissions](https://discuss.elastic.co/t/support-iam-instance-role-permissions/229701)
**Author:** [@sheldonh](https://discuss.elastic.co/u/sheldonh)\ **Replies:** 2\ **Last updated:** [April 28, 2020, 7:15pm UTC](https://discuss.elastic.co/t/support-iam-instance-role-permissions/229701 "2020-04-28T19:15:16Z")
The configuration for modules related to AWS provide the need for access key and secret key. I want to define the permissions in the monitoring instance role and not explicitly manage a new set of access keys for grabbi… --- ## [Are replica shards used when there is no failover?](https://discuss.elastic.co/t/are-replica-shards-used-when-there-is-no-failover/230217)
**Author:** [@Clony](https://discuss.elastic.co/u/Clony)\ **Replies:** 2\ **Last updated:** [April 28, 2020, 7:04pm UTC](https://discuss.elastic.co/t/are-replica-shards-used-when-there-is-no-failover/230217 "2020-04-28T19:04:53Z")
I wonder if replica shards are used when a query is performed in order to load balanced between primaries and replicas or replicas ONLY comes into action when there is a fail in any primary? thanks in advance. --- ## [503 error because of request timeout after 30000ms](https://discuss.elastic.co/t/503-error-because-of-request-timeout-after-30000ms/229097)
**Author:** [@hamidZa](https://discuss.elastic.co/u/hamidZa)\ **Replies:** 3\ **Last updated:** [April 28, 2020, 6:08pm UTC](https://discuss.elastic.co/t/503-error-because-of-request-timeout-after-30000ms/229097 "2020-04-28T18:08:22Z")
Hello Everyone, I am new to ELK stack, I am trying to install elasticsearch and kibana using containers, and can't get kibana to work. docker run -d --pod elk -e ELASTICSEARCH\_HOSTS=http://localhost:9200 --name kibana … --- ## [Sending Elasticsearch service on Elastic Cloud to New Relic](https://discuss.elastic.co/t/sending-elasticsearch-service-on-elastic-cloud-to-new-relic/230230)
**Author:** [@jvergara](https://discuss.elastic.co/u/jvergara)\ **Replies:** 0\ **Last updated:** [April 28, 2020, 6:03pm UTC](https://discuss.elastic.co/t/sending-elasticsearch-service-on-elastic-cloud-to-new-relic/230230 "2020-04-28T18:03:42Z")
We have a service in Elasticsearch service on Elastic Cloud. I would like to send the Metrics provided for my cluster to the New Relic service. How can I do that? --- ## [Elasticsearch not showing the new index](https://discuss.elastic.co/t/elasticsearch-not-showing-the-new-index/230228)
**Author:** [@thekradev](https://discuss.elastic.co/u/thekradev)\ **Replies:** 0\ **Last updated:** [April 28, 2020, 5:55pm UTC](https://discuss.elastic.co/t/elasticsearch-not-showing-the-new-index/230228 "2020-04-28T17:55:20Z")
Hi everyone, I'm new to Elastic stack. I'm using Elasticsearch, Kibana, Logstash, and filebeat to parse server logs. I follow this link After I run this command curl -XGET 'localhost:9200/logstash-2020.04.28/\_search?p… --- ## [Shard request cache - entirely or partially invalidated due to indexing?](https://discuss.elastic.co/t/shard-request-cache-entirely-or-partially-invalidated-due-to-indexing/228178)
**Author:** [@hhsuey](https://discuss.elastic.co/u/hhsuey)\ **Replies:** 1\ **Last updated:** [April 28, 2020, 5:31pm UTC](https://discuss.elastic.co/t/shard-request-cache-entirely-or-partially-invalidated-due-to-indexing/228178 "2020-04-28T17:31:54Z")
Will the shard request cache invalidate the entire shard's cache if any documents are updated? Or will only the document updated be invalidated in the cache? It isn't exactly clear in the documentation: Cached results… --- ## [FilterAllocationDecider routing exclude setting behavior](https://discuss.elastic.co/t/filterallocationdecider-routing-exclude-setting-behavior/229800)
**Author:** [@sohami](https://discuss.elastic.co/u/sohami)\ **Replies:** 10\ **Last updated:** [April 28, 2020, 5:23pm UTC](https://discuss.elastic.co/t/filterallocationdecider-routing-exclude-setting-behavior/229800 "2020-04-28T17:23:48Z")
Elasticsearch version (Verified on 6.8 and 7.4.2): Description of the problem including expected versus actual behavior : I was exploring the FilterAllocationDecider behavior with cluster.routing.allocation.exclude … --- ## [Elastic Cloud on Kubernetes 1.1.0 security update](https://discuss.elastic.co/t/elastic-cloud-on-kubernetes-1-1-0-security-update/230221)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [April 28, 2020, 5:23pm UTC](https://discuss.elastic.co/t/elastic-cloud-on-kubernetes-1-1-0-security-update/230221 "2020-04-28T17:23:35Z")
Elastic Cloud on Kubernetes insecure password generation (ESA-2020-03) Elastic Cloud on Kubernetes (ECK) versions prior to 1.1.0 generate passwords using a weak random number generator. If an attacker is able to determi… --- ## [Join information between 2 Data inputs](https://discuss.elastic.co/t/join-information-between-2-data-inputs/230219)
**Author:** [@pmo](https://discuss.elastic.co/u/pmo)\ **Replies:** 1\ **Last updated:** [April 28, 2020, 5:12pm UTC](https://discuss.elastic.co/t/join-information-between-2-data-inputs/230219 "2020-04-28T17:12:17Z")
Hi experts, i would like to know if it's possible to join two input file in order to create a new file and send the result to elasticsearch ? Ex: I've input data from SQL and another input data from JSON file. I would… --- ## [Create a field with information from another field](https://discuss.elastic.co/t/create-a-field-with-information-from-another-field/230216)
**Author:** [@pmo](https://discuss.elastic.co/u/pmo)\ **Replies:** 1\ **Last updated:** [April 28, 2020, 5:11pm UTC](https://discuss.elastic.co/t/create-a-field-with-information-from-another-field/230216 "2020-04-28T17:11:51Z")
Hi expert, I would like to know if it's possible to create a new field with information that are taken from another field. I'm using sql connection. I've a field named : Code\_postal (that has 3 or 5 digits - I only… --- ## [GROK not match](https://discuss.elastic.co/t/grok-not-match/230122)
**Author:** [@Hoang\_Duy](https://discuss.elastic.co/u/Hoang_Duy)\ **Replies:** 1\ **Last updated:** [April 28, 2020, 4:31pm UTC](https://discuss.elastic.co/t/grok-not-match/230122 "2020-04-28T16:31:59Z")
Pls help.. I don't know why my logstash filter config doesn't match system message "Failed password for invalid user bbbbbbbbbbbbbb from 10.10.64.74 port 62561 ssh2" My filter config: filter { if \[fileset\]\[module\] =… --- ## [Having trouble setting kerberos on Kibana](https://discuss.elastic.co/t/having-trouble-setting-kerberos-on-kibana/230038)
**Author:** [@lnitin12](https://discuss.elastic.co/u/lnitin12)\ **Replies:** 7\ **Last updated:** [April 28, 2020, 3:56pm UTC](https://discuss.elastic.co/t/having-trouble-setting-kerberos-on-kibana/230038 "2020-04-28T15:56:45Z")
There seems no proper documentation on setting up kerberos on kibana, on elasticsearch kerberos works fine with --negotiate user. But on Kibana once we add xpack.security.authc.providers:\[kerberos\] and try to load kiba… --- ## [Issue with S3-repository with two different elasticsearch cluster](https://discuss.elastic.co/t/issue-with-s3-repository-with-two-different-elasticsearch-cluster/227995)
**Author:** [@Christophe.aron](https://discuss.elastic.co/u/Christophe.aron)\ **Replies:** 1\ **Last updated:** [April 28, 2020, 3:56pm UTC](https://discuss.elastic.co/t/issue-with-s3-repository-with-two-different-elasticsearch-cluster/227995 "2020-04-28T15:56:18Z")
Hello, I am having a configuration problem on two different elasticsearch cluster. I follow this documentation about s3-repository The context is that I have a cluster in version 5.6.x with which I configured the s3-… --- ## [Multiple input filebeat to logstash](https://discuss.elastic.co/t/multiple-input-filebeat-to-logstash/230194)
**Author:** [@GedeoN](https://discuss.elastic.co/u/GedeoN)\ **Replies:** 1\ **Last updated:** [April 28, 2020, 3:28pm UTC](https://discuss.elastic.co/t/multiple-input-filebeat-to-logstash/230194 "2020-04-28T15:28:46Z")
Hi all experts, I'm trying inject many logs from many files. Actually, i receive all logs but in just one index. I tried to tags, but it's not working actually, and i don't find my error. filebeat configuration: fil… --- ## [Inconsistent date fields returned](https://discuss.elastic.co/t/inconsistent-date-fields-returned/230209)
**Author:** [@ngtlin](https://discuss.elastic.co/u/ngtlin)\ **Replies:** 0\ **Last updated:** [April 28, 2020, 3:24pm UTC](https://discuss.elastic.co/t/inconsistent-date-fields-returned/230209 "2020-04-28T15:24:33Z")
I have an index which has 3 fields of "date" type, @timestamp, startTime and endTime with built-in format (default strict\_date\_optional\_time || epoch\_millis). Run a query, elastic search (7.6.1) return iso8601 String fo… --- ## [Highlight list of terms containing hyphens and whitespaces](https://discuss.elastic.co/t/highlight-list-of-terms-containing-hyphens-and-whitespaces/230206)
**Author:** [@b1t](https://discuss.elastic.co/u/b1t)\ **Replies:** 0\ **Last updated:** [April 28, 2020, 3:21pm UTC](https://discuss.elastic.co/t/highlight-list-of-terms-containing-hyphens-and-whitespaces/230206 "2020-04-28T15:21:28Z")
Hello, I am realizing a system for keywords matching with ES 7.6 using highlight. This is my mappings code: "mappings": { "properties": { "title": { "type": "text" … --- ## [Run config file from a web app (flask)](https://discuss.elastic.co/t/run-config-file-from-a-web-app-flask/230197)
**Author:** [@inchirah](https://discuss.elastic.co/u/inchirah)\ **Replies:** 0\ **Last updated:** [April 28, 2020, 2:36pm UTC](https://discuss.elastic.co/t/run-config-file-from-a-web-app-flask/230197 "2020-04-28T14:36:18Z")
Hello, I build a web app with flask. Through a button the user gonna choose a csv file from his desktop and when he clicks to submit a LOGSTASH config file gonna run to import that file (the user previously chosen) into… --- ## [Permanent Mapping](https://discuss.elastic.co/t/permanent-mapping/230195)
**Author:** [@ksremo](https://discuss.elastic.co/u/ksremo)\ **Replies:** 0\ **Last updated:** [April 28, 2020, 2:20pm UTC](https://discuss.elastic.co/t/permanent-mapping/230195 "2020-04-28T14:20:54Z")
A Filebeat is delivering Data to Logstash and then to Elasticsearch. Per default (dynmac mapping?), all Fields are of Type "text". So i build a Mapping with the correct Types. I removed the Index, recreate it and push … --- ## [Calculating count and percentage](https://discuss.elastic.co/t/calculating-count-and-percentage/229029)
**Author:** [@rcganesh](https://discuss.elastic.co/u/rcganesh)\ **Replies:** 1\ **Last updated:** [April 28, 2020, 2:03pm UTC](https://discuss.elastic.co/t/calculating-count-and-percentage/229029 "2020-04-28T14:03:36Z")
Hello Experts, I am couple of weeks old to Logstash and I need some help in trasforming data through logstash and send it to either some file or Elasticsearch. Below is the data-flow we are implementing. Input data in… --- ## [Best way to implement relationship](https://discuss.elastic.co/t/best-way-to-implement-relationship/230189)
**Author:** [@ViniciusSPaiva](https://discuss.elastic.co/u/ViniciusSPaiva)\ **Replies:** 0\ **Last updated:** [April 28, 2020, 1:59pm UTC](https://discuss.elastic.co/t/best-way-to-implement-relationship/230189 "2020-04-28T13:59:49Z")
Hello there! Just to add some story: my company's application is an ECM (Enterprise Content Management), and, to put it very briefly, users can create: Entities Files Some types of those entities (Emails, Documents, … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1481) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1483)