# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1493

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1494

---

## [Master election process is not happening](https://discuss.elastic.co/t/master-election-process-is-not-happening/229443)

<div class="topic-metadata">

**Author:** [@abhishek1](https://discuss.elastic.co/u/abhishek1)\
**Replies:** 8\
**Last updated:** [April 23, 2020, 11:33am UTC](https://discuss.elastic.co/t/master-election-process-is-not-happening/229443 "2020-04-23T11:33:14Z")

</div>

HI, I have configured multi master node configurtaion in cluster but master election process is not happening correctly .. I have 4 nodes out of 4 , Node1, Node2 and node3 is master node and node 4 is data node. Activ…

---

## [Delete fields from Kibana index pattern](https://discuss.elastic.co/t/delete-fields-from-kibana-index-pattern/229428)

<div class="topic-metadata">

**Author:** [@rohitarora275](https://discuss.elastic.co/u/rohitarora275)\
**Replies:** 4\
**Last updated:** [April 23, 2020, 11:19am UTC](https://discuss.elastic.co/t/delete-fields-from-kibana-index-pattern/229428 "2020-04-23T11:19:21Z")

</div>

Earlier I had created few extra fields from logstash, now I don't want these fields in my index pattern. I have deleted this from my logstash and after that I restarted kibana, elasticsearch and logstash I am not seein…

---

## [Odd Number of master nodes](https://discuss.elastic.co/t/odd-number-of-master-nodes/229396)

<div class="topic-metadata">

**Author:** [@nages](https://discuss.elastic.co/u/nages)\
**Replies:** 2\
**Last updated:** [April 23, 2020, 10:52am UTC](https://discuss.elastic.co/t/odd-number-of-master-nodes/229396 "2020-04-23T10:52:48Z")

</div>

I was informed to use odd number of nodes to avoid split brain problem and also voting of master node is easy if the odd number of master nodes is configured. However, say the cluster is configured with 5 nodes and one …

---

## [Enable RUM on APM](https://discuss.elastic.co/t/enable-rum-on-apm/229364)

<div class="topic-metadata">

**Author:** [@tsbayne](https://discuss.elastic.co/u/tsbayne)\
**Replies:** 2\
**Last updated:** [April 23, 2020, 10:25am UTC](https://discuss.elastic.co/t/enable-rum-on-apm/229364 "2020-04-23T10:25:40Z")

</div>

Probably an easy one here. I need to enable RUM in our APM deployment but it doesn't seem to be working. If I exec into the pod it actually doesn't look like any of my settings are set so I'm not even sure if I'm looki…

---

## [Debug issue](https://discuss.elastic.co/t/debug-issue/229429)

<div class="topic-metadata">

**Author:** [@Ido\_Cohen](https://discuss.elastic.co/u/Ido_Cohen)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 9:45am UTC](https://discuss.elastic.co/t/debug-issue/229429 "2020-04-23T09:45:51Z")

</div>

Hi all, I am running a docker containter of logstash - I am using logstash to send csv reports to elastic. Part of the lines in the csv are not parsing well. When I reading logstash log I can find the error but cannot…

---

## [Flattening array and dynamically create the field name](https://discuss.elastic.co/t/flattening-array-and-dynamically-create-the-field-name/229268)

<div class="topic-metadata">

**Author:** [@manto](https://discuss.elastic.co/u/manto)\
**Replies:** 2\
**Last updated:** [April 23, 2020, 9:42am UTC](https://discuss.elastic.co/t/flattening-array-and-dynamically-create-the-field-name/229268 "2020-04-23T09:42:17Z")

</div>

Hello, I have an JSON array input below: "coverageStats": \[ { "label": "Branches", "position": 6, "total": 30, "covered": …

---

## [Bulk request exception while connecting from event hub](https://discuss.elastic.co/t/bulk-request-exception-while-connecting-from-event-hub/229405)

<div class="topic-metadata">

**Author:** [@rampoq](https://discuss.elastic.co/u/rampoq)\
**Replies:** 1\
**Last updated:** [April 23, 2020, 9:34am UTC](https://discuss.elastic.co/t/bulk-request-exception-while-connecting-from-event-hub/229405 "2020-04-23T09:34:41Z")

</div>

I am trying to post data from apache kafka event hub to an elasticsearch cluster using the sink connector, but this issue occurs after creating the connector.

---

## [Digital signature on logs](https://discuss.elastic.co/t/digital-signature-on-logs/229409)

<div class="topic-metadata">

**Author:** [@chiara](https://discuss.elastic.co/u/chiara)\
**Replies:** 1\
**Last updated:** [April 23, 2020, 9:32am UTC](https://discuss.elastic.co/t/digital-signature-on-logs/229409 "2020-04-23T09:32:35Z")

</div>

For Compliance rules I need to digitally sign my logs and make them unchangeable. What is the best way to do it?

---

## [Input jdbc plugin while using with sql\_last\_value gives error](https://discuss.elastic.co/t/input-jdbc-plugin-while-using-with-sql-last-value-gives-error/229419)

<div class="topic-metadata">

**Author:** [@rahul24](https://discuss.elastic.co/u/rahul24)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 9:17am UTC](https://discuss.elastic.co/t/input-jdbc-plugin-while-using-with-sql-last-value-gives-error/229419 "2020-04-23T09:17:59Z")

</div>

Hello, I am trying to poke my sql db to get only the updated values from the table using column ChangedAtas the tracking column with below configuration: \`input { jdbc { type =\> "actlock" jdbc\_c…

---

## [Elasticsearch Indexing based on data input](https://discuss.elastic.co/t/elasticsearch-indexing-based-on-data-input/228795)

<div class="topic-metadata">

**Author:** [@rampoq](https://discuss.elastic.co/u/rampoq)\
**Replies:** 7\
**Last updated:** [April 23, 2020, 9:09am UTC](https://discuss.elastic.co/t/elasticsearch-indexing-based-on-data-input/228795 "2020-04-23T09:09:44Z")

</div>

I wish to push documents in Json format and wish to update it based on the input data, to be specifiv like unique identifier present in data, ( if that unique identifier value is already present in indexed data, it shoul…

---

## [Disabling wildcard in query\_string or at index level](https://discuss.elastic.co/t/disabling-wildcard-in-query-string-or-at-index-level/229412)

<div class="topic-metadata">

**Author:** [@Federico\_Foschini](https://discuss.elastic.co/u/Federico_Foschini)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 8:43am UTC](https://discuss.elastic.co/t/disabling-wildcard-in-query-string-or-at-index-level/229412 "2020-04-23T08:43:05Z")

</div>

Hello, Is it possible to disabling wildcards on a single index or directly in a query? Basically I'd like to do query like those: GET /\_search { "query": { "query\_string" : { …

---

## [SIEM does not show data](https://discuss.elastic.co/t/siem-does-not-show-data/229010)

<div class="topic-metadata">

**Author:** [@Minh\_Ti\_n\_Tr\_n](https://discuss.elastic.co/u/Minh_Ti_n_Tr_n)\
**Replies:** 7\
**Last updated:** [April 23, 2020, 7:50am UTC](https://discuss.elastic.co/t/siem-does-not-show-data/229010 "2020-04-23T07:50:13Z")

</div>

I got the problem: Fielddata is disabled on text fields by default. Set fielddata=true on \[source.ip\] in order to load fielddata in memory by uninverting the inverted index. Note that this can however use significant me…

---

## [Clear filters](https://discuss.elastic.co/t/clear-filters/229388)

<div class="topic-metadata">

**Author:** [@balaji\_18](https://discuss.elastic.co/u/balaji_18)\
**Replies:** 2\
**Last updated:** [April 23, 2020, 8:03am UTC](https://discuss.elastic.co/t/clear-filters/229388 "2020-04-23T08:03:22Z")

</div>

I have filtered some field in kibana dashboard, instead of closing that filter is there any way to clear the filter using any clear option or clear button in kibana. Please help me out. Thank you!

---

## [How to speedup snapshot backup to s3?](https://discuss.elastic.co/t/how-to-speedup-snapshot-backup-to-s3/229249)

<div class="topic-metadata">

**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\
**Replies:** 1\
**Last updated:** [April 23, 2020, 7:30am UTC](https://discuss.elastic.co/t/how-to-speedup-snapshot-backup-to-s3/229249 "2020-04-23T07:30:56Z")

</div>

Is there any method or configuration to speed up the index snapshot backup to s3 in ES-7.6?

---

## [Elasticsearch logging to syslog](https://discuss.elastic.co/t/elasticsearch-logging-to-syslog/229398)

<div class="topic-metadata">

**Author:** [@coudenysj](https://discuss.elastic.co/u/coudenysj)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 7:25am UTC](https://discuss.elastic.co/t/elasticsearch-logging-to-syslog/229398 "2020-04-23T07:25:26Z")

</div>

Hi, I'm trying to find out why the garbage collection system of Elasticsearch is still logging to both syslog and /var/log/elasticsearch/gc.log. When I look at the command line options loaded in the process, I see -Xlo…

---

## [HTTP POST with CSV](https://discuss.elastic.co/t/http-post-with-csv/228052)

<div class="topic-metadata">

**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\
**Replies:** 4\
**Last updated:** [April 23, 2020, 7:23am UTC](https://discuss.elastic.co/t/http-post-with-csv/228052 "2020-04-23T07:23:37Z")

</div>

Hi , This is in connection with one of the issues here I have a typical scenario where i am not able to find this thing working. I could see the message at the other end (tested with localhost running : nc -l -k port)…

---

## [Metricbeat System dashboard not show metric below the time range of 30 minutes](https://discuss.elastic.co/t/metricbeat-system-dashboard-not-show-metric-below-the-time-range-of-30-minutes/229185)

<div class="topic-metadata">

**Author:** [@raghumuppa](https://discuss.elastic.co/u/raghumuppa)\
**Replies:** 3\
**Last updated:** [April 23, 2020, 7:04am UTC](https://discuss.elastic.co/t/metricbeat-system-dashboard-not-show-metric-below-the-time-range-of-30-minutes/229185 "2020-04-23T07:04:19Z")

</div>

Hello Everyone, Since two days i'm facing an issue with kibana dashboard, i unable to see proper metric with in the time range of 30 min. This issue was not there before, i went through google and spent lot of time ove…

---

## [Elasticsarch Garbage Collection Issue](https://discuss.elastic.co/t/elasticsarch-garbage-collection-issue/229211)

<div class="topic-metadata">

**Author:** [@sam0853](https://discuss.elastic.co/u/sam0853)\
**Replies:** 14\
**Last updated:** [April 23, 2020, 6:27am UTC](https://discuss.elastic.co/t/elasticsarch-garbage-collection-issue/229211 "2020-04-23T06:27:14Z")

</div>

Hi Team, I am continuously observing, my ES cluster goes into \[GC\] mode. Below is my cluster configuration, 3 datastore having below H/W configuration, 1: 8C/64GB/6TB 2: 8C/64GB/6TB 3: 8C/64GB/6TB Current Cluster S…

---

## [KQL vs Lucene](https://discuss.elastic.co/t/kql-vs-lucene/229389)

<div class="topic-metadata">

**Author:** [@Nomek](https://discuss.elastic.co/u/Nomek)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 6:12am UTC](https://discuss.elastic.co/t/kql-vs-lucene/229389 "2020-04-23T06:12:37Z")

</div>

Hello Guys, I found an interesting issue, where i found no clear explanation to and i hope you guys can help us. We are currently running 7.5.1 on dozens of clusters and i wonder what precisely is the differently behav…

---

## [Failed to put mappings on indices \[\[\[\]\]\], type \[string\] java.lang.IllegalArgumentException: Rejecting mapping update to \[\] as the final mapping would have more than 1 type: \[\_doc, string\]](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices-type-string-java-lang-illegalargumentexception-rejecting-mapping-update-to-as-the-final-mapping-would-have-more-than-1-type-doc-string/229226)

<div class="topic-metadata">

**Author:** [@Jacques\_van\_der\_Merw](https://discuss.elastic.co/u/Jacques_van_der_Merw)\
**Replies:** 2\
**Last updated:** [April 22, 2020, 1:14pm UTC](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices-type-string-java-lang-illegalargumentexception-rejecting-mapping-update-to-as-the-final-mapping-would-have-more-than-1-type-doc-string/229226 "2020-04-22T13:14:37Z")

</div>

I am getting this error only when I define an Index template on Kibana. I define an index template in order to define a lifecylce policy. The error is " failed to put mappings on indices \[\[\]\], type \[string\] java.lang…

---

## [Please remove](https://discuss.elastic.co/t/please-remove/229319)

<div class="topic-metadata">

**Author:** [@sera](https://discuss.elastic.co/u/sera)\
**Replies:** 0\
**Last updated:** [April 22, 2020, 4:49pm UTC](https://discuss.elastic.co/t/please-remove/229319 "2020-04-22T16:49:37Z")

</div>

Please remove this post.

---

## [Best Practices in logstash](https://discuss.elastic.co/t/best-practices-in-logstash/229379)

<div class="topic-metadata">

**Author:** [@Vignesh2912](https://discuss.elastic.co/u/Vignesh2912)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 5:16am UTC](https://discuss.elastic.co/t/best-practices-in-logstash/229379 "2020-04-23T05:16:06Z")

</div>

Hi All, My current setup is as below, Amazon S3 -\> Logstash -\> Elasticsearch -\> Kibana In logstash, we are trying to poll files from 4 s3 buckets ie each for each environment. so we are expecting data load per day of …

---

## [Why doesn't elect master node?](https://discuss.elastic.co/t/why-doesnt-elect-master-node/229190)

<div class="topic-metadata">

**Author:** [@hgdo](https://discuss.elastic.co/u/hgdo)\
**Replies:** 8\
**Last updated:** [April 23, 2020, 4:55am UTC](https://discuss.elastic.co/t/why-doesnt-elect-master-node/229190 "2020-04-23T04:55:07Z")

</div>

Hi. I created a Elasticsearch cluster with 2 servers. Elasticsearch Cluster version is 7.6.2. Each server has three master nodes. I am currently doing a failover test. First, if you kill server 1 that has a master n…

---

## [Parsing multiple formats in the same log file](https://discuss.elastic.co/t/parsing-multiple-formats-in-the-same-log-file/229377)

<div class="topic-metadata">

**Author:** [@vikramaddagulla](https://discuss.elastic.co/u/vikramaddagulla)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 4:49am UTC](https://discuss.elastic.co/t/parsing-multiple-formats-in-the-same-log-file/229377 "2020-04-23T04:49:08Z")

</div>

Hello, Is it possible to parse multiple formats in a single log file ? For ex : My log file can write different type of data belonging to different sub-system within the same application which is writing the logs. The…

---

## [CSV output file row separator](https://discuss.elastic.co/t/csv-output-file-row-separator/229375)

<div class="topic-metadata">

**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 4:36am UTC](https://discuss.elastic.co/t/csv-output-file-row-separator/229375 "2020-04-23T04:36:16Z")

</div>

Hi, LS Version - 7.5 I am trying to get the data out using CSV output plugin, I could see there is are separate rows for header and values on my system (centOS) but when being pushed using curl X POST to another syst…

---

## [Confirm the time range of “now-1d/d” in kibana](https://discuss.elastic.co/t/confirm-the-time-range-of-now-1d-d-in-kibana/228455)

<div class="topic-metadata">

**Author:** [@Echo\_yu](https://discuss.elastic.co/u/Echo_yu)\
**Replies:** 2\
**Last updated:** [April 23, 2020, 3:24am UTC](https://discuss.elastic.co/t/confirm-the-time-range-of-now-1d-d-in-kibana/228455 "2020-04-23T03:24:21Z")

</div>

Hi, suppose now is 2020-04-17 14:36:36 and I would like to make sure that "now-1d/d" in kibana refers to the time range between 2020-04-16 00:00:00 to 2020-04-16 23:59:59 right?

---

## [Logstash | Azure blob input plugin error](https://discuss.elastic.co/t/logstash-azure-blob-input-plugin-error/225344)

<div class="topic-metadata">

**Author:** [@iniyan.g](https://discuss.elastic.co/u/iniyan.g)\
**Replies:** 2\
**Last updated:** [April 23, 2020, 3:20am UTC](https://discuss.elastic.co/t/logstash-azure-blob-input-plugin-error/225344 "2020-04-23T03:20:47Z")

</div>

Hi I'm trying to ingest "Azure App Gateway Performance Logs" into logstash using "azureblob" input plugin. When I run the following command, I see the version mismatch error. Can someone tell me what is the exact issue…

---

## [7.3.1 After upgrading to 7.6.2, the cluster master freezes irregularly](https://discuss.elastic.co/t/7-3-1-after-upgrading-to-7-6-2-the-cluster-master-freezes-irregularly/228975)

<div class="topic-metadata">

**Author:** [@zcola](https://discuss.elastic.co/u/zcola)\
**Replies:** 2\
**Last updated:** [April 23, 2020, 3:01am UTC](https://discuss.elastic.co/t/7-3-1-after-upgrading-to-7-6-2-the-cluster-master-freezes-irregularly/228975 "2020-04-23T03:01:52Z")

</div>

---

## [Jmx plugin jmx conf file pass variable](https://discuss.elastic.co/t/jmx-plugin-jmx-conf-file-pass-variable/229371)

<div class="topic-metadata">

**Author:** [@yigene](https://discuss.elastic.co/u/yigene)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 2:31am UTC](https://discuss.elastic.co/t/jmx-plugin-jmx-conf-file-pass-variable/229371 "2020-04-23T02:31:28Z")

</div>

i am trying to use jmx to load the metrics into ES, the jmx metrics are name only with different server host and port, is it possible to user variable in host and port instead of hardcode them? reason is that if i chang…

---

## [Parsing multiline events with logstash](https://discuss.elastic.co/t/parsing-multiline-events-with-logstash/229368)

<div class="topic-metadata">

**Author:** [@olatunde.tokun](https://discuss.elastic.co/u/olatunde.tokun)\
**Replies:** 0\
**Last updated:** [April 23, 2020, 1:48am UTC](https://discuss.elastic.co/t/parsing-multiline-events-with-logstash/229368 "2020-04-23T01:48:11Z")

</div>

Hello all, I'm trying to parse this multiline log from kafka, its a mix of multilines, json and kv. Using the multiline codec and grok or KV doesnt seem to produce the expected results. Any thoughts on how I can parse …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1492)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1494)
