# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1550 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1551 --- ## [Unable to start elastcsearch 5.5.0 service, getting 203 error](https://discuss.elastic.co/t/unable-to-start-elastcsearch-5-5-0-service-getting-203-error/224706)
**Author:** [@bkanuroop](https://discuss.elastic.co/u/bkanuroop)\ **Replies:** 8\ **Last updated:** [March 26, 2020, 1:26pm UTC](https://discuss.elastic.co/t/unable-to-start-elastcsearch-5-5-0-service-getting-203-error/224706 "2020-03-26T13:26:52Z")
Hi, I have just installed elasticsearch 5.5.0 using RPM and I am not able to start the services, here is all the details, also I have uploaded the yml file. \[root@xxxxxx\]# systemctl status elasticsearch.service ● elas… --- ## [Nested Group-by in data table](https://discuss.elastic.co/t/nested-group-by-in-data-table/225072)
**Author:** [@srehorn](https://discuss.elastic.co/u/srehorn)\ **Replies:** 2\ **Last updated:** [March 26, 2020, 2:50pm UTC](https://discuss.elastic.co/t/nested-group-by-in-data-table/225072 "2020-03-26T14:50:18Z")
Hello, I am trying to build a report layout that has more than one level of group nesting. This is a familiar report style with a top-level group label, then the next level grouping label, and then items listed under th… --- ## [Nextcloud integration (Kibana)](https://discuss.elastic.co/t/nextcloud-integration-kibana/224955)
**Author:** [@bbar](https://discuss.elastic.co/u/bbar)\ **Replies:** 3\ **Last updated:** [March 26, 2020, 2:47pm UTC](https://discuss.elastic.co/t/nextcloud-integration-kibana/224955 "2020-03-26T14:47:23Z")
Hello everybody, I'm student and for my final internship, I must realise in Nextcloud an integration plugin. Project should be integrat are Kibana. I don’t have any ressources to start this project. Do you have any d… --- ## [Sorting aggregation results with Java API](https://discuss.elastic.co/t/sorting-aggregation-results-with-java-api/224486)
**Author:** [@mrbarret](https://discuss.elastic.co/u/mrbarret)\ **Replies:** 7\ **Last updated:** [March 26, 2020, 2:43pm UTC](https://discuss.elastic.co/t/sorting-aggregation-results-with-java-api/224486 "2020-03-26T14:43:06Z")
I have below query that buckets results and sorts them in the order I want, but I am unable to translate this to the Java API. GET /my\_data\_set/\_search { "size": 0, "aggregations": { "toBeOrdered": { "term… --- ## [Move Allocator from one zone to another?](https://discuss.elastic.co/t/move-allocator-from-one-zone-to-another/225204)
**Author:** [@JPeery](https://discuss.elastic.co/u/JPeery)\ **Replies:** 1\ **Last updated:** [March 26, 2020, 2:22pm UTC](https://discuss.elastic.co/t/move-allocator-from-one-zone-to-another/225204 "2020-03-26T14:22:03Z")
Is there a way to move an Allocator from one zone to another without having to reinstall? I had an allocator that was unhealthy, I ended up deleting it, re-provisioning the VM, and re-built from scratch, but when I inst… --- ## [Possible to search for the specific string in filter grook then concatenate to a pattern. TIA!](https://discuss.elastic.co/t/possible-to-search-for-the-specific-string-in-filter-grook-then-concatenate-to-a-pattern-tia/225214)
**Author:** [@smebrolster](https://discuss.elastic.co/u/smebrolster)\ **Replies:** 0\ **Last updated:** [March 26, 2020, 2:19pm UTC](https://discuss.elastic.co/t/possible-to-search-for-the-specific-string-in-filter-grook-then-concatenate-to-a-pattern-tia/225214 "2020-03-26T14:19:50Z")
--- ## [Increasing Logstash Throughput When the Codec is the Bottleneck](https://discuss.elastic.co/t/increasing-logstash-throughput-when-the-codec-is-the-bottleneck/224158)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 11\ **Last updated:** [March 26, 2020, 2:08pm UTC](https://discuss.elastic.co/t/increasing-logstash-throughput-when-the-codec-is-the-bottleneck/224158 "2020-03-26T14:08:21Z")
Setup I have multiple machines running a containerized Logstash 7.6. These machines have 32 core and 256GB RAM. I am using these nodes to process network flow data based on Elastiflow. These nodes are listening for data … --- ## [Automatic Documentation System](https://discuss.elastic.co/t/automatic-documentation-system/225101)
**Author:** [@ashikmeerankutty](https://discuss.elastic.co/u/ashikmeerankutty)\ **Replies:** 3\ **Last updated:** [March 26, 2020, 1:40pm UTC](https://discuss.elastic.co/t/automatic-documentation-system/225101 "2020-03-26T13:40:02Z")
Hi, It seems like elastic uses propsTypes to generate docs using react-docgen and a custom babel script for typescript components to add propsTypes to nodes. Do the new system need to support jsx components or just sup… --- ## [Logstash taking so much time to index MySQL query](https://discuss.elastic.co/t/logstash-taking-so-much-time-to-index-mysql-query/225196)
**Author:** [@manideep](https://discuss.elastic.co/u/manideep)\ **Replies:** 0\ **Last updated:** [March 26, 2020, 1:23pm UTC](https://discuss.elastic.co/t/logstash-taking-so-much-time-to-index-mysql-query/225196 "2020-03-26T13:23:46Z")
Hi ALL, I have a simple sql query with 3 joins. i am trying to index those results in ES via Logstash. i created a view and try to index it. I was following up until one hour and I left whole night. but then it indexed… --- ## [IIS logs and hardware requirements](https://discuss.elastic.co/t/iis-logs-and-hardware-requirements/225012)
**Author:** [@devagp](https://discuss.elastic.co/u/devagp)\ **Replies:** 2\ **Last updated:** [March 26, 2020, 12:58pm UTC](https://discuss.elastic.co/t/iis-logs-and-hardware-requirements/225012 "2020-03-26T12:58:32Z")
Hello everyone, I'm new here and I would like to take some questions before using elastic. Can I collect logs from an IIS 10 website? Which tool do I use? Can I use the opensource version? If question number 1 is ok, w… --- ## [Search query doesnt working](https://discuss.elastic.co/t/search-query-doesnt-working/225191)
**Author:** [@Bahadir\_Eyuboglu](https://discuss.elastic.co/u/Bahadir_Eyuboglu)\ **Replies:** 0\ **Last updated:** [March 26, 2020, 12:23pm UTC](https://discuss.elastic.co/t/search-query-doesnt-working/225191 "2020-03-26T12:23:42Z")
I have 2 search query one is range query and other one is fuzzy query, i am sending queries trough python so my functions is look like for range query ''' resp2 = es.search(index="restaurants", doc\_type="docket",body… --- ## [Special Characters in Query String](https://discuss.elastic.co/t/special-characters-in-query-string/224971)
**Author:** [@mattiacareddu](https://discuss.elastic.co/u/mattiacareddu)\ **Replies:** 1\ **Last updated:** [March 26, 2020, 11:47am UTC](https://discuss.elastic.co/t/special-characters-in-query-string/224971 "2020-03-26T11:47:16Z")
Hi, I'm having trouble trying to search special characters using query string. I need to search an email address in format "xxx@xxx.xxx". At index time I use a custom normalizer which provide lowercase and ascii folding.… --- ## [While sending iis logs from filebeat to logstash few feilds do not get populated](https://discuss.elastic.co/t/while-sending-iis-logs-from-filebeat-to-logstash-few-feilds-do-not-get-populated/225173)
**Author:** [@Sagar\_Joshi](https://discuss.elastic.co/u/Sagar_Joshi)\ **Replies:** 0\ **Last updated:** [March 26, 2020, 11:11am UTC](https://discuss.elastic.co/t/while-sending-iis-logs-from-filebeat-to-logstash-few-feilds-do-not-get-populated/225173 "2020-03-26T11:11:55Z")
While sending IIS logs from filebeat --\> Logstash --\> ElasticSearch --\> Kibana , we lose couple of fields like (user\_agent and geo location ) even after applying GROK pattern inside logstash FILTER. Hence couple of visu… --- ## [Using date filter with field from autodetected column in csv plugin](https://discuss.elastic.co/t/using-date-filter-with-field-from-autodetected-column-in-csv-plugin/223965)
**Author:** [@rafael07](https://discuss.elastic.co/u/rafael07)\ **Replies:** 6\ **Last updated:** [March 26, 2020, 11:02am UTC](https://discuss.elastic.co/t/using-date-filter-with-field-from-autodetected-column-in-csv-plugin/223965 "2020-03-26T11:02:56Z")
Hello. I am trying to parse a date from a column, which name is autodetected using the csv plugin. The problem is that the date plugin is doing nothing with this field. If instead of using "autodetect\_column\_names" I wr… --- ## [Installing templates on ES startup](https://discuss.elastic.co/t/installing-templates-on-es-startup/225171)
**Author:** [@TimWardFS](https://discuss.elastic.co/u/TimWardFS)\ **Replies:** 0\ **Last updated:** [March 26, 2020, 11:00am UTC](https://discuss.elastic.co/t/installing-templates-on-es-startup/225171 "2020-03-26T11:00:59Z")
When using ECK to run up an Elasticsearch cluster, via a Helm chart, what's the best way to install templates into a new cluster (PUT /\_template/...)? Possibilities would appear to include: (1) Put some curl commands i… --- ## [Sum of source bytes seems impossibly large](https://discuss.elastic.co/t/sum-of-source-bytes-seems-impossibly-large/219961)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 6\ **Last updated:** [March 26, 2020, 10:33am UTC](https://discuss.elastic.co/t/sum-of-source-bytes-seems-impossibly-large/219961 "2020-03-26T10:33:07Z")
Hello, Was browsing through Kibana SIEM on 7.5.2 and discovered some weird 'Bytes In', 'Bytes Out' metrics. After investigating, it seemd like some servers were sending huge amounts of traffic to my Elastic ingest nodes… --- ## [Logstash Pipelines doesn't work when logs come from Filebeat](https://discuss.elastic.co/t/logstash-pipelines-doesnt-work-when-logs-come-from-filebeat/225162)
**Author:** [@oula\_oula](https://discuss.elastic.co/u/oula_oula)\ **Replies:** 0\ **Last updated:** [March 26, 2020, 10:17am UTC](https://discuss.elastic.co/t/logstash-pipelines-doesnt-work-when-logs-come-from-filebeat/225162 "2020-03-26T10:17:17Z")
Hi, I've built a pipeline.conf in Logstash that works when the input is a path file (so without using filebeat shipping). But when I just modify the input, so by replacing path input with beats port 5044 (Filebeat), a… --- ## [How to forwards logs from logstash to qradar over SSL/TLS?](https://discuss.elastic.co/t/how-to-forwards-logs-from-logstash-to-qradar-over-ssl-tls/225157)
**Author:** [@Goryoun](https://discuss.elastic.co/u/Goryoun)\ **Replies:** 0\ **Last updated:** [March 26, 2020, 10:05am UTC](https://discuss.elastic.co/t/how-to-forwards-logs-from-logstash-to-qradar-over-ssl-tls/225157 "2020-03-26T10:05:01Z")
We are planning to use logstash as a shipper to send logs to qradar. We are planning to get logstash logs as syslog to Qradar. How we can transfer the data securely? There is cipher plugin available in logstash to send … --- ## [Kibana - Read Only user has problem to see the data](https://discuss.elastic.co/t/kibana-read-only-user-has-problem-to-see-the-data/225030)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 1\ **Last updated:** [March 26, 2020, 9:41am UTC](https://discuss.elastic.co/t/kibana-read-only-user-has-problem-to-see-the-data/225030 "2020-03-26T09:41:42Z")
Hello Team, I have created one user, he has access to one of the index , privileges are read and view\_index\_metadata . Once user login Kibana is popping up with below error What is missing here ! i have done same thi… --- ## [How to slow down large amount of data coming from filebeat?](https://discuss.elastic.co/t/how-to-slow-down-large-amount-of-data-coming-from-filebeat/224970)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 5\ **Last updated:** [March 26, 2020, 9:37am UTC](https://discuss.elastic.co/t/how-to-slow-down-large-amount-of-data-coming-from-filebeat/224970 "2020-03-26T09:37:25Z")
Hi Team, How will you slow down large amount of data streaming from filebeat to logstash so that it can be processed accurately in filter section. Thanks and Regards, Sagar Mandal --- ## [Logstash - filter message](https://discuss.elastic.co/t/logstash-filter-message/225129)
**Author:** [@rockyu](https://discuss.elastic.co/u/rockyu)\ **Replies:** 2\ **Last updated:** [March 26, 2020, 9:04am UTC](https://discuss.elastic.co/t/logstash-filter-message/225129 "2020-03-26T09:04:17Z")
If my logs is 2020-03-26-12:12:36 aaa, I want to filter out the date like 2020-03-26-12:12:36 ,How can I do it ? My config is grok { match =\> {"message =\> (?\(\[0-9|-\]\\S+\[0-9|:\]\\S+)"} add\_f… --- ## [Handling different kind of logs](https://discuss.elastic.co/t/handling-different-kind-of-logs/221158)
**Author:** [@Guru\_Prasanth](https://discuss.elastic.co/u/Guru_Prasanth)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 7:38am UTC](https://discuss.elastic.co/t/handling-different-kind-of-logs/221158 "2020-02-27T07:38:55Z")
Hi all, I have a requirement where i need to handle various types of logs. One option is to use filter for each kind pof logs and process them. Is there any other better options as APACHECOMMONLOGS and APACHECOMBINEDL… --- ## [Unable to start Elastic on RHEL host](https://discuss.elastic.co/t/unable-to-start-elastic-on-rhel-host/224776)
**Author:** [@amty](https://discuss.elastic.co/u/amty)\ **Replies:** 3\ **Last updated:** [March 26, 2020, 7:21am UTC](https://discuss.elastic.co/t/unable-to-start-elastic-on-rhel-host/224776 "2020-03-26T07:21:38Z")
I installed Elastic as per this guide - https://www.elastic.co/guide/en/elasticsearch/reference/7.6/rpm.html OS info - NAME="Red Hat Enterprise Linux Server", VERSION="7.7 (Maipo)" Since my tmp direcgtory is set to NOE… --- ## [Failed to connect to localhost port 9200: Connection refused，----elasticsearch SETUP](https://discuss.elastic.co/t/failed-to-connect-to-localhost-port-9200-connection-refused-elasticsearch-setup/225092)
**Author:** [@Jennifer](https://discuss.elastic.co/u/Jennifer)\ **Replies:** 3\ **Last updated:** [March 26, 2020, 7:17am UTC](https://discuss.elastic.co/t/failed-to-connect-to-localhost-port-9200-connection-refused-elasticsearch-setup/225092 "2020-03-26T07:17:21Z")
oot@ubuntu1804:/usr/local/elasticsearch-7.6.1# /etc/init.d/elasticsearch start No passwd entry for user 'elsearch' elasticsearch is started root@ubuntu1804:/usr/local/elasticsearch-7.6.1# /usr/local/elasticsearch-7.6.… --- ## [Indexing very long word](https://discuss.elastic.co/t/indexing-very-long-word/224995)
**Author:** [@Jogi\_Michal](https://discuss.elastic.co/u/Jogi_Michal)\ **Replies:** 0\ **Last updated:** [March 25, 2020, 2:10pm UTC](https://discuss.elastic.co/t/indexing-very-long-word/224995 "2020-03-25T14:10:17Z")
Hi folks, I have a problem with the indexation of the text field... My mapping for this field looks like this: "metadata": { "type": "text" }, and some of the documents have there a very long string without whites… --- ## [Configure log4j2 in Elasticsearch (7x)](https://discuss.elastic.co/t/configure-log4j2-in-elasticsearch-7x/224777)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 2\ **Last updated:** [March 26, 2020, 7:02am UTC](https://discuss.elastic.co/t/configure-log4j2-in-elasticsearch-7x/224777 "2020-03-26T07:02:25Z")
Hi everyone, I have just installed Elasticsearch 7.5.2 on Ubuntu 16.04 and I would like to configure Elasticsearch in order to retain only two log compressed files in /var/log/elasticsearch. I have modified log4j2.prop… --- ## [Masking password in logstash config file](https://discuss.elastic.co/t/masking-password-in-logstash-config-file/225122)
**Author:** [@Thamini\_NellaiKumar](https://discuss.elastic.co/u/Thamini_NellaiKumar)\ **Replies:** 0\ **Last updated:** [March 26, 2020, 6:30am UTC](https://discuss.elastic.co/t/masking-password-in-logstash-config-file/225122 "2020-03-26T06:30:57Z")
Hi, I want to mask my password in logstash config file. I came to know that we can do this by secure key store. Is this feature available in free version of kibana? Currently am using version 7.5.1 --- ## [Improve restore speed from S3?](https://discuss.elastic.co/t/improve-restore-speed-from-s3/225120)
**Author:** [@CanardMoussant](https://discuss.elastic.co/u/CanardMoussant)\ **Replies:** 0\ **Last updated:** [March 26, 2020, 6:14am UTC](https://discuss.elastic.co/t/improve-restore-speed-from-s3/225120 "2020-03-26T06:14:44Z")
Hello, I have a single node cluster running on a i3.2xlarge on AWS (ES 6.8.3). I want to perform a restore from S3 (in the same region) and I am surprised that the network throughput moves between 200MB/s and 300MB/s. I… --- ## [Creating dedicated master nodes. How do we turn off coordinating responsibilities for master nodes?](https://discuss.elastic.co/t/creating-dedicated-master-nodes-how-do-we-turn-off-coordinating-responsibilities-for-master-nodes/225087)
**Author:** [@hhsuey](https://discuss.elastic.co/u/hhsuey)\ **Replies:** 3\ **Last updated:** [March 26, 2020, 5:08am UTC](https://discuss.elastic.co/t/creating-dedicated-master-nodes-how-do-we-turn-off-coordinating-responsibilities-for-master-nodes/225087 "2020-03-26T05:08:05Z")
Here it is stated that the master node should not be a coordinating node. Dedicated master-eligible nodes only have the master role, allowing them to focus on managing the cluster. While master nodes can also behave … --- ## [Extract a string from field Scripted field](https://discuss.elastic.co/t/extract-a-string-from-field-scripted-field/225108)
**Author:** [@rsuper\_6616](https://discuss.elastic.co/u/rsuper_6616)\ **Replies:** 0\ **Last updated:** [March 26, 2020, 4:27am UTC](https://discuss.elastic.co/t/extract-a-string-from-field-scripted-field/225108 "2020-03-26T04:27:50Z")
I am working on Elastic Cloud v7.6. I have a index that contain a field contains a text like this Status: 200-200 OK-OK Headers: Server=xxxxxxxxxx content-length=295 Cache-Control=private Content-Type=application/json;… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1549) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1551)