# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1555 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1556 --- ## [How elasticsearch deals with the result of each shard?](https://discuss.elastic.co/t/how-elasticsearch-deals-with-the-result-of-each-shard/221864)
**Author:** [@wall](https://discuss.elastic.co/u/wall)\ **Replies:** 1\ **Last updated:** [March 24, 2020, 11:51am UTC](https://discuss.elastic.co/t/how-elasticsearch-deals-with-the-result-of-each-shard/221864 "2020-03-24T11:51:06Z")
Hi Elasticians! I was thinking in how Elasticsearch deals with the results from each shard and how it can lead to imprecise results, once each shard only knows about its data (I also read we can make it work precisely) … --- ## [Kibana json input filter](https://discuss.elastic.co/t/kibana-json-input-filter/224812)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 1\ **Last updated:** [March 24, 2020, 11:27am UTC](https://discuss.elastic.co/t/kibana-json-input-filter/224812 "2020-03-24T11:27:22Z")
Hi, I wanna create vertical bar chart with 2 bars. Both of them are sum of one field (Duration) but based on a condition on another field. one bar is sum of duration when and another when now I think I should add… --- ## [Log patterns are different for single pipeline and multiple pipelines](https://discuss.elastic.co/t/log-patterns-are-different-for-single-pipeline-and-multiple-pipelines/224810)
**Author:** [@MioOgbeni](https://discuss.elastic.co/u/MioOgbeni)\ **Replies:** 0\ **Last updated:** [March 24, 2020, 11:05am UTC](https://discuss.elastic.co/t/log-patterns-are-different-for-single-pipeline-and-multiple-pipelines/224810 "2020-03-24T11:05:20Z")
Hi, can I have a question? What may cause that logstash has different log patterns, when I use multiple pipes? I found this problem, bud still without answer. https://github.com/elastic/logstash/issues/11678 Can anyon… --- ## [Web Portocols and Ports used by Elasticsearch](https://discuss.elastic.co/t/web-portocols-and-ports-used-by-elasticsearch/220055)
**Author:** [@somebody](https://discuss.elastic.co/u/somebody)\ **Replies:** 17\ **Last updated:** [March 24, 2020, 10:37am UTC](https://discuss.elastic.co/t/web-portocols-and-ports-used-by-elasticsearch/220055 "2020-03-24T10:37:22Z")
Hi, I need to know all the protocols ( http, tcp.. etc) Elasticsearch uses for client-server communication (indexing, querying.. etc) Inter-communication between primary and replica shards ( For leader election, recov… --- ## [Enrich policy with daily index uses only oldest index after \_execute](https://discuss.elastic.co/t/enrich-policy-with-daily-index-uses-only-oldest-index-after-execute/224804)
**Author:** [@winlamp](https://discuss.elastic.co/u/winlamp)\ **Replies:** 0\ **Last updated:** [March 24, 2020, 10:32am UTC](https://discuss.elastic.co/t/enrich-policy-with-daily-index-uses-only-oldest-index-after-execute/224804 "2020-03-24T10:32:09Z")
Hi, i try to use an enrich policy that references to a daily index e.g. index-dd.mm.yyyy. When I change the content of the index and start ingestion the index is updated. All is fine. But as soon as I update the enrich … --- ## [PutIndexTemplateRequest problem using JSON as source - mappings fail to parse](https://discuss.elastic.co/t/putindextemplaterequest-problem-using-json-as-source-mappings-fail-to-parse/224803)
**Author:** [@Chris\_Samo](https://discuss.elastic.co/u/Chris_Samo)\ **Replies:** 0\ **Last updated:** [March 24, 2020, 10:29am UTC](https://discuss.elastic.co/t/putindextemplaterequest-problem-using-json-as-source-mappings-fail-to-parse/224803 "2020-03-24T10:29:26Z")
I'm trying to use the Elasticsearch Java SDK (7.6.0) to validate some index template JSON that I know works when sent to Elasticsearch's \_template endpoint through Kibana/direct to the Elasticsearch instance. Example te… --- ## [Boolean query with two conditions on a field](https://discuss.elastic.co/t/boolean-query-with-two-conditions-on-a-field/224313)
**Author:** [@Titan](https://discuss.elastic.co/u/Titan)\ **Replies:** 13\ **Last updated:** [March 24, 2020, 10:15am UTC](https://discuss.elastic.co/t/boolean-query-with-two-conditions-on-a-field/224313 "2020-03-24T10:15:48Z")
Applying range filter on a boolean field In a search query, I am trying to get product records that are either not suppressed or if suppressed then the suppression range is either before current time or after current ti… --- ## [QRadar data into Elasticsearch](https://discuss.elastic.co/t/qradar-data-into-elasticsearch/224800)
**Author:** [@Purushoth\_Kumar](https://discuss.elastic.co/u/Purushoth_Kumar)\ **Replies:** 0\ **Last updated:** [March 24, 2020, 10:14am UTC](https://discuss.elastic.co/t/qradar-data-into-elasticsearch/224800 "2020-03-24T10:14:35Z")
Hi Team, I need some help/guidance regarding integrating QRadar with Elastic. My requirement is to get EPS data from QRadar and store them in elasticserach for monitoring. Any little help is appreciated. Thanks for y… --- ## [Fix header of table visualisation in kibana](https://discuss.elastic.co/t/fix-header-of-table-visualisation-in-kibana/224596)
**Author:** [@Kundan\_Singh](https://discuss.elastic.co/u/Kundan_Singh)\ **Replies:** 3\ **Last updated:** [March 24, 2020, 10:11am UTC](https://discuss.elastic.co/t/fix-header-of-table-visualisation-in-kibana/224596 "2020-03-24T10:11:08Z")
How I can fix header of a table visualization in kibana(7.2) https://github.com/elastic/kibana/blob/7.2/src/legacy/core\_plugins/kibana/public/discover/doc\_table/components/table\_header.html --- ## [Kibana Visual Builder - Color Rules is not working properly](https://discuss.elastic.co/t/kibana-visual-builder-color-rules-is-not-working-properly/224593)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 3\ **Last updated:** [March 24, 2020, 10:08am UTC](https://discuss.elastic.co/t/kibana-visual-builder-color-rules-is-not-working-properly/224593 "2020-03-24T10:08:38Z")
Hi Team, I am using Visual Builder to present data in table format , i tried setting color rule to the metrics which i am showing in table. When i try to set condition and select and release mouse condition is not getti… --- ## [Access and match a subfield (nested field) in a Painless script with the reindex API](https://discuss.elastic.co/t/access-and-match-a-subfield-nested-field-in-a-painless-script-with-the-reindex-api/224711)
**Author:** [@dsv](https://discuss.elastic.co/u/dsv)\ **Replies:** 2\ **Last updated:** [March 24, 2020, 9:44am UTC](https://discuss.elastic.co/t/access-and-match-a-subfield-nested-field-in-a-painless-script-with-the-reindex-api/224711 "2020-03-24T09:44:52Z")
I have to change type (reindex) a field "source.ip" from the text mapping type to the IP type. Because some of the "source.ip" values have non IP format (like "bob\_IP"). I've tried: POST \_reindex { "source": { … --- ## [Exception in logstash filter](https://discuss.elastic.co/t/exception-in-logstash-filter/224792)
**Author:** [@jagan](https://discuss.elastic.co/u/jagan)\ **Replies:** 0\ **Last updated:** [March 24, 2020, 9:30am UTC](https://discuss.elastic.co/t/exception-in-logstash-filter/224792 "2020-03-24T09:30:37Z")
Hi guru's, Please help me out i am try to run the job from logstash when it is about to run from database and get the proper output in the output plugin.but the issue is am facing the error: \[ERROR\]\[logstash.pipeline… --- ## [Iterate over array in Kibana](https://discuss.elastic.co/t/iterate-over-array-in-kibana/224638)
**Author:** [@SBH](https://discuss.elastic.co/u/SBH)\ **Replies:** 4\ **Last updated:** [March 24, 2020, 9:13am UTC](https://discuss.elastic.co/t/iterate-over-array-in-kibana/224638 "2020-03-24T09:13:43Z")
Hi I have 3 docs as shown below. It contains the tasks array. I want to have a hit fx in a count for each time the status for the task i fx started. When i search for this in Discover: tasks.status.keyword : "Started" … --- ## [Metricbeat mongodb no reachable servers error](https://discuss.elastic.co/t/metricbeat-mongodb-no-reachable-servers-error/224788)
**Author:** [@Adrian\_Birladeanu](https://discuss.elastic.co/u/Adrian_Birladeanu)\ **Replies:** 0\ **Last updated:** [March 24, 2020, 8:44am UTC](https://discuss.elastic.co/t/metricbeat-mongodb-no-reachable-servers-error/224788 "2020-03-24T08:44:31Z")
Hello. I have a MongoDB replica set with version 4.2.0 running in Kubernetes and I tried to add metricbeat monitoring to a secondary node (metricbeat version 7.6.1). Metricbeat successfully authenticates with a user tha… --- ## [Logs are being aggregated not separate lines](https://discuss.elastic.co/t/logs-are-being-aggregated-not-separate-lines/224652)
**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\ **Replies:** 0\ **Last updated:** [March 23, 2020, 10:50am UTC](https://discuss.elastic.co/t/logs-are-being-aggregated-not-separate-lines/224652 "2020-03-23T10:50:25Z")
I am not sure if this is a logstash or elasticsearch subject. I am pulling nginx\_error logs from filebeats \> logstash \> elasticsearch The thing I have noticed that it is grouping all the messages together like the foll… --- ## [Multiple Elasticsearch Output Pipeline](https://discuss.elastic.co/t/multiple-elasticsearch-output-pipeline/224736)
**Author:** [@Marc\_Wolff](https://discuss.elastic.co/u/Marc_Wolff)\ **Replies:** 2\ **Last updated:** [March 24, 2020, 8:04am UTC](https://discuss.elastic.co/t/multiple-elasticsearch-output-pipeline/224736 "2020-03-24T08:04:12Z")
Hi folks, we have a pipeline with beats input and multiple ES Hosts outputs. But if one of the ES Hosts unreachable or the index is full, all other Outputs also doesn´t get data. Is that normal, or a misconfiguration… --- ## [Kibana - Metric Visualization - Can we present very lengthy numbers in short](https://discuss.elastic.co/t/kibana-metric-visualization-can-we-present-very-lengthy-numbers-in-short/224659)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 2\ **Last updated:** [March 24, 2020, 8:01am UTC](https://discuss.elastic.co/t/kibana-metric-visualization-can-we-present-very-lengthy-numbers-in-short/224659 "2020-03-24T08:01:43Z")
Hi Team, We have used Metric Visualization to present different set of data in the form of Metrics , sometimes the data count will be too much and it leads to 7 ,8,9 digits. Sometimes for an user it will be difficult t… --- ## [Template with asterisk name](https://discuss.elastic.co/t/template-with-asterisk-name/224452)
**Author:** [@fulkon](https://discuss.elastic.co/u/fulkon)\ **Replies:** 2\ **Last updated:** [March 24, 2020, 7:53am UTC](https://discuss.elastic.co/t/template-with-asterisk-name/224452 "2020-03-24T07:53:24Z")
Got an ELK stack with template name \*. I have created new index template with normal name, but how can I delete an index template with asterisk name? Thank You --- ## [Increase in Elasticsearch search latency after increasing instance memory to 64GB](https://discuss.elastic.co/t/increase-in-elasticsearch-search-latency-after-increasing-instance-memory-to-64gb/224223)
**Author:** [@the123saurav](https://discuss.elastic.co/u/the123saurav)\ **Replies:** 2\ **Last updated:** [March 23, 2020, 11:57am UTC](https://discuss.elastic.co/t/increase-in-elasticsearch-search-latency-after-increasing-instance-memory-to-64gb/224223 "2020-03-23T11:57:18Z")
We are using ES 6.0. We do not have any analysers in our index and all fields are "keyword" OR number OR date field. Our search queries are also simple bool queries without any aggregation. We are using EC2, and our p… --- ## [Out of memory on Client Node](https://discuss.elastic.co/t/out-of-memory-on-client-node/224780)
**Author:** [@Jorge\_Nunes1](https://discuss.elastic.co/u/Jorge_Nunes1)\ **Replies:** 0\ **Last updated:** [March 24, 2020, 7:28am UTC](https://discuss.elastic.co/t/out-of-memory-on-client-node/224780 "2020-03-24T07:28:45Z")
Hey everyone! On the last month I have configured an elastic search cluster as follows: 1 Client-node =\> dedicated server (i7 with 12GB ram with Heap Size of 6GB) 4 master-nodes/data-nodes =\> 2 dedicated servers (i7 w… --- ## [Ingest logs using API from cloud tools](https://discuss.elastic.co/t/ingest-logs-using-api-from-cloud-tools/224775)
**Author:** [@kvpk16](https://discuss.elastic.co/u/kvpk16)\ **Replies:** 0\ **Last updated:** [March 24, 2020, 7:15am UTC](https://discuss.elastic.co/t/ingest-logs-using-api-from-cloud-tools/224775 "2020-03-24T07:15:18Z")
Hi - Can someone guide me how to ingest logs from cloud tool like Aruba wireless, Meraki into ELK using API. --- ## [No shards assigning of an index on elastic version 2.X](https://discuss.elastic.co/t/no-shards-assigning-of-an-index-on-elastic-version-2-x/224766)
**Author:** [@Vishal\_Yadav](https://discuss.elastic.co/u/Vishal_Yadav)\ **Replies:** 4\ **Last updated:** [March 24, 2020, 6:48am UTC](https://discuss.elastic.co/t/no-shards-assigning-of-an-index-on-elastic-version-2-x/224766 "2020-03-24T06:48:51Z")
We have 15 Nodes cluster where 3 master 12 data Nodes. After hitting below comand curl -XGET 'localhost:9200/\_cat/shards?h=index,shard,prirep,state,unassigned.reason,unassigned.details'| grep UNASSIGNED index1 … --- ## [Fail to load elasticsearch index](https://discuss.elastic.co/t/fail-to-load-elasticsearch-index/224764)
**Author:** [@Sandeep\_Singh2](https://discuss.elastic.co/u/Sandeep_Singh2)\ **Replies:** 0\ **Last updated:** [March 24, 2020, 5:47am UTC](https://discuss.elastic.co/t/fail-to-load-elasticsearch-index/224764 "2020-03-24T05:47:19Z")
We recently upgraded ELK stack from 6.5 to 7.5.0. Via Kibana i am unable to load older index like last 1 day or 2 days in new version of 7.5.0. Below is the ES error log while trying to load 2 days index. Kibana Console… --- ## [Can I dynamically change the path to the file to use as an input in Logstash configuration file?](https://discuss.elastic.co/t/can-i-dynamically-change-the-path-to-the-file-to-use-as-an-input-in-logstash-configuration-file/224761)
**Author:** [@david4](https://discuss.elastic.co/u/david4)\ **Replies:** 0\ **Last updated:** [March 24, 2020, 4:51am UTC](https://discuss.elastic.co/t/can-i-dynamically-change-the-path-to-the-file-to-use-as-an-input-in-logstash-configuration-file/224761 "2020-03-24T04:51:16Z")
Hi everyone, I'm new to the ELK stack and figuring out how to solve this problem. Let's say I have a following directory structure: /logs/dir\_x/dir\_y/dir\_z/task1/log1.csv, code1.py /logs/dir\_a/dir\_b/dir\_c/task2/log2.c… --- ## [How to index and store pdf file in elastic search using spring boot?](https://discuss.elastic.co/t/how-to-index-and-store-pdf-file-in-elastic-search-using-spring-boot/220289)
**Author:** [@samanvi\_sweety](https://discuss.elastic.co/u/samanvi_sweety)\ **Replies:** 50\ **Last updated:** [March 24, 2020, 3:08am UTC](https://discuss.elastic.co/t/how-to-index-and-store-pdf-file-in-elastic-search-using-spring-boot/220289 "2020-03-24T03:08:20Z")
I am new to elastic search. I would like to know how to index and store the pdf files in elastic search using spring boot microservices --- ## [JDBC plugin: Doesn’t work when select the table name is a number](https://discuss.elastic.co/t/jdbc-plugin-doesn-t-work-when-select-the-table-name-is-a-number/224636)
**Author:** [@111207](https://discuss.elastic.co/u/111207)\ **Replies:** 2\ **Last updated:** [March 24, 2020, 2:43am UTC](https://discuss.elastic.co/t/jdbc-plugin-doesn-t-work-when-select-the-table-name-is-a-number/224636 "2020-03-24T02:43:30Z")
Hi Guy I am using the JDBC plugin and connect to mysql database and I have multiple data table. The name of table is a number.When I run the logstash config have an error Syntax message:You have an error in your SQL sy… --- ## [Elastic pipeline can get current datetime from java](https://discuss.elastic.co/t/elastic-pipeline-can-get-current-datetime-from-java/224754)
**Author:** [@Hong](https://discuss.elastic.co/u/Hong)\ **Replies:** 1\ **Last updated:** [March 24, 2020, 2:30am UTC](https://discuss.elastic.co/t/elastic-pipeline-can-get-current-datetime-from-java/224754 "2020-03-24T02:30:24Z")
Continuing the discussion from How to update a filed with current date and time in ES5.6?: --- ## [About event.cancel](https://discuss.elastic.co/t/about-event-cancel/224335)
**Author:** [@buch11](https://discuss.elastic.co/u/buch11)\ **Replies:** 3\ **Last updated:** [March 24, 2020, 12:33am UTC](https://discuss.elastic.co/t/about-event-cancel/224335 "2020-03-24T00:33:26Z")
Hey Guys, In my logstash setup, I have a chain of three plugins input plugin \> custom plugin 1 \> custom plugin 2 \> output plugin In my currently implementation, I have wrapped code of both custom plugins inside begin.… --- ## [Issue with outputting binary files](https://discuss.elastic.co/t/issue-with-outputting-binary-files/224191)
**Author:** [@mikehwang](https://discuss.elastic.co/u/mikehwang)\ **Replies:** 1\ **Last updated:** [March 23, 2020, 11:17pm UTC](https://discuss.elastic.co/t/issue-with-outputting-binary-files/224191 "2020-03-23T23:17:24Z")
I'm trying to use Logstash to ingest emails and write the messages into Elasticsearch and write attachments onto the filesystem (maybe S3 later). My issue is that the files are not getting written correctly so not reada… --- ## [Mapping vars](https://discuss.elastic.co/t/mapping-vars/224495)
**Author:** [@edkash](https://discuss.elastic.co/u/edkash)\ **Replies:** 2\ **Last updated:** [March 23, 2020, 10:47pm UTC](https://discuss.elastic.co/t/mapping-vars/224495 "2020-03-23T22:47:37Z")
hello dear, I want to know, how better way to create mapping when I need to view my agent version follow your counts. I inser with post this logs in to variables: category: 2.34.212, agent\_count: 480 mapping: … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1554) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1556)