# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1570 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1571 --- ## [Rest api in elasticsearch plugin](https://discuss.elastic.co/t/rest-api-in-elasticsearch-plugin/223761)
**Author:** [@Bengagi\_Foued](https://discuss.elastic.co/u/Bengagi_Foued)\ **Replies:** 1\ **Last updated:** [March 16, 2020, 1:57pm UTC](https://discuss.elastic.co/t/rest-api-in-elasticsearch-plugin/223761 "2020-03-16T13:57:21Z")
i just created an elasticsearch plugin which exports GIS reports every day at 00:00 , now i'd like to add a button in my UI to invoke the report creation on demand my question, is it possible to expose a rest api in thi… --- ## [Setup with multiple ElasticSearch in one VM](https://discuss.elastic.co/t/setup-with-multiple-elasticsearch-in-one-vm/223763)
**Author:** [@Gopi\_Sumanth](https://discuss.elastic.co/u/Gopi_Sumanth)\ **Replies:** 1\ **Last updated:** [March 16, 2020, 1:56pm UTC](https://discuss.elastic.co/t/setup-with-multiple-elasticsearch-in-one-vm/223763 "2020-03-16T13:56:09Z")
I am using elastic-7.6.1. I am trying to setup elastic cluster locally in vm with two masters and one slave. I have downloaded tar file and extracted into 3 different locations and modified the elasticsearch.yml with th… --- ## [Standard TokenizerFactory deprecated in Elasticsearch Java API v7?](https://discuss.elastic.co/t/standard-tokenizerfactory-deprecated-in-elasticsearch-java-api-v7/223427)
**Author:** [@munasia](https://discuss.elastic.co/u/munasia)\ **Replies:** 3\ **Last updated:** [March 16, 2020, 1:50pm UTC](https://discuss.elastic.co/t/standard-tokenizerfactory-deprecated-in-elasticsearch-java-api-v7/223427 "2020-03-16T13:50:50Z")
Currently performing an Elasticsearch upgrade from v1.7 to v7.1. While refactoring our Java code, I came across this Elasticsearch v1.7 code: private static final TokenizerFactory STANDARD\_TOKENIZER\_FACTORY = … --- ## [Elasticsearch run as service](https://discuss.elastic.co/t/elasticsearch-run-as-service/223369)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 3\ **Last updated:** [March 16, 2020, 1:49pm UTC](https://discuss.elastic.co/t/elasticsearch-run-as-service/223369 "2020-03-16T13:49:37Z")
I installed elasticsearch with a tar.gz package. I want to run as a service so that es can run automatically when the system reboots. How should I set it up? elasticsearch: 7.6 os: centos7 Instead of using rpm, we n… --- ## [Values are not showing correctly when used aggs sort](https://discuss.elastic.co/t/values-are-not-showing-correctly-when-used-aggs-sort/221807)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 6\ **Last updated:** [March 16, 2020, 1:44pm UTC](https://discuss.elastic.co/t/values-are-not-showing-correctly-when-used-aggs-sort/221807 "2020-03-16T13:44:18Z")
Hello, I have one index named master\_db, in that i have fetched one column from db named content\_type. I am using aggs to sort values of content \_type as below: GET /master\_db/\_search?size=0 { "aggs":{ "group\_by":{… --- ## [100% CPU accross all 8 nodes during query](https://discuss.elastic.co/t/100-cpu-accross-all-8-nodes-during-query/223545)
**Author:** [@bradley.king](https://discuss.elastic.co/u/bradley.king)\ **Replies:** 4\ **Last updated:** [March 16, 2020, 1:40pm UTC](https://discuss.elastic.co/t/100-cpu-accross-all-8-nodes-during-query/223545 "2020-03-16T13:40:36Z")
HI everyone We've been trying to get the the bottom of this issue for a few months now with no luck, would really appropriate some support :slight\_smile: The issue When querying our Wazuh Alert indexes we see 100% CPU… --- ## [Percentile ranks return wrong value](https://discuss.elastic.co/t/percentile-ranks-return-wrong-value/223755)
**Author:** [@Yevhen\_Baidiuk](https://discuss.elastic.co/u/Yevhen_Baidiuk)\ **Replies:** 0\ **Last updated:** [March 16, 2020, 12:44pm UTC](https://discuss.elastic.co/t/percentile-ranks-return-wrong-value/223755 "2020-03-16T12:44:39Z")
I read about "Percentiles Aggregation" and know already about "relative error". In my case, I have to calculate correctly. I have 45 values greater than 0.4 and 1 values smaller than 0.4 So correct return percentile … --- ## [Advice on Elasticsearch Architecture design](https://discuss.elastic.co/t/advice-on-elasticsearch-architecture-design/223408)
**Author:** [@Allan\_John](https://discuss.elastic.co/u/Allan_John)\ **Replies:** 3\ **Last updated:** [March 16, 2020, 12:09pm UTC](https://discuss.elastic.co/t/advice-on-elasticsearch-architecture-design/223408 "2020-03-16T12:09:46Z")
Hi all, I am planning to setup an Elastic Stack with different type of nodes. For start there might be less traffic, but it can increase a lot in few months as many applications will be pushing lot of data. My plan was… --- ## [@timestamp field is missing in dead letter queue](https://discuss.elastic.co/t/timestamp-field-is-missing-in-dead-letter-queue/223749)
**Author:** [@darkwarrior](https://discuss.elastic.co/u/darkwarrior)\ **Replies:** 0\ **Last updated:** [March 16, 2020, 11:56am UTC](https://discuss.elastic.co/t/timestamp-field-is-missing-in-dead-letter-queue/223749 "2020-03-16T11:56:05Z")
Hello everyone, I am using dead letter queue and based on some filters I want to index all the processed events to ES. In output section of dlq I am using, index =\> "index-prod-l%{+YYYYMMdd}" to create dynamic indices… --- ## [Recommended supported resources and environment load max record](https://discuss.elastic.co/t/recommended-supported-resources-and-environment-load-max-record/223745)
**Author:** [@vin.ramesh](https://discuss.elastic.co/u/vin.ramesh)\ **Replies:** 1\ **Last updated:** [March 16, 2020, 11:54am UTC](https://discuss.elastic.co/t/recommended-supported-resources-and-environment-load-max-record/223745 "2020-03-16T11:54:45Z")
For this implementation, default query size 10,000, max 3,000,000 what is the recommended supported resources and environment. --- ## [Metricbeat logs in messages](https://discuss.elastic.co/t/metricbeat-logs-in-messages/223558)
**Author:** [@Surendra\_Gupta](https://discuss.elastic.co/u/Surendra_Gupta)\ **Replies:** 1\ **Last updated:** [March 16, 2020, 10:43am UTC](https://discuss.elastic.co/t/metricbeat-logs-in-messages/223558 "2020-03-16T10:43:12Z")
Hi I am getting error in beat and it is stored in /var/log/messages and with 1.GB per day so how can i restrict the logs to enter into it --- ## [Vibrant slack or IRC needed at least Mailing list](https://discuss.elastic.co/t/vibrant-slack-or-irc-needed-at-least-mailing-list/223727)
**Author:** [@Seetharaman\_K](https://discuss.elastic.co/u/Seetharaman_K)\ **Replies:** 0\ **Last updated:** [March 16, 2020, 10:12am UTC](https://discuss.elastic.co/t/vibrant-slack-or-irc-needed-at-least-mailing-list/223727 "2020-03-16T10:12:57Z")
Hi all , i know there is an IRC for logstash and 2 channles for elastic and 1 for kibana in freenode. but none of them are vibrant. when i say vibrant i dont mean that , as soon as you post a question some one should he… --- ## [Words with - in elastic search](https://discuss.elastic.co/t/words-with-in-elastic-search/223722)
**Author:** [@Vaibhav\_Sharma](https://discuss.elastic.co/u/Vaibhav_Sharma)\ **Replies:** 1\ **Last updated:** [March 16, 2020, 10:02am UTC](https://discuss.elastic.co/t/words-with-in-elastic-search/223722 "2020-03-16T10:02:04Z")
I have string like "DMZ-trust", when I search in elastic it shows result for DMZ and trust but not for complete word "DMZ-trust". Which property defines this behavior in elastic and how to change it. I am using this map… --- ## [Bulk indexing rejected threads](https://discuss.elastic.co/t/bulk-indexing-rejected-threads/223679)
**Author:** [@adrian\_luighi](https://discuss.elastic.co/u/adrian_luighi)\ **Replies:** 13\ **Last updated:** [March 16, 2020, 9:41am UTC](https://discuss.elastic.co/t/bulk-indexing-rejected-threads/223679 "2020-03-16T09:41:55Z")
Hello, I am pretty new to elasticsearch I made my project and everything works really well except bulk indexing. The problem is I am getting alot of rejected write threads. I looked up thread pool and I got this: node\_… --- ## [JVM, ERROR, \[o.e.c.r.a.DiskThresholdMonitor\] \[ESHOST\] low disk watermark \[85%\]](https://discuss.elastic.co/t/jvm-error-o-e-c-r-a-diskthresholdmonitor-eshost-low-disk-watermark-85/223700)
**Author:** [@Sheik](https://discuss.elastic.co/u/Sheik)\ **Replies:** 0\ **Last updated:** [March 16, 2020, 6:59am UTC](https://discuss.elastic.co/t/jvm-error-o-e-c-r-a-diskthresholdmonitor-eshost-low-disk-watermark-85/223700 "2020-03-16T06:59:11Z")
Hi, I have been working with one of the PoC project, where the requirement is to collect the ERROR logs from multiple linux nodes to Windows machine where ElasticSearch and kibana are running. I could able to see the lo… --- ## [Help with parse logs not standardized](https://discuss.elastic.co/t/help-with-parse-logs-not-standardized/223618)
**Author:** [@Ernest\_Lachowicz](https://discuss.elastic.co/u/Ernest_Lachowicz)\ **Replies:** 3\ **Last updated:** [March 16, 2020, 9:28am UTC](https://discuss.elastic.co/t/help-with-parse-logs-not-standardized/223618 "2020-03-16T09:28:06Z")
Hi, I'm starting my adventure with Logstash (ELK). I would like parse logs: 2020-02-11 15:10:17.435 DEV\_CTRL UPPER OUTPUT/ue/ue1/dev\_ctrl/logger IMSI=01723600 Sending message BearerContextReleased: BearerContextRelease… --- ## [Sprintf reference in grok pattern (help me~!)](https://discuss.elastic.co/t/sprintf-reference-in-grok-pattern-help-me/223694)
**Author:** [@judragon\_dark](https://discuss.elastic.co/u/judragon_dark)\ **Replies:** 4\ **Last updated:** [March 16, 2020, 8:57am UTC](https://discuss.elastic.co/t/sprintf-reference-in-grok-pattern-help-me/223694 "2020-03-16T08:57:47Z")
logstash filter code filter{ grok { patterns\_dir =\> \["/etc/logstash/patterns/ssk-patterns"\] match =\> {"message" =\> "%{\[fields\]\[log\_type\]}"} } } \[fields… --- ## [Suggestions for visualizing complex query - Kubernetes cpu requested vs available](https://discuss.elastic.co/t/suggestions-for-visualizing-complex-query-kubernetes-cpu-requested-vs-available/223416)
**Author:** [@Babadofar](https://discuss.elastic.co/u/Babadofar)\ **Replies:** 5\ **Last updated:** [March 16, 2020, 8:35am UTC](https://discuss.elastic.co/t/suggestions-for-visualizing-complex-query-kubernetes-cpu-requested-vs-available/223416 "2020-03-16T08:35:43Z")
Hi people, I'm using metricbeat to gather Kubernetes metrics, and I'm trying to find ways to create the visualizations and insight we need. One metric we need is to know the total amount of cpu which our applications re… --- ## [Provided Grok patterns do not match field value](https://discuss.elastic.co/t/provided-grok-patterns-do-not-match-field-value/220051)
**Author:** [@Cuju](https://discuss.elastic.co/u/Cuju)\ **Replies:** 10\ **Last updated:** [March 16, 2020, 8:33am UTC](https://discuss.elastic.co/t/provided-grok-patterns-do-not-match-field-value/220051 "2020-03-16T08:33:49Z")
Hello, I have an issue for a few days I can resolve. I want to parse "Feb 7 00:23:34 ig1-edge-dc3-01\_re0 rpd\[1524\]: RPD\_BGP\_NEIGHBOR\_STATE\_CHANGED: BGP peer 158.58.176.35 (External AS 200271) changed state from EstabSy… --- ## [Getting “master not discovered exception” even running only one node](https://discuss.elastic.co/t/getting-master-not-discovered-exception-even-running-only-one-node/223699)
**Author:** [@Jane\_C](https://discuss.elastic.co/u/Jane_C)\ **Replies:** 1\ **Last updated:** [March 16, 2020, 7:31am UTC](https://discuss.elastic.co/t/getting-master-not-discovered-exception-even-running-only-one-node/223699 "2020-03-16T07:31:09Z")
Hi there, I am using Elasticsearch 7.6.0 and I only have one node. But I still getting the exception, master\_not\_discovered\_exception when running curl -H "Content-Type: application/json" -XPUT 127.0.0.1:9200/movies… --- ## [How can parse log data into individual key=val pair dynamically in logstash?](https://discuss.elastic.co/t/how-can-parse-log-data-into-individual-key-val-pair-dynamically-in-logstash/223317)
**Author:** [@Pathshala\_Gopi](https://discuss.elastic.co/u/Pathshala_Gopi)\ **Replies:** 8\ **Last updated:** [March 16, 2020, 7:14am UTC](https://discuss.elastic.co/t/how-can-parse-log-data-into-individual-key-val-pair-dynamically-in-logstash/223317 "2020-03-16T07:14:26Z")
My question is how can i separate the log data into individual key=val pair in logstash.This means when i get the log data from beats or file sources it will be in string form so i need that string must be divided separa… --- ## [Using grok filter show log timestamp in time](https://discuss.elastic.co/t/using-grok-filter-show-log-timestamp-in-time/222872)
**Author:** [@lohit18](https://discuss.elastic.co/u/lohit18)\ **Replies:** 2\ **Last updated:** [March 16, 2020, 7:12am UTC](https://discuss.elastic.co/t/using-grok-filter-show-log-timestamp-in-time/222872 "2020-03-16T07:12:47Z")
Dear Team, Kindly help me with this how to do { "\_index": "env-2020.03.09", "\_type": "\_doc", "\_id": "dsfhdsj2e630", "\_version": 1, "\_score": null, "\_source": { "type": "Monitor Logs", "host": "efjf4323", "mess… --- ## [Elapsed filter plugin issues](https://discuss.elastic.co/t/elapsed-filter-plugin-issues/223246)
**Author:** [@Nicolas\_Aizier](https://discuss.elastic.co/u/Nicolas_Aizier)\ **Replies:** 3\ **Last updated:** [March 16, 2020, 6:47am UTC](https://discuss.elastic.co/t/elapsed-filter-plugin-issues/223246 "2020-03-16T06:47:52Z")
Hi all, I'll try to keep it short and technical enough to not be boring (I too hate to read long drifting problems) I've got some issues with the elapsed plugin. Here is my setup in a nutshell. Just know that this set… --- ## [How to enable SLM feature in elastic.co](https://discuss.elastic.co/t/how-to-enable-slm-feature-in-elastic-co/223696)
**Author:** [@Jack\_Phan](https://discuss.elastic.co/u/Jack_Phan)\ **Replies:** 0\ **Last updated:** [March 16, 2020, 6:45am UTC](https://discuss.elastic.co/t/how-to-enable-slm-feature-in-elastic-co/223696 "2020-03-16T06:45:18Z")
I'm running an Elasticsearch cluster in elastic.co. The version is 7.6.0. While working with the SLM, I figured out that SLM is not enabled. I can check that by using the API GET \_xpack?categories=features&pretty The … --- ## [Elasticsearch ILM bug how to debug?](https://discuss.elastic.co/t/elasticsearch-ilm-bug-how-to-debug/223693)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 0\ **Last updated:** [March 16, 2020, 6:19am UTC](https://discuss.elastic.co/t/elasticsearch-ilm-bug-how-to-debug/223693 "2020-03-16T06:19:22Z")
ILM policy is set: rollover daily / delete after 31days. Index is deleted after 7days (ignoring 31days setup) I tried to change the value 30,31 and no change. This ILM is used by 2 templates and 2 indexes. test\_xxx, a… --- ## [Values not displaying on chart](https://discuss.elastic.co/t/values-not-displaying-on-chart/223098)
**Author:** [@jagadeeswar](https://discuss.elastic.co/u/jagadeeswar)\ **Replies:** 2\ **Last updated:** [March 16, 2020, 6:04am UTC](https://discuss.elastic.co/t/values-not-displaying-on-chart/223098 "2020-03-16T06:04:02Z")
Hello, My requirement is i have a jenkins job which is running every five min's with curl command to get jenkins responce times and that logs been forwarded to elastic search using logstash plugin. I have created a kia… --- ## [Getting](https://discuss.elastic.co/t/getting/223664)
**Author:** [@Suchismita\_Goswami](https://discuss.elastic.co/u/Suchismita_Goswami)\ **Replies:** 1\ **Last updated:** [March 16, 2020, 5:40am UTC](https://discuss.elastic.co/t/getting/223664 "2020-03-16T05:40:56Z")
I am deploying Elasticsearch onto kubernetes cluster using Elastic’s Helm repository . After chaning the fullnameoveride field in values.yaml I am getting MasterNot Discovered error. However, when I kept fullnameoverri… --- ## [Visualize 棒グラフのカウントについて](https://discuss.elastic.co/t/visualize/223687)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 0\ **Last updated:** [March 16, 2020, 5:12am UTC](https://discuss.elastic.co/t/visualize/223687 "2020-03-16T05:12:04Z")
お世話になります。 Visualizeのbar chart(横棒グラフ)について質問させて頂きます。 ▼bar chartの設定値 ▼質問事項 上記設定値にて、下記のようにrequestのデータを配列（同値が2件）とすると、 Y軸のカウントは1件で表示されます。 "request": \["http://aaa.com/","http://aaa.com/"\] 配列の各要素が同値であっても、各要素ずつカウント(上記例では… --- ## [Visualize 積み上げ縦棒グラフの作成方法](https://discuss.elastic.co/t/visualize/223279)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 2\ **Last updated:** [March 16, 2020, 4:54am UTC](https://discuss.elastic.co/t/visualize/223279 "2020-03-16T04:54:17Z")
お世話になります。 Visualizeのbar chartsにて積み上げ縦棒グラフを作成したいのですが、 公式ドキュメント、discussを参照したところ作成方法が見つかりません。 bar chartsの作成方法について、ご教示お願い致します。 ▼イメージ id毎に月毎の件数を積み上げ表示 --- ## [How can i send duplicate lines (from logstash to elasticsearch) in log file](https://discuss.elastic.co/t/how-can-i-send-duplicate-lines-from-logstash-to-elasticsearch-in-log-file/222064)
**Author:** [@chandanachk](https://discuss.elastic.co/u/chandanachk)\ **Replies:** 5\ **Last updated:** [March 16, 2020, 4:38am UTC](https://discuss.elastic.co/t/how-can-i-send-duplicate-lines-from-logstash-to-elasticsearch-in-log-file/222064 "2020-03-16T04:38:42Z")
I'm a beginner of this area and i want to send duplicate lines of a log file to elastic search. currently it is identifying duplicates and send only one line, sample log file 00:00:59,62.10.38.47,39473311,"POST /v0.1/te… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1569) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1571)