# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1578

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1579

---

## [How to create a new field in a doc using scripted fields and ingest pipeline](https://discuss.elastic.co/t/how-to-create-a-new-field-in-a-doc-using-scripted-fields-and-ingest-pipeline/222989)

<div class="topic-metadata">

**Author:** [@fenster25](https://discuss.elastic.co/u/fenster25)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 10:54am UTC](https://discuss.elastic.co/t/how-to-create-a-new-field-in-a-doc-using-scripted-fields-and-ingest-pipeline/222989 "2020-03-12T10:54:29Z")

</div>

So I have two fields in my docs { emails: \["", "", ""\] name: "", } And I want to have a new field once the docs are indexed called uid which will just contain the concatenated strings of all the emails and the…

---

## [ODBC connector](https://discuss.elastic.co/t/odbc-connector/223208)

<div class="topic-metadata">

**Author:** [@Oscar\_Benitez](https://discuss.elastic.co/u/Oscar_Benitez)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 10:50am UTC](https://discuss.elastic.co/t/odbc-connector/223208 "2020-03-12T10:50:56Z")

</div>

Is there any odbc driver that is free to connect elasticsearch with another BI visualization tool?

---

## [How to create smtp server?](https://discuss.elastic.co/t/how-to-create-smtp-server/223296)

<div class="topic-metadata">

**Author:** [@Yuvaraj](https://discuss.elastic.co/u/Yuvaraj)\
**Replies:** 3\
**Last updated:** [March 12, 2020, 10:32am UTC](https://discuss.elastic.co/t/how-to-create-smtp-server/223296 "2020-03-12T10:32:48Z")

</div>

Anyone is there??

---

## [Convert epoch time to date](https://discuss.elastic.co/t/convert-epoch-time-to-date/223153)

<div class="topic-metadata">

**Author:** [@mehulshah](https://discuss.elastic.co/u/mehulshah)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 10:32am UTC](https://discuss.elastic.co/t/convert-epoch-time-to-date/223153 "2020-03-12T10:32:14Z")

</div>

\[Edited\] I am using Logstash 7.x version I have log like below where scheduledTime is in epoch long number, {"scheduledTime":1580634058274,"processTime":1580634073293,"mailingType":1,"userId":123} I want it to be inde…

---

## [Need help with jq aggregation filter](https://discuss.elastic.co/t/need-help-with-jq-aggregation-filter/223240)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 10:32am UTC](https://discuss.elastic.co/t/need-help-with-jq-aggregation-filter/223240 "2020-03-12T10:32:10Z")

</div>

Hi Folks, I understand this might be off-topic but need help on using jq with my bash script for extracting IP addresses. Somehow my filter is not working hence needed your help. I am extracting src\_ip for last 24 hours…

---

## [Query with Regex](https://discuss.elastic.co/t/query-with-regex/223309)

<div class="topic-metadata">

**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 10:31am UTC](https://discuss.elastic.co/t/query-with-regex/223309 "2020-03-12T10:31:29Z")

</div>

Hi in our log we get from time to time entries like Process 33024 (glusterfsd) of user 0 killed by SIGABRT - dumping core the Process ID 33024 can change also the service SIGABRT can change is there a way to find it…

---

## [Metrics aggregation gives unreasonable result on long numeric datatype](https://discuss.elastic.co/t/metrics-aggregation-gives-unreasonable-result-on-long-numeric-datatype/220218)

<div class="topic-metadata">

**Author:** [@Jehutywong](https://discuss.elastic.co/u/Jehutywong)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 10:30am UTC](https://discuss.elastic.co/t/metrics-aggregation-gives-unreasonable-result-on-long-numeric-datatype/220218 "2020-03-12T10:30:42Z")

</div>

ES version: 7.3.2 My daily index is using dynamic template to map incoming data automatically. Somehow the field "value" which might map to numeric float datatype sometimes. Then in other time, it was mapped to long dat…

---

## [Logstash.confのoutputのif文の設定について](https://discuss.elastic.co/t/logstash-conf-output-if/223271)

<div class="topic-metadata">

**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 10:27am UTC](https://discuss.elastic.co/t/logstash-conf-output-if/223271 "2020-03-12T10:27:11Z")

</div>

Filebeatで、タグ名「Apache\_access\_log」をつけたログのみ、Logstashを経由して、Elastiscsearchに格納したいです。 下記のlogstash.confの設定をif文で、しているのですが、Logstashで、エラー出力されうまくいきません。 原因と対処のご教示をお願いします。 logstash.conf input{ beats { port =\> "504…

---

## [Nested search with multiple must query not working](https://discuss.elastic.co/t/nested-search-with-multiple-must-query-not-working/219990)

<div class="topic-metadata">

**Author:** [@dreamfish](https://discuss.elastic.co/u/dreamfish)\
**Replies:** 3\
**Last updated:** [March 12, 2020, 10:19am UTC](https://discuss.elastic.co/t/nested-search-with-multiple-must-query-not-working/219990 "2020-03-12T10:19:44Z")

</div>

I have the following mapping within my elastic Index: "equipment": { "type": "nested", "properties": { "equipment\_category": { "type": "text", …

---

## [ElasticSearch and Kibana installed successfully, but cannot be accessed by web browser](https://discuss.elastic.co/t/elasticsearch-and-kibana-installed-successfully-but-cannot-be-accessed-by-web-browser/220065)

<div class="topic-metadata">

**Author:** [@vernal](https://discuss.elastic.co/u/vernal)\
**Replies:** 4\
**Last updated:** [March 12, 2020, 10:13am UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-installed-successfully-but-cannot-be-accessed-by-web-browser/220065 "2020-03-12T10:13:15Z")

</div>

Below is the setting from kibana.yml: server.port: 5601 server.host: namenode2 elasticsearch.url: "http://namenode2:9200" Below is the setting from elasticsearch.yml: cluster.name: es-prod node.name: master-1 path…

---

## [How to remove forward slash from the stated message body. Is there any way to display the below json in kibana dashboard as json instead of one line?](https://discuss.elastic.co/t/how-to-remove-forward-slash-from-the-stated-message-body-is-there-any-way-to-display-the-below-json-in-kibana-dashboard-as-json-instead-of-one-line/223288)

<div class="topic-metadata">

**Author:** [@taybur.rahaman](https://discuss.elastic.co/u/taybur.rahaman)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 10:11am UTC](https://discuss.elastic.co/t/how-to-remove-forward-slash-from-the-stated-message-body-is-there-any-way-to-display-the-below-json-in-kibana-dashboard-as-json-instead-of-one-line/223288 "2020-03-12T10:11:24Z")

</div>

{ "\_index": "%{\[@metadata\]\[testbeat\]}-2020.03.12", "\_type": "%{\[@metadata\]\[type\]}", "\_id": "5nrwzXAB8skHIGdYpzM4", "\_version": 1, "\_score": null, "\_source": { "@timestamp": "2020-03-12T08:51:04.557Z", "@version":…

---

## [Need help diagnosing slow indexing speed](https://discuss.elastic.co/t/need-help-diagnosing-slow-indexing-speed/223123)

<div class="topic-metadata">

**Author:** [@xenoid](https://discuss.elastic.co/u/xenoid)\
**Replies:** 12\
**Last updated:** [March 12, 2020, 9:22am UTC](https://discuss.elastic.co/t/need-help-diagnosing-slow-indexing-speed/223123 "2020-03-12T09:22:14Z")

</div>

Hi guys! I need some help diagnosing my cluster performance. Indexing is very slow and the whole cluster as well as Kibana is pretty unresponsive. Here is my cluster: We index about 1,5TB or 1.5 bn events every day…

---

## [Script update : NOOP when script does not modify document?](https://discuss.elastic.co/t/script-update-noop-when-script-does-not-modify-document/222724)

<div class="topic-metadata">

**Author:** [@deslauriersp](https://discuss.elastic.co/u/deslauriersp)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 9:59am UTC](https://discuss.elastic.co/t/script-update-noop-when-script-does-not-modify-document/222724 "2020-03-12T09:59:14Z")

</div>

I need to update a large number of documents. Technically this update (should) generate a lot of noops. The script checks a condition on the \_source, and only modify the \_source under certain conditions. I cannot check …

---

## [Master node writes to only one data node use case](https://discuss.elastic.co/t/master-node-writes-to-only-one-data-node-use-case/223061)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 2\
**Last updated:** [March 11, 2020, 9:03am UTC](https://discuss.elastic.co/t/master-node-writes-to-only-one-data-node-use-case/223061 "2020-03-11T09:03:28Z")

</div>

Hi I'm having three nodes one acts as master and two as data nodes. I need to ensure high availability. I want master to write data only to one node, say node A and other node will be only read-only node, node B. But…

---

## [Alerting in ELK 7.6 Basic License](https://discuss.elastic.co/t/alerting-in-elk-7-6-basic-license/223289)

<div class="topic-metadata">

**Author:** [@nityaraj06](https://discuss.elastic.co/u/nityaraj06)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 9:49am UTC](https://discuss.elastic.co/t/alerting-in-elk-7-6-basic-license/223289 "2020-03-12T09:49:53Z")

</div>

Hi, Is there any option of sending alert mails through Kibana 7.6 Basic License. Watcher requires a licensed version and I am not able to find any other way to enable option of sending alert mails. Kindly suggest me on…

---

## [Is it possible to configure 2 Elastic Search Instances and Kibana instance in single machine](https://discuss.elastic.co/t/is-it-possible-to-configure-2-elastic-search-instances-and-kibana-instance-in-single-machine/223266)

<div class="topic-metadata">

**Author:** [@Sandesh\_Reddy](https://discuss.elastic.co/u/Sandesh_Reddy)\
**Replies:** 3\
**Last updated:** [March 12, 2020, 9:27am UTC](https://discuss.elastic.co/t/is-it-possible-to-configure-2-elastic-search-instances-and-kibana-instance-in-single-machine/223266 "2020-03-12T09:27:50Z")

</div>

Is it possible to create 2 elastic search instances and one Kibana instance in a single server with below server configuration? • 56 GB RAM • 64 Bit • 8 vCPUs • Windows Server 2016 Data Center Please refer some docs…

---

## [\_jsonparsefailure with grok in Logstash](https://discuss.elastic.co/t/jsonparsefailure-with-grok-in-logstash/223283)

<div class="topic-metadata">

**Author:** [@michielM](https://discuss.elastic.co/u/michielM)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 9:24am UTC](https://discuss.elastic.co/t/jsonparsefailure-with-grok-in-logstash/223283 "2020-03-12T09:24:30Z")

</div>

Hi, I'm configuring a filter for my log and I am getting a \_jsonparsefailure in my tag, and I have no idea what's causing this. This is the filter I'm using. filter { if "atlassian-jira-perf" in \[tags\] { gro…

---

## [Synonyms filter doesn't work in all modes when indexing](https://discuss.elastic.co/t/synonyms-filter-doesnt-work-in-all-modes-when-indexing/223071)

<div class="topic-metadata">

**Author:** [@yohanesss](https://discuss.elastic.co/u/yohanesss)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 9:21am UTC](https://discuss.elastic.co/t/synonyms-filter-doesnt-work-in-all-modes-when-indexing/223071 "2020-03-12T09:21:52Z")

</div>

Hi, I have a problem when I tried to index data with a synonyms that read from file, that is an mapper\_exception which giving me error like this: { "error" : { "root\_cause" : \[ { "type" : "mapper\_exception", "reaso…

---

## [Actual Timestamp should be filtered from message context](https://discuss.elastic.co/t/actual-timestamp-should-be-filtered-from-message-context/223258)

<div class="topic-metadata">

**Author:** [@lohit18](https://discuss.elastic.co/u/lohit18)\
**Replies:** 8\
**Last updated:** [March 12, 2020, 8:33am UTC](https://discuss.elastic.co/t/actual-timestamp-should-be-filtered-from-message-context/223258 "2020-03-12T08:33:31Z")

</div>

Dear Team, Kindly help me with this how to do { "\_index": "env-2020.03.09", "\_type": "\_doc", "\_id": "dsfhdsj2e630", "\_version": 1, "\_score": null, "\_source": { "type": "Monitor Logs", "host": "efjf4323", "mess…

---

## [How to create multiple nodes in cluster without running separate command for each node?](https://discuss.elastic.co/t/how-to-create-multiple-nodes-in-cluster-without-running-separate-command-for-each-node/223248)

<div class="topic-metadata">

**Author:** [@cravinder489](https://discuss.elastic.co/u/cravinder489)\
**Replies:** 4\
**Last updated:** [March 12, 2020, 8:18am UTC](https://discuss.elastic.co/t/how-to-create-multiple-nodes-in-cluster-without-running-separate-command-for-each-node/223248 "2020-03-12T08:18:44Z")

</div>

I want to add 5 nodes (on the same machine) to my elasticsearch cluster. I have done that by running separate commands for all five nodes as: elasticsearch -Epath.data=data1 -Epath.logs=log1 elasticsearch -Epath.data=…

---

## [What happens when I increase replica count?](https://discuss.elastic.co/t/what-happens-when-i-increase-replica-count/222854)

<div class="topic-metadata">

**Author:** [@darkknight](https://discuss.elastic.co/u/darkknight)\
**Replies:** 4\
**Last updated:** [March 12, 2020, 7:51am UTC](https://discuss.elastic.co/t/what-happens-when-i-increase-replica-count/222854 "2020-03-12T07:51:54Z")

</div>

Hello, We have a 18 node elastic search cluster. We have a few indices but lets talk about one specific index. It has 60 shards with a replica of 1. There are about 11 million documents and the index size is about 850G…

---

## [Metricbeat modules setup](https://discuss.elastic.co/t/metricbeat-modules-setup/223200)

<div class="topic-metadata">

**Author:** [@northmilo](https://discuss.elastic.co/u/northmilo)\
**Replies:** 7\
**Last updated:** [March 12, 2020, 7:50am UTC](https://discuss.elastic.co/t/metricbeat-modules-setup/223200 "2020-03-12T07:50:07Z")

</div>

Hi, Is there a specific restictions to run elasticsearch and system module at the same time on monitored system. Does one exlclude another? Thanks!

---

## [Filebeat fields error.message disable/remove from Table](https://discuss.elastic.co/t/filebeat-fields-error-message-disable-remove-from-table/223207)

<div class="topic-metadata">

**Author:** [@northmilo](https://discuss.elastic.co/u/northmilo)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 7:44am UTC](https://discuss.elastic.co/t/filebeat-fields-error-message-disable-remove-from-table/223207 "2020-03-12T07:44:25Z")

</div>

Hi, I have modified filebeat index and index template by removeing error.message field but it is still visible in discovery table. Is there any thing else I should do remove this message. I dont use Logstash and dont kn…

---

## [Problem adding nodes to an elasticsearch cluster using SSL, TLS and HTTPS](https://discuss.elastic.co/t/problem-adding-nodes-to-an-elasticsearch-cluster-using-ssl-tls-and-https/223270)

<div class="topic-metadata">

**Author:** [@dferez](https://discuss.elastic.co/u/dferez)\
**Replies:** 0\
**Last updated:** [March 12, 2020, 7:31am UTC](https://discuss.elastic.co/t/problem-adding-nodes-to-an-elasticsearch-cluster-using-ssl-tls-and-https/223270 "2020-03-12T07:31:45Z")

</div>

Hi. I have a cluster under development for testing, and now I have implemented SSL, TLS and HTTPS following this link: "https://www.elastic.co/es/blog/configuring-ssl-tls-and-https-to -secure-elasticsearch-kibana-beats-…

---

## [Logstash....... Error: Could not find or load main class SEARCH](https://discuss.elastic.co/t/logstash-error-could-not-find-or-load-main-class-search/223264)

<div class="topic-metadata">

**Author:** [@usman\_malik](https://discuss.elastic.co/u/usman_malik)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 7:25am UTC](https://discuss.elastic.co/t/logstash-error-could-not-find-or-load-main-class-search/223264 "2020-03-12T07:25:44Z")

</div>

Here i'm facing this error when i'm running my logstash.conf file here is my logstash.conf file:

---

## [Problem with docker-compose and logstash](https://discuss.elastic.co/t/problem-with-docker-compose-and-logstash/222419)

<div class="topic-metadata">

**Author:** [@alxfernando](https://discuss.elastic.co/u/alxfernando)\
**Replies:** 8\
**Last updated:** [March 12, 2020, 7:07am UTC](https://discuss.elastic.co/t/problem-with-docker-compose-and-logstash/222419 "2020-03-12T07:07:10Z")

</div>

This error appears when I run a docker-compose with elasticsearch, kibana and logstash... I don't understand how to solve it logstash | \[2020-03-06T07:57:58,574\]\[ERROR\]\[logstash.agent \] Failed to execu…

---

## [Kibana controls - date field](https://discuss.elastic.co/t/kibana-controls-date-field/223111)

<div class="topic-metadata">

**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 6:16am UTC](https://discuss.elastic.co/t/kibana-controls-date-field/223111 "2020-03-12T06:16:12Z")

</div>

Hi In Kibana visualization, for controls, i want a drop down of created date field. which is not getting displayed. I have a field created\_date with date format. I want a drop down with the created date values, so tha…

---

## [ElasticSearch not indexing all the documents in MongoDB](https://discuss.elastic.co/t/elasticsearch-not-indexing-all-the-documents-in-mongodb/223254)

<div class="topic-metadata">

**Author:** [@pankaj676](https://discuss.elastic.co/u/pankaj676)\
**Replies:** 3\
**Last updated:** [March 12, 2020, 6:13am UTC](https://discuss.elastic.co/t/elasticsearch-not-indexing-all-the-documents-in-mongodb/223254 "2020-03-12T06:13:39Z")

</div>

Hello everyone I am using elastic search with mongo-connector to sync data between MongoDB and Elastic Search. I have 22k documents in MogoDB, but once elastic search indexes 4.5k documents it stops indexing after that. …

---

## [Index not getting rolled over even when policy is applied](https://discuss.elastic.co/t/index-not-getting-rolled-over-even-when-policy-is-applied/223251)

<div class="topic-metadata">

**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\
**Replies:** 0\
**Last updated:** [March 12, 2020, 5:46am UTC](https://discuss.elastic.co/t/index-not-getting-rolled-over-even-when-policy-is-applied/223251 "2020-03-12T05:46:28Z")

</div>

I have applied a policy to my index , by which the index should get rolled over after 20 MB ..(Since i want to check whether it is getting rolled over i have set low storage size) Index is getting created but it is not g…

---

## [Elasticsearch deployment architecture using laptop and a NAS (VM)](https://discuss.elastic.co/t/elasticsearch-deployment-architecture-using-laptop-and-a-nas-vm/223014)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 9\
**Last updated:** [March 12, 2020, 5:04am UTC](https://discuss.elastic.co/t/elasticsearch-deployment-architecture-using-laptop-and-a-nas-vm/223014 "2020-03-12T05:04:11Z")

</div>

Greetings, I want guidance as to following architecture. This is for my studies and is not in enterprise production use. I, however, wish to leverage this as a long term deployment. Hence I am running the architecture t…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1577)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1579)
