# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1581

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1582

---

## [How to enable slow search requests log rotation in ES 5.6](https://discuss.elastic.co/t/how-to-enable-slow-search-requests-log-rotation-in-es-5-6/223081)

<div class="topic-metadata">

**Author:** [@Vishal\_0611](https://discuss.elastic.co/u/Vishal_0611)\
**Replies:** 0\
**Last updated:** [March 11, 2020, 9:22am UTC](https://discuss.elastic.co/t/how-to-enable-slow-search-requests-log-rotation-in-es-5-6/223081 "2020-03-11T09:22:12Z")

</div>

Hi, I am using ES 5.6. I want to enable log rotation of elasticsearch.log, elasticsearch\_index\_search\_slowlog.log and elasticsearch\_index\_indexing\_slowlog.log I learnt that its taken care from log4j2.properties but I …

---

## [ILM policy deletes index after 7 days despite the configuration is set to delete after 30days](https://discuss.elastic.co/t/ilm-policy-deletes-index-after-7-days-despite-the-configuration-is-set-to-delete-after-30days/222440)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 1\
**Last updated:** [March 11, 2020, 10:15am UTC](https://discuss.elastic.co/t/ilm-policy-deletes-index-after-7-days-despite-the-configuration-is-set-to-delete-after-30days/222440 "2020-03-11T10:15:51Z")

</div>

I have a problem with IML policy, it deletes index after 7 days despite the configuration is set to delete after 30days. What I have configured wrong.? (see all detail below) I have created index templa created index …

---

## [Normalise and parse xml encoded tag element correctly](https://discuss.elastic.co/t/normalise-and-parse-xml-encoded-tag-element-correctly/222493)

<div class="topic-metadata">

**Author:** [@guntutur](https://discuss.elastic.co/u/guntutur)\
**Replies:** 2\
**Last updated:** [March 11, 2020, 10:02am UTC](https://discuss.elastic.co/t/normalise-and-parse-xml-encoded-tag-element-correctly/222493 "2020-03-11T10:02:20Z")

</div>

Hi All I'm getting started with using elk stack, i need to configure logstash to be able to parse this logfile correctly, the sample data is something like this : ####\<Mar 6, 2020 10:37:41 PM WIB\> \<\> \<\> \<1583509061697\> …

---

## [\[SOLVED\]\[LOGSTASH-FILTER-RUBY\] Import class 'date'](https://discuss.elastic.co/t/solved-logstash-filter-ruby-import-class-date/223078)

<div class="topic-metadata">

**Author:** [@Bruno1](https://discuss.elastic.co/u/Bruno1)\
**Replies:** 1\
**Last updated:** [March 11, 2020, 9:41am UTC](https://discuss.elastic.co/t/solved-logstash-filter-ruby-import-class-date/223078 "2020-03-11T09:41:08Z")

</div>

Hello I have the following error when I try to import 'date' library on ruby logstash filter. \[2020-03-11T09:09:01,916\]\[ERROR\]\[logstash.filters.ruby \]\[main\] Ruby exception occurred: cannot load Java class date My …

---

## [Netflow to Cloud Service](https://discuss.elastic.co/t/netflow-to-cloud-service/221352)

<div class="topic-metadata">

**Author:** [@anggara88](https://discuss.elastic.co/u/anggara88)\
**Replies:** 5\
**Last updated:** [March 11, 2020, 9:27am UTC](https://discuss.elastic.co/t/netflow-to-cloud-service/221352 "2020-03-11T09:27:39Z")

</div>

Hello good people, can you tell me, how to send my netflow data to elasticsearch cloud service ? in my local service, I use elastiflow to get netflow data is there a documentation to send elastiflow to cloud service ? …

---

## [Parse array of json having json and array in it](https://discuss.elastic.co/t/parse-array-of-json-having-json-and-array-in-it/222936)

<div class="topic-metadata">

**Author:** [@sandy1139](https://discuss.elastic.co/u/sandy1139)\
**Replies:** 1\
**Last updated:** [March 10, 2020, 2:20pm UTC](https://discuss.elastic.co/t/parse-array-of-json-having-json-and-array-in-it/222936 "2020-03-10T14:20:00Z")

</div>

I have the following message which is JSON Array. It has nested JSON object and an Array within, how would I parse this.

---

## [How to center or focus a visualization graph in the lines showed](https://discuss.elastic.co/t/how-to-center-or-focus-a-visualization-graph-in-the-lines-showed/223009)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 1\
**Last updated:** [March 11, 2020, 9:01am UTC](https://discuss.elastic.co/t/how-to-center-or-focus-a-visualization-graph-in-the-lines-showed/223009 "2020-03-11T09:01:31Z")

</div>

Hi, I have this kind of visualization and I like to center or focus the graph in the lines, so maybe show the graph between 60 and 100 in the Y axis, how can I do this?

---

## [Nested ES query](https://discuss.elastic.co/t/nested-es-query/222865)

<div class="topic-metadata">

**Author:** [@vaibhav8600](https://discuss.elastic.co/u/vaibhav8600)\
**Replies:** 1\
**Last updated:** [March 11, 2020, 9:01am UTC](https://discuss.elastic.co/t/nested-es-query/222865 "2020-03-11T09:01:28Z")

</div>

Hi There, We are able to search in nested object but unable to retrieve it. I want to get the hit inner objects . Can you please help me to get it ?

---

## [Last\_run\_metadata\_path](https://discuss.elastic.co/t/last-run-metadata-path/223075)

<div class="topic-metadata">

**Author:** [@chelseia](https://discuss.elastic.co/u/chelseia)\
**Replies:** 0\
**Last updated:** [March 11, 2020, 8:59am UTC](https://discuss.elastic.co/t/last-run-metadata-path/223075 "2020-03-11T08:59:16Z")

</div>

how to fetch the last\_run\_metadata\_path for logstash configuration?

---

## [Setting advanced settings - env? kibana.yml? curl?](https://discuss.elastic.co/t/setting-advanced-settings-env-kibana-yml-curl/223023)

<div class="topic-metadata">

**Author:** [@Supermathie](https://discuss.elastic.co/u/Supermathie)\
**Replies:** 2\
**Last updated:** [March 11, 2020, 8:54am UTC](https://discuss.elastic.co/t/setting-advanced-settings-env-kibana-yml-curl/223023 "2020-03-11T08:54:34Z")

</div>

Is there a way to specify these settings (especially dateFormat:tz) in either the env or in kibana.yml? Alternatively, is there a way to query for and update these settings via curl? Can you provide an example of the c…

---

## [Delete old elasticsearch indexes (TLS, auth enabled for elasticsearch) using curator](https://discuss.elastic.co/t/delete-old-elasticsearch-indexes-tls-auth-enabled-for-elasticsearch-using-curator/223069)

<div class="topic-metadata">

**Author:** [@naveenspen](https://discuss.elastic.co/u/naveenspen)\
**Replies:** 0\
**Last updated:** [March 11, 2020, 8:19am UTC](https://discuss.elastic.co/t/delete-old-elasticsearch-indexes-tls-auth-enabled-for-elasticsearch-using-curator/223069 "2020-03-11T08:19:36Z")

</div>

I have daily indices (created through elasticsearch), Elasticsearch is running with basic xpack configuration (TLS certificate, authentication, and https ) I'm Trying to delete 'systemlog-' indices once in 2 days. Bel…

---

## [Elasticsearch only works on 127.0.0.1?](https://discuss.elastic.co/t/elasticsearch-only-works-on-127-0-0-1/223038)

<div class="topic-metadata">

**Author:** [@edvrfn](https://discuss.elastic.co/u/edvrfn)\
**Replies:** 2\
**Last updated:** [March 11, 2020, 8:13am UTC](https://discuss.elastic.co/t/elasticsearch-only-works-on-127-0-0-1/223038 "2020-03-11T08:13:11Z")

</div>

I get error when trying to run start elastic search from interface IP 192.168.1.10. Error i get is Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticse…

---

## [Parent/Child Aggregation ordering problem ES 7.6](https://discuss.elastic.co/t/parent-child-aggregation-ordering-problem-es-7-6/223066)

<div class="topic-metadata">

**Author:** [@dizzzyroma](https://discuss.elastic.co/u/dizzzyroma)\
**Replies:** 0\
**Last updated:** [March 11, 2020, 8:12am UTC](https://discuss.elastic.co/t/parent-child-aggregation-ordering-problem-es-7-6/223066 "2020-03-11T08:12:03Z")

</div>

Hi All, We try to migrate to ES 7.X from ES 5.3 and found next problem: In ES 7.6.1 Aggregation ordering path not working when we try to aggregate parent/child documents In ES 5.3 Its working fine ES 7.6.1 Example: P…

---

## [Can't rename a field to user.name](https://discuss.elastic.co/t/cant-rename-a-field-to-user-name/222395)

<div class="topic-metadata">

**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\
**Replies:** 5\
**Last updated:** [March 11, 2020, 7:52am UTC](https://discuss.elastic.co/t/cant-rename-a-field-to-user-name/222395 "2020-03-11T07:52:05Z")

</div>

I'm trying to rename user fields from several different sources to user.name to match ECS but none will work. If I leave it as user then the field shows up but when I try to rename it to user.name, I see all the other fi…

---

## [Problem java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/problem-java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-systemexit-exit/223051)

<div class="topic-metadata">

**Author:** [@Tnahsoe](https://discuss.elastic.co/u/Tnahsoe)\
**Replies:** 1\
**Last updated:** [March 11, 2020, 6:42am UTC](https://discuss.elastic.co/t/problem-java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-systemexit-exit/223051 "2020-03-11T06:42:55Z")

</div>

When I try to start logstash using /usr/share/logstash$ bin/logstash -e 'input{stdin{}}output{stdout{}}' it gives OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will like…

---

## [7.5.1 - how to find out the user that created a specific dashboard?](https://discuss.elastic.co/t/7-5-1-how-to-find-out-the-user-that-created-a-specific-dashboard/222689)

<div class="topic-metadata">

**Author:** [@Aviad\_Amar](https://discuss.elastic.co/u/Aviad_Amar)\
**Replies:** 1\
**Last updated:** [March 11, 2020, 6:06am UTC](https://discuss.elastic.co/t/7-5-1-how-to-find-out-the-user-that-created-a-specific-dashboard/222689 "2020-03-11T06:06:17Z")

</div>

I could not find any information about it.

---

## [Elasticsearch OIDC connection through Proxy](https://discuss.elastic.co/t/elasticsearch-oidc-connection-through-proxy/223018)

<div class="topic-metadata">

**Author:** [@Chris\_Samo](https://discuss.elastic.co/u/Chris_Samo)\
**Replies:** 3\
**Last updated:** [March 11, 2020, 6:01am UTC](https://discuss.elastic.co/t/elasticsearch-oidc-connection-through-proxy/223018 "2020-03-11T06:01:53Z")

</div>

We use an OpenID Connect provider for Authentication & Authorisation in Elasticsearch, however have been tasked with locking down egress from our cluster (we're running in Kubernetes using Docker images). We've implemen…

---

## [Heartbeat Uptime](https://discuss.elastic.co/t/heartbeat-uptime/222882)

<div class="topic-metadata">

**Author:** [@aviman](https://discuss.elastic.co/u/aviman)\
**Replies:** 1\
**Last updated:** [March 11, 2020, 5:45am UTC](https://discuss.elastic.co/t/heartbeat-uptime/222882 "2020-03-11T05:45:53Z")

</div>

Hi, My Heartbeat data is available in Discover section. But Uptime is showing - Uptime Index not found. We tried to changed the index of Heartbeat from default to xyz How can we get back the Uptime Thanks & Regards, …

---

## [ELK version 7.5](https://discuss.elastic.co/t/elk-version-7-5/220545)

<div class="topic-metadata">

**Author:** [@hsdevaraja](https://discuss.elastic.co/u/hsdevaraja)\
**Replies:** 3\
**Last updated:** [March 11, 2020, 5:19am UTC](https://discuss.elastic.co/t/elk-version-7-5/220545 "2020-03-11T05:19:02Z")

</div>

Hi, I installed ELK stack 7.5 basic license but in Kiban UI left side menu \> After clicking Dashboard it is not giving option of Create Dashboard.Also I tried creating Index Pattern but its not saving Index pattern but…

---

## [Kibana Discover Tab not loading](https://discuss.elastic.co/t/kibana-discover-tab-not-loading/221361)

<div class="topic-metadata">

**Author:** [@sumuks](https://discuss.elastic.co/u/sumuks)\
**Replies:** 1\
**Last updated:** [March 11, 2020, 5:17am UTC](https://discuss.elastic.co/t/kibana-discover-tab-not-loading/221361 "2020-03-11T05:17:13Z")

</div>

I am using bitnami virtual machine for elk stack on my wondows desktop. I have installed filebeat and it's visible in the index patterns. But I can't load my discover tab to check the logs I've uploaded. Every time I try…

---

## [Attachment Indexing search](https://discuss.elastic.co/t/attachment-indexing-search/222873)

<div class="topic-metadata">

**Author:** [@vaibhav8600](https://discuss.elastic.co/u/vaibhav8600)\
**Replies:** 0\
**Last updated:** [March 10, 2020, 7:06am UTC](https://discuss.elastic.co/t/attachment-indexing-search/222873 "2020-03-10T07:06:37Z")

</div>

i have indexed attachments using ingest-attachment processor and in search i want only mail nested Attachment but when i'm trying to search on attachment content it returns complete Document /--------------------------…

---

## [Multi-term synonyms: How can this be used in practice?](https://discuss.elastic.co/t/multi-term-synonyms-how-can-this-be-used-in-practice/219423)

<div class="topic-metadata">

**Author:** [@aj\_potc](https://discuss.elastic.co/u/aj_potc)\
**Replies:** 5\
**Last updated:** [March 11, 2020, 3:17am UTC](https://discuss.elastic.co/t/multi-term-synonyms-how-can-this-be-used-in-practice/219423 "2020-03-11T03:17:21Z")

</div>

I'm evaluating Elasticsearch 7.6 and its handling of multi-term (multi-word) synonyms, and I'm having a lot of trouble figuring out how to make practical use of it. In short: How can I take a user's query and present it…

---

## [Painlessでの値の取得方法について](https://discuss.elastic.co/t/painless/223034)

<div class="topic-metadata">

**Author:** [@harue](https://discuss.elastic.co/u/harue)\
**Replies:** 2\
**Last updated:** [March 11, 2020, 2:50am UTC](https://discuss.elastic.co/t/painless/223034 "2020-03-11T02:50:02Z")

</div>

お世話になります。 以下ご質問の続きとなりますが、 requestの値について①②のパターンがあり 以下処理を実施したいです。 ①"request=http://aaa.com/bbb/ccc request=http://ddd.com/"(配列) または ②"request=http://aaa.com/bbb/ccc"(String型) 「http:// XXX」の XXX を抽出 ↓ XXX の値の前後に"\*…

---

## [Logstash Records are getting skipped from filter](https://discuss.elastic.co/t/logstash-records-are-getting-skipped-from-filter/223037)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 0\
**Last updated:** [March 11, 2020, 2:45am UTC](https://discuss.elastic.co/t/logstash-records-are-getting-skipped-from-filter/223037 "2020-03-11T02:45:26Z")

</div>

Hello Team, We are using combination grok, ruby ,date filters in our Logstash pipeline. and the input load is is around 20k records per minute. We observed that sometimes the data which is not present in that record …

---

## [Elastic Mapsのデータソース追加について](https://discuss.elastic.co/t/elastic-maps/222887)

<div class="topic-metadata">

**Author:** [@111142](https://discuss.elastic.co/u/111142)\
**Replies:** 4\
**Last updated:** [March 11, 2020, 1:45am UTC](https://discuss.elastic.co/t/elastic-maps/222887 "2020-03-11T01:45:54Z")

</div>

初歩的な質問で申し訳ありませんが、現在、Elastic Mapsを試そうとしているのですが、 レイヤー追加→データソースの選択→ドキュメントをすると、標準設定？されているインデックスの一覧のみ出てきて、 Elasticserachに投入しているインデックスが選択できません。 ここに追加するにはどうすればいいのでしょうか？

---

## [Data migration from OSS version to Basic version](https://discuss.elastic.co/t/data-migration-from-oss-version-to-basic-version/223019)

<div class="topic-metadata">

**Author:** [@somebody](https://discuss.elastic.co/u/somebody)\
**Replies:** 4\
**Last updated:** [March 10, 2020, 11:31pm UTC](https://discuss.elastic.co/t/data-migration-from-oss-version-to-basic-version/223019 "2020-03-10T23:31:34Z")

</div>

Hi, I have a requirement to migrate data from OSS version to Basic version. Can I transfer the data from 7.2.x OSS version to 7.5.x Basic version using reindex from remote API Ref: https://www.elastic.co/guide/en/elas…

---

## [How to run ES in a separate namespace from clients?](https://discuss.elastic.co/t/how-to-run-es-in-a-separate-namespace-from-clients/222802)

<div class="topic-metadata">

**Author:** [@tew](https://discuss.elastic.co/u/tew)\
**Replies:** 2\
**Last updated:** [March 10, 2020, 10:37pm UTC](https://discuss.elastic.co/t/how-to-run-es-in-a-separate-namespace-from-clients/222802 "2020-03-10T22:37:09Z")

</div>

I want to put my elasticsearch pods in a separate namespace but I'm not sure how to accomplish this. I have clients running in 2 other namespaces that will need to access the elastic cluster. The secret containing the…

---

## [Date property is not recognised](https://discuss.elastic.co/t/date-property-is-not-recognised/220738)

<div class="topic-metadata">

**Author:** [@KibanaUser2](https://discuss.elastic.co/u/KibanaUser2)\
**Replies:** 7\
**Last updated:** [March 10, 2020, 10:08pm UTC](https://discuss.elastic.co/t/date-property-is-not-recognised/220738 "2020-03-10T22:08:32Z")

</div>

I am new to Kibana. I am facing a strange issue. I have an index which has date propety as well as timestamp. When I am trying to extract the date and month from the date property in scripted field , I am getting except…

---

## [SSL wild card certificate using with nodejs and Lambda produce error "unable to verify the first certificate"](https://discuss.elastic.co/t/ssl-wild-card-certificate-using-with-nodejs-and-lambda-produce-error-unable-to-verify-the-first-certificate/222986)

<div class="topic-metadata">

**Author:** [@Sanjay1](https://discuss.elastic.co/u/Sanjay1)\
**Replies:** 0\
**Last updated:** [March 10, 2020, 5:15pm UTC](https://discuss.elastic.co/t/ssl-wild-card-certificate-using-with-nodejs-and-lambda-produce-error-unable-to-verify-the-first-certificate/222986 "2020-03-10T17:15:43Z")

</div>

We are using the wild card certificate. Hence CRT for node as well as CA is same. The elasticsearch.yml file is as follows.... cluster.name: cluster\_name node.name: i0861956fda57c7461 path.data: "/data/elasticsearch" …

---

## [Generate UUID of the String(field) in logstash](https://discuss.elastic.co/t/generate-uuid-of-the-string-field-in-logstash/222943)

<div class="topic-metadata">

**Author:** [@Pink11](https://discuss.elastic.co/u/Pink11)\
**Replies:** 4\
**Last updated:** [March 10, 2020, 9:43pm UTC](https://discuss.elastic.co/t/generate-uuid-of-the-string-field-in-logstash/222943 "2020-03-10T21:43:42Z")

</div>

want to generate consistent UUID(Just like MD5) of the String(field) in logstash. Tried Using fingerprint with UUID but it gives random UUID.

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1580)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1582)
