# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1582 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1583 --- ## [Two Elasticsearch clusters in sync](https://discuss.elastic.co/t/two-elasticsearch-clusters-in-sync/222521)
**Author:** [@Bharath\_Italapur](https://discuss.elastic.co/u/Bharath_Italapur)\ **Replies:** 2\ **Last updated:** [March 10, 2020, 8:56pm UTC](https://discuss.elastic.co/t/two-elasticsearch-clusters-in-sync/222521 "2020-03-10T20:56:06Z")
Hi, Thank you in advance. Is there a way to keep two elasticsearch clusters in sync? I have a 5.6 elasticsearch cluster which is getting data inserted through spark and I have another 7.6 elasticsearch cluster that… --- ## [Can't resolve ui/registry/vis\_types or ui/vis/vis\_factory](https://discuss.elastic.co/t/cant-resolve-ui-registry-vis-types-or-ui-vis-vis-factory/222332)
**Author:** [@Cruisin1966](https://discuss.elastic.co/u/Cruisin1966)\ **Replies:** 1\ **Last updated:** [March 10, 2020, 8:34pm UTC](https://discuss.elastic.co/t/cant-resolve-ui-registry-vis-types-or-ui-vis-vis-factory/222332 "2020-03-10T20:34:53Z")
Kibana 7.6 Documentation suggests these two sources should be available: https://www.elastic.co/guide/en/kibana/current/development-visualization-factory.html However, looking at the structure in kibana.git at 7.6, the… --- ## [Date format Feb 21, 2020 7:52:15 PM, in logstash](https://discuss.elastic.co/t/date-format-feb-21-2020-715-pm-in-logstash/222945)
**Author:** [@Pink11](https://discuss.elastic.co/u/Pink11)\ **Replies:** 2\ **Last updated:** [March 10, 2020, 8:15pm UTC](https://discuss.elastic.co/t/date-format-feb-21-2020-715-pm-in-logstash/222945 "2020-03-10T20:15:15Z")
want to format date in "Feb 21, 2020 7:52:15 PM", format What I have "zonedTime": "2020-02-21T19:52:15.001Z", and UNIX epoch as input --- ## [Elasticsearch server is not starting on Ramdisk (imdisk)](https://discuss.elastic.co/t/elasticsearch-server-is-not-starting-on-ramdisk-imdisk/222167)
**Author:** [@MadhukarA](https://discuss.elastic.co/u/MadhukarA)\ **Replies:** 6\ **Last updated:** [March 10, 2020, 8:13pm UTC](https://discuss.elastic.co/t/elasticsearch-server-is-not-starting-on-ramdisk-imdisk/222167 "2020-03-10T20:13:49Z")
I am unable to start Elasticsearch when path.data was set to a location on Ramdisk (Imdisk). It throws the following error: elasticsearch-7.6.0-windows-x86\_64\\elasticsearch-7.6.0\\bin\>.\\elasticsearch.bat OpenJDK 64-B… --- ## [Monitoring difference between full-stack and multi-stack](https://discuss.elastic.co/t/monitoring-difference-between-full-stack-and-multi-stack/222999)
**Author:** [@sentient](https://discuss.elastic.co/u/sentient)\ **Replies:** 2\ **Last updated:** [March 10, 2020, 8:09pm UTC](https://discuss.elastic.co/t/monitoring-difference-between-full-stack-and-multi-stack/222999 "2020-03-10T20:09:18Z")
From https://www.elastic.co/subscriptions Full stack monitoring is available in the basic subscription. multi stack monitoring is NOT available. But what is the difference between 'full stack' and 'multi stack' --- ## [How to change background of dashboard](https://discuss.elastic.co/t/how-to-change-background-of-dashboard/222851)
**Author:** [@Jiayue\_Yang](https://discuss.elastic.co/u/Jiayue_Yang)\ **Replies:** 4\ **Last updated:** [March 10, 2020, 7:31pm UTC](https://discuss.elastic.co/t/how-to-change-background-of-dashboard/222851 "2020-03-10T19:31:07Z")
Hi, Team Is there any way to change the background of the dashboard in Kibana GUI? I would like to change the default white one to a static map. Any solution? I saw a similar post, the solution is to change the source … --- ## [COLLECTd--\>LOGSTASH---\>GRAPHITE](https://discuss.elastic.co/t/collectd-logstash-graphite/223004)
**Author:** [@Narayana](https://discuss.elastic.co/u/Narayana)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 7:11pm UTC](https://discuss.elastic.co/t/collectd-logstash-graphite/223004 "2020-03-10T19:11:34Z")
Dear All, Can you help me with logstash configuration to send the data to graphite. I have successfully send the metrics from collectd to graphite with out any issues but the same is not possible when i trying with LOG… --- ## [Basic logstash as restful endpoint example](https://discuss.elastic.co/t/basic-logstash-as-restful-endpoint-example/222998)
**Author:** [@smugsmugsmug](https://discuss.elastic.co/u/smugsmugsmug)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 6:42pm UTC](https://discuss.elastic.co/t/basic-logstash-as-restful-endpoint-example/222998 "2020-03-10T18:42:14Z")
I'm trying to set up logstash to be a simple restful endpoint that forwards log messages to indexes within my elastic search instance. I wasn't really able to get a clear idea of how to do this from reading the "getting … --- ## [Array of nested json objects](https://discuss.elastic.co/t/array-of-nested-json-objects/222363)
**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\ **Replies:** 6\ **Last updated:** [March 10, 2020, 6:25pm UTC](https://discuss.elastic.co/t/array-of-nested-json-objects/222363 "2020-03-10T18:25:25Z")
Hope this is not a repeat. I have a document like following in json format. { "request\_body": "", "bytes\_sent": 16, "response\_body": "", "response\_http\_headers": \[ { "Content-Type": "application/… --- ## [Set esConfig](https://discuss.elastic.co/t/set-esconfig/222995)
**Author:** [@Carlos2020](https://discuss.elastic.co/u/Carlos2020)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 6:01pm UTC](https://discuss.elastic.co/t/set-esconfig/222995 "2020-03-10T18:01:22Z")
What is the correct to set esConfig parameter ? // helm install elastic/elasticsearch --namespace default --set imageTag=7.6.1 --set replicas=1 --set minimumMasterNodes=1 --set resources.requests.memory=2Gi --set v… --- ## [Query against REST API of a third party device](https://discuss.elastic.co/t/query-against-rest-api-of-a-third-party-device/222979)
**Author:** [@rudiz](https://discuss.elastic.co/u/rudiz)\ **Replies:** 1\ **Last updated:** [March 10, 2020, 5:14pm UTC](https://discuss.elastic.co/t/query-against-rest-api-of-a-third-party-device/222979 "2020-03-10T17:14:18Z")
I'm trying to query a storage device via RESTful API. I have to send a POST against the endpoint /auth with User and Password in the header to get a token. This token remains valid for 2hours or 30minutes if no activity.… --- ## [Remove first and last character of all fields](https://discuss.elastic.co/t/remove-first-and-last-character-of-all-fields/222897)
**Author:** [@vertigo888](https://discuss.elastic.co/u/vertigo888)\ **Replies:** 4\ **Last updated:** [March 10, 2020, 5:07pm UTC](https://discuss.elastic.co/t/remove-first-and-last-character-of-all-fields/222897 "2020-03-10T17:07:41Z")
Hi, I would like to replace the first and last character of all values in all fields ingested into my index via logstash? Please could you let me know how this is possible? I understand this may be a ruby task but plea… --- ## [Testing Logstash configurations as systemd service](https://discuss.elastic.co/t/testing-logstash-configurations-as-systemd-service/222982)
**Author:** [@rudiz](https://discuss.elastic.co/u/rudiz)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 4:56pm UTC](https://discuss.elastic.co/t/testing-logstash-configurations-as-systemd-service/222982 "2020-03-10T16:56:31Z")
I like the comfort of all components running as systemd service but for Logstash testing it is difficult as the stdout output is not directed to my terminal and sometimes hard to find in messages. For testing only: what… --- ## [Elasticsearch with instance store on k8](https://discuss.elastic.co/t/elasticsearch-with-instance-store-on-k8/222715)
**Author:** [@deepak\_deore](https://discuss.elastic.co/u/deepak_deore)\ **Replies:** 3\ **Last updated:** [March 10, 2020, 4:46pm UTC](https://discuss.elastic.co/t/elasticsearch-with-instance-store-on-k8/222715 "2020-03-10T16:46:01Z")
currently I have 5 dedicated k8 worker nodes for ES cluster, each node is 8cpu/ 32G memory. 5 ES pods are deployed through ECK operator on k8, all ES pods have all roles (no separate master, data etc.) eck is excellent … --- ## [Parse MSSQL logs from event log](https://discuss.elastic.co/t/parse-mssql-logs-from-event-log/222980)
**Author:** [@sref](https://discuss.elastic.co/u/sref)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 4:42pm UTC](https://discuss.elastic.co/t/parse-mssql-logs-from-event-log/222980 "2020-03-10T16:42:33Z")
Hi, Im trying to parse MSSQL logs from Windows event log, into Elastic stack. Currently MSSQL logs to event viewer, and i use Winlogbeat 7,6 and Elastic stack 7,6 also. (installed under 1 month ago) indent preformatte… --- ## [F5 Telemetry Streaming using Logstash](https://discuss.elastic.co/t/f5-telemetry-streaming-using-logstash/222970)
**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 4:03pm UTC](https://discuss.elastic.co/t/f5-telemetry-streaming-using-logstash/222970 "2020-03-10T16:03:50Z")
Hi has anyone successfully loaded the bigIP Telemetry Streaming to ES using Logstash. I have tried the following pipeline config: input { tcp { port =\> 5053 codec =\> "plain" } } filter { if \[message… --- ## [Copy different field with nanoseconds to elasticsearch/kibana @timestamp field](https://discuss.elastic.co/t/copy-different-field-with-nanoseconds-to-elasticsearch-kibana-timestamp-field/222806)
**Author:** [@savvy](https://discuss.elastic.co/u/savvy)\ **Replies:** 4\ **Last updated:** [March 10, 2020, 3:55pm UTC](https://discuss.elastic.co/t/copy-different-field-with-nanoseconds-to-elasticsearch-kibana-timestamp-field/222806 "2020-03-10T15:55:47Z")
Just posting that here, seems like logstash related. Can someone guide me here? --- ## [Max shard size for a very large single index](https://discuss.elastic.co/t/max-shard-size-for-a-very-large-single-index/222751)
**Author:** [@jkhere](https://discuss.elastic.co/u/jkhere)\ **Replies:** 4\ **Last updated:** [March 10, 2020, 3:44pm UTC](https://discuss.elastic.co/t/max-shard-size-for-a-very-large-single-index/222751 "2020-03-10T15:44:42Z")
I am planning to develop an elasticsearch cluster to stand up a very massive index. The main usecase is to index documents and search using keywords. We estimate the size of the index to be 16TB. So if I keep single sha… --- ## [Fixed date-time for all record](https://discuss.elastic.co/t/fixed-date-time-for-all-record/222808)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [March 10, 2020, 3:30pm UTC](https://discuss.elastic.co/t/fixed-date-time-for-all-record/222808 "2020-03-10T15:30:30Z")
I want to start ingesting record at lets say 10:05 and keep same timestamp to all the record. i.e first record come in at 2020-03-08T10:05 and last record at 2020-03-08T10:10 but I want same time for all record. it can… --- ## [Unable to create logstash index in Kibana](https://discuss.elastic.co/t/unable-to-create-logstash-index-in-kibana/222790)
**Author:** [@gmorales](https://discuss.elastic.co/u/gmorales)\ **Replies:** 6\ **Last updated:** [March 10, 2020, 3:17pm UTC](https://discuss.elastic.co/t/unable-to-create-logstash-index-in-kibana/222790 "2020-03-10T15:17:02Z")
I am a newbie, I inherited an older elasticsearch, kibana, logstash, filebeat server and it is currently working fine, however I wanted to run the latest and went ahead and installed learticsearch, kibana, logstash, file… --- ## [Error with .csv parsing from Nessus scanner to Logstash / CSV::MalformedCSVError: Illegal quoting in line 1](https://discuss.elastic.co/t/error-with-csv-parsing-from-nessus-scanner-to-logstash-csv-illegal-quoting-in-line-1/222957)
**Author:** [@denisatanasov](https://discuss.elastic.co/u/denisatanasov)\ **Replies:** 2\ **Last updated:** [March 10, 2020, 3:08pm UTC](https://discuss.elastic.co/t/error-with-csv-parsing-from-nessus-scanner-to-logstash-csv-illegal-quoting-in-line-1/222957 "2020-03-10T15:08:49Z")
Hello All, I am trying to index into Logstash, a .csv (comma delimited) file generated from my Nessus scanner. However, I am receiving error related most probably to parsing problems, because in the Excel file, there ar… --- ## [One field free text query on Elasticsearch supporting dates](https://discuss.elastic.co/t/one-field-free-text-query-on-elasticsearch-supporting-dates/222946)
**Author:** [@styks90](https://discuss.elastic.co/u/styks90)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 1:50pm UTC](https://discuss.elastic.co/t/one-field-free-text-query-on-elasticsearch-supporting-dates/222946 "2020-03-10T13:50:22Z")
I originally asked this question on StackOverflow, but haven't found a satisfactory answer yet: Suppose I have an index with multiple fields of type text and one or more of type date (of some format, say yyyy/MM/dd … --- ## [HELP: Grouping and combine fields](https://discuss.elastic.co/t/help-grouping-and-combine-fields/222129)
**Author:** [@bharatchhajed](https://discuss.elastic.co/u/bharatchhajed)\ **Replies:** 7\ **Last updated:** [March 10, 2020, 2:19pm UTC](https://discuss.elastic.co/t/help-grouping-and-combine-fields/222129 "2020-03-10T14:19:18Z")
Hi All, I am bit new to kibana. Till now using fields i was able to bulid my visualization and dashboard. But now my requirement is to group fields and show it in PIE chart which i feel it needs some advance query know… --- ## [Geodistance sort throws Elasticsearch exception \[type=parsing\_exception, reason=\[\_geo\_distance\] does not support \[ignore\_unmapped\]\] Elastic search version 6.3.0](https://discuss.elastic.co/t/geodistance-sort-throws-elasticsearch-exception-type-parsing-exception-reason-geo-distance-does-not-support-ignore-unmapped-elastic-search-version-6-3-0/222930)
**Author:** [@jsunish](https://discuss.elastic.co/u/jsunish)\ **Replies:** 3\ **Last updated:** [March 10, 2020, 2:14pm UTC](https://discuss.elastic.co/t/geodistance-sort-throws-elasticsearch-exception-type-parsing-exception-reason-geo-distance-does-not-support-ignore-unmapped-elastic-search-version-6-3-0/222930 "2020-03-10T14:14:38Z")
I am searching the index object based on the lat long (geo\_point type) for a distance of 999km and I am sorting it on the ascending order. But I am getting the exception Elasticsearch exception \[type=parsing\_exception, … --- ## [Elastic search INDEXING taking too long (days !)](https://discuss.elastic.co/t/elastic-search-indexing-taking-too-long-days/222953)
**Author:** [@MisterBass](https://discuss.elastic.co/u/MisterBass)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 2:14pm UTC](https://discuss.elastic.co/t/elastic-search-indexing-taking-too-long-days/222953 "2020-03-10T14:14:08Z")
I have a es cluster with 3 nodes (2 master& data, 1 master only) 5 shards of 1.2Gb, 5 replicas.\`\` I trigered the a redindexation of my content since 5 days, arroubnd 1million documents are indexed for now and the ind… --- ## [How to index s3 files and transfer that index to my ES server](https://discuss.elastic.co/t/how-to-index-s3-files-and-transfer-that-index-to-my-es-server/220930)
**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\ **Replies:** 3\ **Last updated:** [March 10, 2020, 2:12pm UTC](https://discuss.elastic.co/t/how-to-index-s3-files-and-transfer-that-index-to-my-es-server/220930 "2020-03-10T14:12:14Z")
Hi, I have been indexing files from different servers using FSCrawler and storing them in my Elastic search server. But now I have files in s3 bucket. Could anyone please guide me how to index files that are in S3 and … --- ## [Not able to login after xpack enabled](https://discuss.elastic.co/t/not-able-to-login-after-xpack-enabled/222701)
**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\ **Replies:** 8\ **Last updated:** [March 10, 2020, 1:43pm UTC](https://discuss.elastic.co/t/not-able-to-login-after-xpack-enabled/222701 "2020-03-10T13:43:39Z")
Hi i am running 7.6.1 ES and kibana in Ubuntu server . once i enabled the xpack security in ES configuration xpack.security.enabled: true discovery.type: single-node i used following command to generate pwd bin… --- ## [Kibana discovery display](https://discuss.elastic.co/t/kibana-discovery-display/220967)
**Author:** [@tennaen](https://discuss.elastic.co/u/tennaen)\ **Replies:** 4\ **Last updated:** [March 10, 2020, 1:34pm UTC](https://discuss.elastic.co/t/kibana-discovery-display/220967 "2020-03-10T13:34:20Z")
Hello, i have a question about display in Kibana discovery, json section. Can someone tell me why date fields are displayed twice in json? In example i have a field event\_date (timezone is UTC +1). event.event\_date 20… --- ## [Multi token exact matching](https://discuss.elastic.co/t/multi-token-exact-matching/222783)
**Author:** [@borgmajr](https://discuss.elastic.co/u/borgmajr)\ **Replies:** 1\ **Last updated:** [March 10, 2020, 1:27pm UTC](https://discuss.elastic.co/t/multi-token-exact-matching/222783 "2020-03-10T13:27:52Z")
I am trying to search on a field that has entries with multiple tokens like this: doc1 { biz\_name: biz } doc2 { biz\_name: biz inc } doc3 { biz\_name: big biz inc } I want to search on field "biz\_name" with "biz inc" a… --- ## [Which is more efficient, to reindex the raw .ndjson or use the \_reindex api](https://discuss.elastic.co/t/which-is-more-efficient-to-reindex-the-raw-ndjson-or-use-the-reindex-api/222911)
**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\ **Replies:** 1\ **Last updated:** [March 10, 2020, 1:19pm UTC](https://discuss.elastic.co/t/which-is-more-efficient-to-reindex-the-raw-ndjson-or-use-the-reindex-api/222911 "2020-03-10T13:19:26Z")
Hello, Currently we backup our daily indexes to AWS S3 as raw .ndjosn format and I wanted an opinion whether it would be better to re-ingest these files into a monthly index or use the \_reindex API to this. So my optio… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1581) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1583)