# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1584 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1585 --- ## [Ingestnode Grokにてarraylistの処理について](https://discuss.elastic.co/t/ingestnode-grok-arraylist/222390)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 4\ **Last updated:** [March 10, 2020, 5:56am UTC](https://discuss.elastic.co/t/ingestnode-grok-arraylist/222390 "2020-03-10T05:56:48Z")
お世話になります。 ingest nodeのGrok processorにて、配列の値を処理したいのですがエラーになります。 POST /\_ingest/pipeline/\_simulate { "pipeline": { "processors": \[ { "kv": { "field": "message", "field\_split": """\\s… --- ## [How to transfer logs from different VM's (Digitalocen) to a single Logstash using Filebeat](https://discuss.elastic.co/t/how-to-transfer-logs-from-different-vms-digitalocen-to-a-single-logstash-using-filebeat/222847)
**Author:** [@Pathshala\_Gopi](https://discuss.elastic.co/u/Pathshala_Gopi)\ **Replies:** 4\ **Last updated:** [March 10, 2020, 5:40am UTC](https://discuss.elastic.co/t/how-to-transfer-logs-from-different-vms-digitalocen-to-a-single-logstash-using-filebeat/222847 "2020-03-10T05:40:28Z")
Hi all, From Last two days i got stuck in this task.Task is there are multiple Ubuntu machines are running on cloud (DigitalOcen), I have to take the logs of those machines and ship those logs to Logstash where complete… --- ## [Component Startup logs missing](https://discuss.elastic.co/t/component-startup-logs-missing/222858)
**Author:** [@devops\_army](https://discuss.elastic.co/u/devops_army)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 5:22am UTC](https://discuss.elastic.co/t/component-startup-logs-missing/222858 "2020-03-10T05:22:31Z")
Hi Team, I am using Elasticsearch, fluentd and kibana in my setup and i have different components (applications) deployed in my cluster . Whenever, my pod restarts or freshly deployed, the start up logs are missing when… --- ## [How to rationalize the index name(s) to query with rollover?](https://discuss.elastic.co/t/how-to-rationalize-the-index-name-s-to-query-with-rollover/222846)
**Author:** [@Newlastic](https://discuss.elastic.co/u/Newlastic)\ **Replies:** 0\ **Last updated:** [March 10, 2020, 3:49am UTC](https://discuss.elastic.co/t/how-to-rationalize-the-index-name-s-to-query-with-rollover/222846 "2020-03-10T03:49:07Z")
Hello, Suppose we have an index that rolls over approximately every day. We retain 100 days of historical indexes, the older ones in colder storage. Is there a method for targeting queries with time range restrictions… --- ## [SavedObjectsClient doesn't return index patterns with their fields](https://discuss.elastic.co/t/savedobjectsclient-doesnt-return-index-patterns-with-their-fields/222527)
**Author:** [@brandtj](https://discuss.elastic.co/u/brandtj)\ **Replies:** 2\ **Last updated:** [March 10, 2020, 3:10am UTC](https://discuss.elastic.co/t/savedobjectsclient-doesnt-return-index-patterns-with-their-fields/222527 "2020-03-10T03:10:32Z")
For some reason this call below will return all the index patterns but only some of them have any fields in them even though the index has fields. What's really interesting is that if I do anything with these indices (l… --- ## [Kibana can't find one master node](https://discuss.elastic.co/t/kibana-cant-find-one-master-node/222604)
**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\ **Replies:** 1\ **Last updated:** [March 10, 2020, 2:35am UTC](https://discuss.elastic.co/t/kibana-cant-find-one-master-node/222604 "2020-03-10T02:35:39Z")
Hi , I managed to configure Kibana but cant find one of 3 master nodes , GET /\_nodes/stats print only 5 instead 6 nodes ... what could be the issue ? Thanks in advance. --- ## [Abnormal index\_writer\_memory,its so high!](https://discuss.elastic.co/t/abnormal-index-writer-memory-its-so-high/222759)
**Author:** [@KellyK313](https://discuss.elastic.co/u/KellyK313)\ **Replies:** 2\ **Last updated:** [March 9, 2020, 11:20pm UTC](https://discuss.elastic.co/t/abnormal-index-writer-memory-its-so-high/222759 "2020-03-09T23:20:59Z")
Our ElasticSearch version is v1.6.2. 31G jvm memory in 156G machine total memory. Recently I found out our node is OOM frequently,then I found an index use "index\_writer\_memory" is so high. It really confuse me,beca… --- ## [Logstash unable to run conf file in background?](https://discuss.elastic.co/t/logstash-unable-to-run-conf-file-in-background/222633)
**Author:** [@kopilim96](https://discuss.elastic.co/u/kopilim96)\ **Replies:** 7\ **Last updated:** [March 10, 2020, 2:11am UTC](https://discuss.elastic.co/t/logstash-unable-to-run-conf-file-in-background/222633 "2020-03-10T02:11:39Z")
Hi there, how can I run the logstash .conf file in background ? I am using Centos 6.9 and I installed logstash with rpm package. file: /etc/logstash/logstash.yml pipeline.id: logstash\_for\_nagios path.config: "/etc/log… --- ## [Overall Average of count returns float value need Integer](https://discuss.elastic.co/t/overall-average-of-count-returns-float-value-need-integer/220271)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 6\ **Last updated:** [March 9, 2020, 11:31pm UTC](https://discuss.elastic.co/t/overall-average-of-count-returns-float-value-need-integer/220271 "2020-03-09T23:31:31Z")
Hi, I created a Kibana visualization (data table) that will give the overall average of the count of the messages split by rows (for the values in status.keyword). I am getting an average value fine and good for the se… --- ## [Boosting results using Function\_Score result unexpected behavior](https://discuss.elastic.co/t/boosting-results-using-function-score-result-unexpected-behavior/222820)
**Author:** [@auduwage](https://discuss.elastic.co/u/auduwage)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 10:51pm UTC](https://discuss.elastic.co/t/boosting-results-using-function-score-result-unexpected-behavior/222820 "2020-03-09T22:51:34Z")
We have 3 stage ranking phase in our search engine. We use BM25 with Distance Decay function and Freshness Decay function as the first phase. Then for the second stage, we use LTR plugin and do a rescoring with a window\_… --- ## [Strings to long to be keyword?](https://discuss.elastic.co/t/strings-to-long-to-be-keyword/222805)
**Author:** [@mwneenan](https://discuss.elastic.co/u/mwneenan)\ **Replies:** 1\ **Last updated:** [March 9, 2020, 10:09pm UTC](https://discuss.elastic.co/t/strings-to-long-to-be-keyword/222805 "2020-03-09T22:09:06Z")
I have been trying to create dashboards and visualizations, but when I attempt to not all of the data seems to get put in. I think this has something to do with the length of the string. Some of my strings are 400+ chara… --- ## [Error with scriptfield in visualization](https://discuss.elastic.co/t/error-with-scriptfield-in-visualization/222071)
**Author:** [@Anton91](https://discuss.elastic.co/u/Anton91)\ **Replies:** 3\ **Last updated:** [March 9, 2020, 10:03pm UTC](https://discuss.elastic.co/t/error-with-scriptfield-in-visualization/222071 "2020-03-09T22:03:33Z")
Hello, everybody, i have created a scripted field and whenever i want to visualize it i get an error: \[esaggs\] \> Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"aggregation\_execution\_exception","reaso… --- ## [Logstash config for Haproxy and Nginx not working together](https://discuss.elastic.co/t/logstash-config-for-haproxy-and-nginx-not-working-together/222798)
**Author:** [@Sona\_Das](https://discuss.elastic.co/u/Sona_Das)\ **Replies:** 2\ **Last updated:** [March 9, 2020, 9:42pm UTC](https://discuss.elastic.co/t/logstash-config-for-haproxy-and-nginx-not-working-together/222798 "2020-03-09T21:42:21Z")
I am having a ELK setup for processing haproxy and nginx logs, for this i have used separate config files for logstash, the main data which i want from logs are the "content url" and the "response time", in haproxy the r… --- ## [Unable to create logstash indice](https://discuss.elastic.co/t/unable-to-create-logstash-indice/222788)
**Author:** [@gmorales](https://discuss.elastic.co/u/gmorales)\ **Replies:** 1\ **Last updated:** [March 9, 2020, 8:42pm UTC](https://discuss.elastic.co/t/unable-to-create-logstash-indice/222788 "2020-03-09T20:42:09Z")
I am a newbie and juts installed the latest elasticsearch, Kibana, filebeat, logstash, I inherited an old version of elartic, kibana and the whole 9 yards, the older one works just fine but I wanted to run the latest and… --- ## [Can not run elasticsearch as root for elasticsearch 7.6.0 in linux](https://discuss.elastic.co/t/can-not-run-elasticsearch-as-root-for-elasticsearch-7-6-0-in-linux/220913)
**Author:** [@rohithkothaneth](https://discuss.elastic.co/u/rohithkothaneth)\ **Replies:** 4\ **Last updated:** [March 9, 2020, 8:02pm UTC](https://discuss.elastic.co/t/can-not-run-elasticsearch-as-root-for-elasticsearch-7-6-0-in-linux/220913 "2020-03-09T20:02:03Z")
Hello, Could someone please help me how to fix this issue . Here I have installed Elasticsearch as a user and not as root in my Linux OS. I can execute the command line call without any issue. But I wanted to run it… --- ## [Copy another field with nanoseconds to elasticsearch/kibana @timestamp field](https://discuss.elastic.co/t/copy-another-field-with-nanoseconds-to-elasticsearch-kibana-timestamp-field/222541)
**Author:** [@savvy](https://discuss.elastic.co/u/savvy)\ **Replies:** 5\ **Last updated:** [March 9, 2020, 7:44pm UTC](https://discuss.elastic.co/t/copy-another-field-with-nanoseconds-to-elasticsearch-kibana-timestamp-field/222541 "2020-03-09T19:44:04Z")
Hello, My Elasticsearch is version 7.5 I have a\> date type - @timestamp field b\> string type - event\_timestamp field (format: 2020-03-06 20:28:33:232123456 +0000) sent in each event. What I want to achieve: 1st, I … --- ## [Export generates wrong default field, lot of "text" duplicities #16891](https://discuss.elastic.co/t/export-generates-wrong-default-field-lot-of-text-duplicities-16891/222622)
**Author:** [@vbohata](https://discuss.elastic.co/u/vbohata)\ **Replies:** 4\ **Last updated:** [March 9, 2020, 6:41pm UTC](https://discuss.elastic.co/t/export-generates-wrong-default-field-lot-of-text-duplicities-16891/222622 "2020-03-09T18:41:34Z")
I noticed a lot of versions of beats generate wrong index templates. For example in 7.6.1 using "./filebeat export template" I get this in default\_field section: ... "process.args", "text", "process.executable", "pr… --- ## [Multiple Pipelines with the Logstash Helm Chart](https://discuss.elastic.co/t/multiple-pipelines-with-the-logstash-helm-chart/222359)
**Author:** [@dbwest](https://discuss.elastic.co/u/dbwest)\ **Replies:** 1\ **Last updated:** [March 6, 2020, 5:08pm UTC](https://discuss.elastic.co/t/multiple-pipelines-with-the-logstash-helm-chart/222359 "2020-03-06T17:08:10Z")
Hi, we have Logstash deployed using the Helm Chart at https://github.com/elastic/helm-charts/tree/master/logstash . We want to configure multiple pipelines. The values.yaml has these comments in it: ## NOTE: To achieve… --- ## [Index Template Field Whitelist](https://discuss.elastic.co/t/index-template-field-whitelist/222777)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 6:12pm UTC](https://discuss.elastic.co/t/index-template-field-whitelist/222777 "2020-03-09T18:12:11Z")
Using Elasticsearch 7.4.2 Is there a concept of a field whitelist for indices/index patterns? I want to have ~150 fields whitelisted for an index, and other fields to be automatically dropped. My use-case is that an ol… --- ## [Consequences of Large Number of Fields](https://discuss.elastic.co/t/consequences-of-large-number-of-fields/222776)
**Author:** [@Josh\_D](https://discuss.elastic.co/u/Josh_D)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 6:07pm UTC](https://discuss.elastic.co/t/consequences-of-large-number-of-fields/222776 "2020-03-09T18:07:05Z")
We're using elastic search mostly for logging, but we've started adding telemetry data along with some of the log entries. These additional fields have causing our field count to explode to be over a 1000. All of this ex… --- ## [Order inner\_hits by offset](https://discuss.elastic.co/t/order-inner-hits-by-offset/222770)
**Author:** [@daven](https://discuss.elastic.co/u/daven)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 5:04pm UTC](https://discuss.elastic.co/t/order-inner-hits-by-offset/222770 "2020-03-09T17:04:36Z")
I have a set of documents that contain nested paragraphs and sentences, I need the order of the inner hits to be in the order they occur in the document, eg. paragraph 0 sentence 0, paragraph 0 sentence 5, paragraph 2 se… --- ## [I cannot see two indices in Kibana](https://discuss.elastic.co/t/i-cannot-see-two-indices-in-kibana/222755)
**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\ **Replies:** 13\ **Last updated:** [March 9, 2020, 4:55pm UTC](https://discuss.elastic.co/t/i-cannot-see-two-indices-in-kibana/222755 "2020-03-09T16:55:27Z")
I have the following output in my logstash output file. When I look at the loaded indices in Kibana I only see the var\_log\_common-\* 30-elasticsearch-output.conf output { if \[source\] == "/var/log/nginx/access.log" or… --- ## [Interested in ideas about EUI playground for docs project](https://discuss.elastic.co/t/interested-in-ideas-about-eui-playground-for-docs-project/220551)
**Author:** [@Lokesh\_Rana](https://discuss.elastic.co/u/Lokesh_Rana)\ **Replies:** 3\ **Last updated:** [March 9, 2020, 4:42pm UTC](https://discuss.elastic.co/t/interested-in-ideas-about-eui-playground-for-docs-project/220551 "2020-03-09T16:42:54Z")
Hii, I have keen interest in developing playground for documentation of EUI, Can you point me to someone point me to examples on what exactly has to be done. My idea is to make it similar to antd documentation eg. https:… --- ## [Format date field as a string?](https://discuss.elastic.co/t/format-date-field-as-a-string/222733)
**Author:** [@macau](https://discuss.elastic.co/u/macau)\ **Replies:** 3\ **Last updated:** [March 9, 2020, 4:36pm UTC](https://discuss.elastic.co/t/format-date-field-as-a-string/222733 "2020-03-09T16:36:05Z")
I would like to create a new string field from a date field (@timestamp) in the format "yyyy-MM-dd" (e.g. 2020-12-31) - is that possible with Logstash? --- ## [Input csv from website](https://discuss.elastic.co/t/input-csv-from-website/222765)
**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 4:34pm UTC](https://discuss.elastic.co/t/input-csv-from-website/222765 "2020-03-09T16:34:27Z")
I would like to parse a csv file from a website with logstash and the results put into elasticsearch. Something like this: input { http\_poller { urls =\> { test =\> { method =\> get url =\> "ht… --- ## [AWS Elasticsearch Service](https://discuss.elastic.co/t/aws-elasticsearch-service/222750)
**Author:** [@jh.94](https://discuss.elastic.co/u/jh.94)\ **Replies:** 3\ **Last updated:** [March 9, 2020, 4:15pm UTC](https://discuss.elastic.co/t/aws-elasticsearch-service/222750 "2020-03-09T16:15:56Z")
Hi there, As I have just started knowing about AWS, I have a few questions regarding the Amazon Elasticsearch Service. Can i download Kibana plugins mentioned in https://www.elastic.co/guide/en/kibana/current/known-p… --- ## [SSH into elastic search, or another way to get a synonyms bundle](https://discuss.elastic.co/t/ssh-into-elastic-search-or-another-way-to-get-a-synonyms-bundle/222762)
**Author:** [@Ron\_Hay](https://discuss.elastic.co/u/Ron_Hay)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 4:09pm UTC](https://discuss.elastic.co/t/ssh-into-elastic-search-or-another-way-to-get-a-synonyms-bundle/222762 "2020-03-09T16:09:49Z")
I'd like to get the file used by ES for custom plugin / bundle, that is used for synonyms. Is there a way to retrieve the information? One option, it seems, would be to ssh into the cluster (via the kibana node, maybe?… --- ## [Grok parsing failure but working in the debugger](https://discuss.elastic.co/t/grok-parsing-failure-but-working-in-the-debugger/222609)
**Author:** [@lucia\_vargas\_a](https://discuss.elastic.co/u/lucia_vargas_a)\ **Replies:** 3\ **Last updated:** [March 9, 2020, 3:22pm UTC](https://discuss.elastic.co/t/grok-parsing-failure-but-working-in-the-debugger/222609 "2020-03-09T15:22:51Z")
Hi friends, Cn you help me? I am trying to parse a log and ingest to elasticsearch. One line looks like this: 2020-03-05 20:42:32 ERROR ConnectionError 404 1000 http://localhost/resources My config file looks like… --- ## [Map vs Symbol size](https://discuss.elastic.co/t/map-vs-symbol-size/222741)
**Author:** [@naguelfar](https://discuss.elastic.co/u/naguelfar)\ **Replies:** 0\ **Last updated:** [March 9, 2020, 3:01pm UTC](https://discuss.elastic.co/t/map-vs-symbol-size/222741 "2020-03-09T15:01:46Z")
Bonjour, lorsque je joue avec Map de Kibana, je peux définir une taille de symbol par rapport à un champ numérique et non par rapport au nombre de doc retournés par la requête geo. Je n'arrive pas à comprendre comment … --- ## [Synonyms search in elastticsearch.net nest 7.5](https://discuss.elastic.co/t/synonyms-search-in-elastticsearch-net-nest-7-5/222522)
**Author:** [@linliliu](https://discuss.elastic.co/u/linliliu)\ **Replies:** 1\ **Last updated:** [March 9, 2020, 2:51pm UTC](https://discuss.elastic.co/t/synonyms-search-in-elastticsearch-net-nest-7-5/222522 "2020-03-09T14:51:09Z")
I am working on the synonyms search in nest 7.5. Do you have example for it? Most examples online are for old version nest. What is the replacement for .createIndex in nest 7.5? [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1583) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1585)