# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1602 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1603 --- ## [Logstash can't communicate to es and attempted to resurrect dead es instance](https://discuss.elastic.co/t/logstash-cant-communicate-to-es-and-attempted-to-resurrect-dead-es-instance/221385)
**Author:** [@zeghitsama](https://discuss.elastic.co/u/zeghitsama)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 9:16am UTC](https://discuss.elastic.co/t/logstash-cant-communicate-to-es-and-attempted-to-resurrect-dead-es-instance/221385 "2020-02-28T09:16:19Z")
Hi, I'm getting error on logstash that want to communicate to elasticsearch. I've already set my username and password on conf.d. Here's my detail on my conf file. input { beats { id =\> "01-beat… --- ## [How to change the color of geo points in vega map](https://discuss.elastic.co/t/how-to-change-the-color-of-geo-points-in-vega-map/220801)
**Author:** [@Aadesh\_Sharma](https://discuss.elastic.co/u/Aadesh_Sharma)\ **Replies:** 2\ **Last updated:** [February 28, 2020, 9:02am UTC](https://discuss.elastic.co/t/how-to-change-the-color-of-geo-points-in-vega-map/220801 "2020-02-28T09:02:26Z")
Hi, I want to change the color of geo points according to their category. I have a field named "category" in my index it this field their is three category high, medium and low. I want to show the geo points color accor… --- ## [How to increase the number of threads at Logstash output pipeline](https://discuss.elastic.co/t/how-to-increase-the-number-of-threads-at-logstash-output-pipeline/221391)
**Author:** [@suvarna](https://discuss.elastic.co/u/suvarna)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 9:00am UTC](https://discuss.elastic.co/t/how-to-increase-the-number-of-threads-at-logstash-output-pipeline/221391 "2020-02-28T09:00:15Z")
Hi The pipeline.workers setting determines how many threads to run for filter and output processing. If you we want to set number of threads at input side or output side, what configuration we have to add in yml. --- ## [Elasticsearch \_sql string containing Apostrophe](https://discuss.elastic.co/t/elasticsearch-sql-string-containing-apostrophe/221300)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 8:57am UTC](https://discuss.elastic.co/t/elasticsearch-sql-string-containing-apostrophe/221300 "2020-02-28T08:57:26Z")
Hi, I have a query: GET /test\_sql/\_search { "query": { "bool": { "must": \[ { "match": { "tenant\_name.keyword": "KNOXVILLE'S CORPORATION" } } \] } } } The above query works fine. Now, I try the same thing… --- ## [Tuning Logstash for optimal throughput for ELK pipeline](https://discuss.elastic.co/t/tuning-logstash-for-optimal-throughput-for-elk-pipeline/221007)
**Author:** [@kumarvikash1](https://discuss.elastic.co/u/kumarvikash1)\ **Replies:** 3\ **Last updated:** [February 28, 2020, 8:21am UTC](https://discuss.elastic.co/t/tuning-logstash-for-optimal-throughput-for-elk-pipeline/221007 "2020-02-28T08:21:55Z")
We have Kafka-\>ELK pipeline and logstash is one of the key component in between Kafka and Elastic Search. Looks like Logstash is not able to process data at the same rate as injecting into kafka. We have below logstash … --- ## [Объединение полей](https://discuss.elastic.co/t/topic/221157)
**Author:** [@111291](https://discuss.elastic.co/u/111291)\ **Replies:** 2\ **Last updated:** [February 28, 2020, 8:14am UTC](https://discuss.elastic.co/t/topic/221157 "2020-02-28T08:14:03Z")
Добрый день! Подскажите пожалуйста в чем моя ошибка. grok { match =\> { "message" =\> \["%{INT:Min}:%{BASE10NUM:Sec}-%{INT:Duration},(%{WORD:Event}|%{SPACE:Event}),%{INT:Level}"\] } match =\> { "log.file.path" =\>… --- ## [Hardware requirements to build an ELK cluster with 5000 agents](https://discuss.elastic.co/t/hardware-requirements-to-build-an-elk-cluster-with-5000-agents/221327)
**Author:** [@premierpsp](https://discuss.elastic.co/u/premierpsp)\ **Replies:** 3\ **Last updated:** [February 28, 2020, 8:09am UTC](https://discuss.elastic.co/t/hardware-requirements-to-build-an-elk-cluster-with-5000-agents/221327 "2020-02-28T08:09:34Z")
That is. I need to monitor 5000 servers with metricbeat and I need help to know how many nodes and hardware is recommended. Thank You! --- ## [Time series spot line with specific value](https://discuss.elastic.co/t/time-series-spot-line-with-specific-value/221266)
**Author:** [@MLaure19](https://discuss.elastic.co/u/MLaure19)\ **Replies:** 4\ **Last updated:** [February 28, 2020, 8:08am UTC](https://discuss.elastic.co/t/time-series-spot-line-with-specific-value/221266 "2020-02-28T08:08:02Z")
Dear all, I am struggling a lot to represent a simple time-series graph with Kibana. I don’t want my data to be aggregated. I basically just would like to plot my carbon monoxide concentrations on a time-series graph. … --- ## [How to query keyword nested field that can be an integer values in ElasticSearch?](https://discuss.elastic.co/t/how-to-query-keyword-nested-field-that-can-be-an-integer-values-in-elasticsearch/221381)
**Author:** [@111230](https://discuss.elastic.co/u/111230)\ **Replies:** 0\ **Last updated:** [February 28, 2020, 8:00am UTC](https://discuss.elastic.co/t/how-to-query-keyword-nested-field-that-can-be-an-integer-values-in-elasticsearch/221381 "2020-02-28T08:00:18Z")
This is example of field in ES document. How can i query 'prices.value' that can be only integers? In this case, value is "150.99" and can fully be converted to integer. But sometimes in can be a text something like "va… --- ## [Cannot access @metadata of dead\_letter\_queue in 7.6.0](https://discuss.elastic.co/t/cannot-access-metadata-of-dead-letter-queue-in-7-6-0/221240)
**Author:** [@roflmao](https://discuss.elastic.co/u/roflmao)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 7:52am UTC](https://discuss.elastic.co/t/cannot-access-metadata-of-dead-letter-queue-in-7-6-0/221240 "2020-02-28T07:52:05Z")
dead\_letter\_queue { path =\> "/usr/share/logstash/data/dead\_letter\_queue/" pipeline\_id =\> "main" commit\_offsets =\> true } Trying to do stdout { codec =\> rubycodec { metadata =\> true } fails logstash from starting: … --- ## [Field merge](https://discuss.elastic.co/t/field-merge/221165)
**Author:** [@111291](https://discuss.elastic.co/u/111291)\ **Replies:** 9\ **Last updated:** [February 28, 2020, 7:24am UTC](https://discuss.elastic.co/t/field-merge/221165 "2020-02-28T07:24:24Z")
Hello, Please tell me what is my mistake? grok { match =\> { "message" =\> \["%{INT:Min}:%{BASE10NUM:Sec}-%{INT:Duration},(%{WORD:Event}|%{SPACE:Event}),%{INT:Level}"\] } match =\> { "log.file.path" =\> \["%{INT:T… --- ## [Expected one of \\"\\\\\\\\'\\", any character, \\"'\\"](https://discuss.elastic.co/t/expected-one-of-any-character/221249)
**Author:** [@ghl1l0](https://discuss.elastic.co/u/ghl1l0)\ **Replies:** 5\ **Last updated:** [February 28, 2020, 7:12am UTC](https://discuss.elastic.co/t/expected-one-of-any-character/221249 "2020-02-28T07:12:11Z")
hello elastic community i need your help, i got this error when i have add the function rename on mutate this is the full logs error : \[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::P… --- ## [Automatic refresh does not work in custom dashboards](https://discuss.elastic.co/t/automatic-refresh-does-not-work-in-custom-dashboards/221178)
**Author:** [@Dimitris\_S](https://discuss.elastic.co/u/Dimitris_S)\ **Replies:** 2\ **Last updated:** [February 28, 2020, 7:07am UTC](https://discuss.elastic.co/t/automatic-refresh-does-not-work-in-custom-dashboards/221178 "2020-02-28T07:07:19Z")
Fresh installation of ELK 7.60 on a powerful server slice (92G RAM - 16 processors), heap size assigned to 16g. I've imported my custom dashboards from other Kibana instances and I'm using the refresh option for every 5 … --- ## [Fluentd connection to Elasticsearch(cluster)](https://discuss.elastic.co/t/fluentd-connection-to-elasticsearch-cluster/221229)
**Author:** [@Suat\_Bey](https://discuss.elastic.co/u/Suat_Bey)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 11:55am UTC](https://discuss.elastic.co/t/fluentd-connection-to-elasticsearch-cluster/221229 "2020-02-27T11:55:38Z")
Hi, We are trying to send rsyslog from fluentd(td-agent) to cluster elaskticsearch (with xpack), but getting an error . /etc/td-agent/td-agent.conf \ @type syslog port 5140 bind 0.0.0.0 tag system \ **Author:** [@lznfs](https://discuss.elastic.co/u/lznfs)\ **Replies:** 0\ **Last updated:** [February 28, 2020, 4:37am UTC](https://discuss.elastic.co/t/prepare-offline-pack-subcommand-error/221362 "2020-02-28T04:37:46Z") HI,when i install logstash offline plugins,I get this error： my server can not connect internet,so,i build my offline plugin pack in my another server that can connect internet. os:rhel7.4 logstash:7.6 \[root@logstash… --- ## [One large index vs split indexes](https://discuss.elastic.co/t/one-large-index-vs-split-indexes/221353)
**Author:** [@chris99](https://discuss.elastic.co/u/chris99)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 3:23am UTC](https://discuss.elastic.co/t/one-large-index-vs-split-indexes/221353 "2020-02-28T03:23:17Z")
Overview We have a multitenant transactional SAAS application. I am busy building a prototype implementation for ElasticSeach. The idea is to index our transactional data then use it for fast search and analytical aggre… --- ## [Index not rolling over since upgrading to 7.6](https://discuss.elastic.co/t/index-not-rolling-over-since-upgrading-to-7-6/221145)
**Author:** [@martine](https://discuss.elastic.co/u/martine)\ **Replies:** 4\ **Last updated:** [February 28, 2020, 1:15am UTC](https://discuss.elastic.co/t/index-not-rolling-over-since-upgrading-to-7-6/221145 "2020-02-28T01:15:58Z")
On earlier versions of Logstah and Elastic search a new index would be created every day with the naming in the form of logstash-%{+YYYY.MM.dd}. After upgrading 7.6 from 6.8 indexes started be created with errors like: … --- ## [Degraded Indexing Performance on v7.3.1 (from v5.6.10)](https://discuss.elastic.co/t/degraded-indexing-performance-on-v7-3-1-from-v5-6-10/221062)
**Author:** [@Jack\_Farrelly](https://discuss.elastic.co/u/Jack_Farrelly)\ **Replies:** 5\ **Last updated:** [February 28, 2020, 1:11am UTC](https://discuss.elastic.co/t/degraded-indexing-performance-on-v7-3-1-from-v5-6-10/221062 "2020-02-28T01:11:36Z")
Hey, We recently upgraded from ES version 5.6.10 to 7.3.1 and noticed indexing performance seems much worse. We could index at a rate of around 500k op/s, and now we peak at around 200k op/s. During indexing, we get bu… --- ## [Filtered Alias not working on Inner Hits](https://discuss.elastic.co/t/filtered-alias-not-working-on-inner-hits/221344)
**Author:** [@acuitymd](https://discuss.elastic.co/u/acuitymd)\ **Replies:** 0\ **Last updated:** [February 28, 2020, 12:57am UTC](https://discuss.elastic.co/t/filtered-alias-not-working-on-inner-hits/221344 "2020-02-28T00:57:27Z")
Hi, I have a multitenant architecture where there is a large set of "master" data between each tenant, then smaller pieces of tenant-specific data. To query only for a specific tenant, I have a filtered alias where I'm… --- ## [What is the recommended Maven repository for x-pack-transport compatible with ES 7.6?](https://discuss.elastic.co/t/what-is-the-recommended-maven-repository-for-x-pack-transport-compatible-with-es-7-6/221127)
**Author:** [@preeti20](https://discuss.elastic.co/u/preeti20)\ **Replies:** 2\ **Last updated:** [February 28, 2020, 12:42am UTC](https://discuss.elastic.co/t/what-is-the-recommended-maven-repository-for-x-pack-transport-compatible-with-es-7-6/221127 "2020-02-28T00:42:59Z")
Maven Central appears to be missing the x-pack-transport 7.6 https://mvnrepository.com/artifact/org.elasticsearch.client/x-pack-transport. The latest in maven is 6.0.0 But i see x-pack-transport 7.6 in https://artifact… --- ## [Controls still not showing all possibilities](https://discuss.elastic.co/t/controls-still-not-showing-all-possibilities/220616)
**Author:** [@\_Louw](https://discuss.elastic.co/u/_Louw)\ **Replies:** 3\ **Last updated:** [February 28, 2020, 12:05am UTC](https://discuss.elastic.co/t/controls-still-not-showing-all-possibilities/220616 "2020-02-28T00:05:58Z")
I ran into this post and this post about the issue of the controls visualization not showing all possible values. I have a lot of documents in my index, but not many distinct values in the desired field: "aggregations"… --- ## [Manually loading index-patterns and dashboards into kibana after exporting from Beats](https://discuss.elastic.co/t/manually-loading-index-patterns-and-dashboards-into-kibana-after-exporting-from-beats/220942)
**Author:** [@johncollaros](https://discuss.elastic.co/u/johncollaros)\ **Replies:** 2\ **Last updated:** [February 27, 2020, 11:19pm UTC](https://discuss.elastic.co/t/manually-loading-index-patterns-and-dashboards-into-kibana-after-exporting-from-beats/220942 "2020-02-27T23:19:01Z")
Hi, Due to the way the network is structured, beats cannot directly connect to Elasticsearch and Kibana. Also, salt is being used to setup the elastic stack. It is trivial to upload the index templates to Elasticsearc… --- ## [Can't produce a geo\_point or geo\_shape data type for JSON geospatial data via Elasticsearch viewable on Kibana](https://discuss.elastic.co/t/cant-produce-a-geo-point-or-geo-shape-data-type-for-json-geospatial-data-via-elasticsearch-viewable-on-kibana/221337)
**Author:** [@fburgess](https://discuss.elastic.co/u/fburgess)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 11:01pm UTC](https://discuss.elastic.co/t/cant-produce-a-geo-point-or-geo-shape-data-type-for-json-geospatial-data-via-elasticsearch-viewable-on-kibana/221337 "2020-02-27T23:01:01Z")
OS: CentOS 7 OS: CentOS 7 \[root@localhost logstash\]# curl -XGET 'http://localhost:9200' { "name" : "primary-node", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "0tXluLtmSmyY9\_hj-XOfrQ", "version" : { "numbe… --- ## [Migrate SSAS Olap to the Elasticsearch](https://discuss.elastic.co/t/migrate-ssas-olap-to-the-elasticsearch/220265)
**Author:** [@luis2](https://discuss.elastic.co/u/luis2)\ **Replies:** 5\ **Last updated:** [February 27, 2020, 10:16pm UTC](https://discuss.elastic.co/t/migrate-ssas-olap-to-the-elasticsearch/220265 "2020-02-27T22:16:28Z")
Hi, I work at a company that is thinking about migrate his BI structure ( SSAS Olap and Power BI ) to the ElasticSearch. Our BI work basically with aggregations as sum, max, min, first, last, average at aggregation in m… --- ## [Indexes not migrating from hot to cold](https://discuss.elastic.co/t/indexes-not-migrating-from-hot-to-cold/220915)
**Author:** [@amcneill3](https://discuss.elastic.co/u/amcneill3)\ **Replies:** 1\ **Last updated:** [February 27, 2020, 9:59pm UTC](https://discuss.elastic.co/t/indexes-not-migrating-from-hot-to-cold/220915 "2020-02-27T21:59:53Z")
Hi. I have a Hot Cold setup (two nodes hot, one node cold). It does not appear any of my indexes in hot ever migrate to cold, given my ILM policy. For example: But index I expect to be cold by now is still in hot… --- ## [Adjusting custom mapping for new fields](https://discuss.elastic.co/t/adjusting-custom-mapping-for-new-fields/221085)
**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\ **Replies:** 1\ **Last updated:** [February 27, 2020, 9:59pm UTC](https://discuss.elastic.co/t/adjusting-custom-mapping-for-new-fields/221085 "2020-02-27T21:59:05Z")
I'm looking for the best approaches to adjust an index mapping every time there are new fields added to it (after a vendor or a beat update for example). Currently, the filebeat (7.6) googlecloud module (https://www.ela… --- ## [Check if logstash is working](https://discuss.elastic.co/t/check-if-logstash-is-working/221281)
**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\ **Replies:** 1\ **Last updated:** [February 27, 2020, 9:47pm UTC](https://discuss.elastic.co/t/check-if-logstash-is-working/221281 "2020-02-27T21:47:11Z")
I have a filebeat running and I can see in the logs that it is parsing my log files. The check config worked and it stated that everything is ok. I goto logstash and I have a filebeat.conf in the conf.d folder. Inside… --- ## [Откуда Кибана берёт время при отбражении лога](https://discuss.elastic.co/t/topic/220953)
**Author:** [@Chawoosh](https://discuss.elastic.co/u/Chawoosh)\ **Replies:** 3\ **Last updated:** [February 27, 2020, 8:52pm UTC](https://discuss.elastic.co/t/topic/220953 "2020-02-27T20:52:16Z")
Вопрос № 1 - откуда Кибана берёт время при отбражении лога? Для примера: $ date Wed Feb 26 11:43:03 +07 2020 В то же время Кибана утверждает что уже 2020-02-26 17:43:32.000. В начале отображения логов время отставало … --- ## [ES7: Do we need cluster.initial\_master\_nodes when a node restarts?](https://discuss.elastic.co/t/es7-do-we-need-cluster-initial-master-nodes-when-a-node-restarts/221320)
**Author:** [@UDixit](https://discuss.elastic.co/u/UDixit)\ **Replies:** 3\ **Last updated:** [February 27, 2020, 8:32pm UTC](https://discuss.elastic.co/t/es7-do-we-need-cluster-initial-master-nodes-when-a-node-restarts/221320 "2020-02-27T20:32:15Z")
As per the documents, we need Cluster.initial\_master\_nodes only for the first bootstrap of the cluster. How does a node join the cluster when it restarts? Does it only need the sed\_hosts to discover others? What if the… --- ## [How to speed up script query](https://discuss.elastic.co/t/how-to-speed-up-script-query/221125)
**Author:** [@bmax](https://discuss.elastic.co/u/bmax)\ **Replies:** 2\ **Last updated:** [February 27, 2020, 7:46pm UTC](https://discuss.elastic.co/t/how-to-speed-up-script-query/221125 "2020-02-27T19:46:20Z")
Hello, I have an mapping for a field visit\_times which is a date type and contains many epoch timestamps. I have some complex queries such as checking the dayOfWeek of any of the values within that array or even checkin… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1601) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1603)