# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1603 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1604 --- ## ["failed shard on node... ...Data too large, data for \[\\] would be" only for 3 most recent .monitoring-es indices](https://discuss.elastic.co/t/failed-shard-on-node-data-too-large-data-for-transport-request-would-be-only-for-3-most-recent-monitoring-es-indices/218827)
**Author:** [@mattsdevop](https://discuss.elastic.co/u/mattsdevop)\ **Replies:** 8\ **Last updated:** [February 27, 2020, 7:40pm UTC](https://discuss.elastic.co/t/failed-shard-on-node-data-too-large-data-for-transport-request-would-be-only-for-3-most-recent-monitoring-es-indices/218827 "2020-02-27T19:40:41Z")
Looking for some direction with this unique issue in our production cluster. Hoping that @HenningAndersen @dadoonet @Christian\_Dahlqvist and/or @Armin\_Braun might be able to poke in here and offer feedback. Details/beha… --- ## [Upload CSV to Kibana 6.2.4](https://discuss.elastic.co/t/upload-csv-to-kibana-6-2-4/221314)
**Author:** [@pjepsen](https://discuss.elastic.co/u/pjepsen)\ **Replies:** 1\ **Last updated:** [February 27, 2020, 7:35pm UTC](https://discuss.elastic.co/t/upload-csv-to-kibana-6-2-4/221314 "2020-02-27T19:35:31Z")
Our team uses Kibana 6.2.4 and I am attempting to upload log files that were provided to me in a CSV. I read one article that says that if I want to visualize the data in the CSV, I just needed to go to "Visualise" and d… --- ## [Not able to query a wildcard](https://discuss.elastic.co/t/not-able-to-query-a-wildcard/220896)
**Author:** [@prasad98](https://discuss.elastic.co/u/prasad98)\ **Replies:** 6\ **Last updated:** [February 27, 2020, 7:28pm UTC](https://discuss.elastic.co/t/not-able-to-query-a-wildcard/220896 "2020-02-27T19:28:11Z")
Hi, I'm trying to query a document where it has field mapping\_type and product.categories\[0\].name field which I want to query it using a wildcard. I tried to run the query in this way: GET /products/\_search { "quer… --- ## [Logstash EXEC input](https://discuss.elastic.co/t/logstash-exec-input/221295)
**Author:** [@RunningSmurf](https://discuss.elastic.co/u/RunningSmurf)\ **Replies:** 3\ **Last updated:** [February 27, 2020, 7:00pm UTC](https://discuss.elastic.co/t/logstash-exec-input/221295 "2020-02-27T19:00:00Z")
Hello, I have a simple EXEC input in logstash, as follows: input { exec { command =\> "ls" interval =\> 30 } } output { elasticsearch { hosts =\> \["\:9200"\] } } However, I keep getting the following err… --- ## [How many number of data nodes to start with for log analytics](https://discuss.elastic.co/t/how-many-number-of-data-nodes-to-start-with-for-log-analytics/221309)
**Author:** [@gururjrk](https://discuss.elastic.co/u/gururjrk)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 6:53pm UTC](https://discuss.elastic.co/t/how-many-number-of-data-nodes-to-start-with-for-log-analytics/221309 "2020-02-27T18:53:53Z")
Hi, For log analytics I am going to store log data from various application in elasticsearch as time series indices. The estimated total data growth is maximum 10TB in 1 year considering the data retention period. With… --- ## [Plan for upgrading from 2.4 to 5.6?](https://discuss.elastic.co/t/plan-for-upgrading-from-2-4-to-5-6/221304)
**Author:** [@ppbrown](https://discuss.elastic.co/u/ppbrown)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 6:28pm UTC](https://discuss.elastic.co/t/plan-for-upgrading-from-2-4-to-5-6/221304 "2020-02-27T18:28:27Z")
I'm trying to put together a safe plan for upgrading our cluster from v2.4.1 to v5.6 Been doing some googling. So far, i've read that; "just backing up the data directories is not sufficient", and elastic has built i… --- ## [Docs.count given by /\_cat/indices on index with replica shards](https://discuss.elastic.co/t/docs-count-given-by-cat-indices-on-index-with-replica-shards/221303)
**Author:** [@lschmid](https://discuss.elastic.co/u/lschmid)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 6:26pm UTC](https://discuss.elastic.co/t/docs-count-given-by-cat-indices-on-index-with-replica-shards/221303 "2020-02-27T18:26:56Z")
For an index with replica shard(s), does the docs.count field given by /\_cat/indices include docs on the replica shard or only docs on primary shards? Say I want to get even splits of an index by using the scroll AP… --- ## [Elasticsearch pagination approach help](https://discuss.elastic.co/t/elasticsearch-pagination-approach-help/221291)
**Author:** [@g30](https://discuss.elastic.co/u/g30)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 5:23pm UTC](https://discuss.elastic.co/t/elasticsearch-pagination-approach-help/221291 "2020-02-27T17:23:21Z")
Hi, We have developed a file storage solution which uses elastic search to store metadata about files using the rest level client java API. We have pagination currently implemented via “from” and “size”. Client makes a… --- ## [Blank Visualisation and Dashboard](https://discuss.elastic.co/t/blank-visualisation-and-dashboard/221027)
**Author:** [@varunzz](https://discuss.elastic.co/u/varunzz)\ **Replies:** 17\ **Last updated:** [February 27, 2020, 5:11pm UTC](https://discuss.elastic.co/t/blank-visualisation-and-dashboard/221027 "2020-02-27T17:11:11Z")
Hey, my visualisations and dashboards were working fine till yesterday and today suddenly when I opened my dashboard it went blank. Same for visualisations. Although I can still access my visualisations and dashboards th… --- ## [Dynamic field visualization](https://discuss.elastic.co/t/dynamic-field-visualization/221248)
**Author:** [@laureli](https://discuss.elastic.co/u/laureli)\ **Replies:** 1\ **Last updated:** [February 27, 2020, 4:58pm UTC](https://discuss.elastic.co/t/dynamic-field-visualization/221248 "2020-02-27T16:58:37Z")
Hi! Is it possible to appearance dynamic added filed in Kibana dashboard? For example, I have a new field in index and I want to see this field on some (existing or even a new one) chart. Can it happen automatically wit… --- ## [2 server ELK cluster implementation](https://discuss.elastic.co/t/2-server-elk-cluster-implementation/220308)
**Author:** [@nityaraj06](https://discuss.elastic.co/u/nityaraj06)\ **Replies:** 13\ **Last updated:** [February 27, 2020, 4:21pm UTC](https://discuss.elastic.co/t/2-server-elk-cluster-implementation/220308 "2020-02-27T16:21:14Z")
What is the best way to implement ELK stack for a log monitoring system on Windows. I have 2 servers with windows server 2019 installed. --- ## [Using OIDC authenticated browser session to query Elasticsearch API](https://discuss.elastic.co/t/using-oidc-authenticated-browser-session-to-query-elasticsearch-api/221278)
**Author:** [@Dennis\_Rietvink](https://discuss.elastic.co/u/Dennis_Rietvink)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 4:16pm UTC](https://discuss.elastic.co/t/using-oidc-authenticated-browser-session-to-query-elasticsearch-api/221278 "2020-02-27T16:16:05Z")
Hi There, We are currently successfully using an OIDC setup with Keycloak to integrate Kibana dashboards into our customer portal. We use Elastic Cloud as backend and host the Kibana instances ourselves. Both running 7.… --- ## [Creating new index from aggregation](https://discuss.elastic.co/t/creating-new-index-from-aggregation/221275)
**Author:** [@mistrhanky](https://discuss.elastic.co/u/mistrhanky)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 4:08pm UTC](https://discuss.elastic.co/t/creating-new-index-from-aggregation/221275 "2020-02-27T16:08:30Z")
Here is my issue: I have to produce visualizations for some extended reporting. For brevity I will simply tell you I end up with events that look like they do below. The key thing is that I have multiple events per day w… --- ## [Hi, my backup disk is out of space](https://discuss.elastic.co/t/hi-my-backup-disk-is-out-of-space/221274)
**Author:** [@tfe2012](https://discuss.elastic.co/u/tfe2012)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 4:08pm UTC](https://discuss.elastic.co/t/hi-my-backup-disk-is-out-of-space/221274 "2020-02-27T16:08:07Z")
Hi, my back up disk is out of space I try to remove the old snapshot, but I getting an error: { "error": { "root\_cause": \[ { "type": "repository\_exception", "reason": "\[backup\] failed to delete snapshot \[snap\_2020… --- ## [Master not discovered or elected yet, an election requires a node with id \[7pxH2sBjRcG2IZzFDfdKGg\]](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-a-node-with-id-7pxh2sbjrcg2izzfdfdkgg/221239)
**Author:** [@oengel](https://discuss.elastic.co/u/oengel)\ **Replies:** 7\ **Last updated:** [February 27, 2020, 3:59pm UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-a-node-with-id-7pxh2sbjrcg2izzfdfdkgg/221239 "2020-02-27T15:59:09Z")
Hi to all, On our cluster (not related to elasticsearch), we handle our own master election. (active/stdby architecture). Im trying to setup elasticsearch to work with our arch. We prepare the configuration file for e… --- ## [Не отображает поля в Kibana, ошибки grok](https://discuss.elastic.co/t/kibana-grok/220983)
**Author:** [@EZSuleyman](https://discuss.elastic.co/u/EZSuleyman)\ **Replies:** 3\ **Last updated:** [February 27, 2020, 3:45pm UTC](https://discuss.elastic.co/t/kibana-grok/220983 "2020-02-27T15:45:44Z")
Добрый день. Долгое время бьюсь с проблемой. Пытаюсь с помощью grok раскладывать логи с русскоязычными символами но что то никак не получается. Как итог - в Kibana тоже пишет empty string. Использую filebeat + ES + kiban… --- ## [How to combine 2 log entries to show in one line of Data Table based on a common field?](https://discuss.elastic.co/t/how-to-combine-2-log-entries-to-show-in-one-line-of-data-table-based-on-a-common-field/221026)
**Author:** [@venkata.kodapaka](https://discuss.elastic.co/u/venkata.kodapaka)\ **Replies:** 4\ **Last updated:** [February 27, 2020, 3:39pm UTC](https://discuss.elastic.co/t/how-to-combine-2-log-entries-to-show-in-one-line-of-data-table-based-on-a-common-field/221026 "2020-02-27T15:39:52Z")
Hi Team, I have my application log files in way that one entry has 'Start Time' field as timestamp (where as 'End Time' as NA) and another entry has 'End Time' field with timestamp('Start Time' field as NA) which have a… --- ## [Полнотекстовый поиск с фильтрацией](https://discuss.elastic.co/t/topic/220659)
**Author:** [@Vivaldy](https://discuss.elastic.co/u/Vivaldy)\ **Replies:** 3\ **Last updated:** [February 27, 2020, 3:37pm UTC](https://discuss.elastic.co/t/topic/220659 "2020-02-27T15:37:06Z")
Не могу построить правильно запрос, возможно было, но то ли пропустил, то ли не могу правильно понять как сформулировать, не нахожу. Суть проблемы: У меня в базе есть два поля: название адрес на входе у меня человек… --- ## [Will Rollup job run on older data?](https://discuss.elastic.co/t/will-rollup-job-run-on-older-data/221114)
**Author:** [@alarka](https://discuss.elastic.co/u/alarka)\ **Replies:** 1\ **Last updated:** [February 27, 2020, 3:29pm UTC](https://discuss.elastic.co/t/will-rollup-job-run-on-older-data/221114 "2020-02-27T15:29:00Z")
I have an index called data-2020 in my current cluster which has daily data I have a Rollup job which searches on index pattern data-\* I have the job running and it has been adding data to index "rollup-data" so … --- ## [Indeces is being created on the master machines](https://discuss.elastic.co/t/indeces-is-being-created-on-the-master-machines/221206)
**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\ **Replies:** 12\ **Last updated:** [February 27, 2020, 3:26pm UTC](https://discuss.elastic.co/t/indeces-is-being-created-on-the-master-machines/221206 "2020-02-27T15:26:15Z")
Hi , I'm new in Elastic world , we have a few master nodes , data nodes , logstash nodes and 2 ing nodes , 4 days a go indexes began to be written to the master nodes also , need your advice , what could be the reas… --- ## [Trying to parse when LOGLEVEL is ERROR](https://discuss.elastic.co/t/trying-to-parse-when-loglevel-is-error/220378)
**Author:** [@dbviz](https://discuss.elastic.co/u/dbviz)\ **Replies:** 4\ **Last updated:** [February 27, 2020, 10:44am UTC](https://discuss.elastic.co/t/trying-to-parse-when-loglevel-is-error/220378 "2020-02-27T10:44:36Z")
Hello, Im trying to parse only LOGLEVEL field using grok but it doesn't work. My logstash.log comes from : \[2020-02-20T15:55:46,198\]\[ERROR\]\[logstash.inputs.jdbc \] Java::ComSybaseJdbc3Jdbc::SybSQLException: Differe… --- ## [Painless compile error using java](https://discuss.elastic.co/t/painless-compile-error-using-java/221263)
**Author:** [@dobrien](https://discuss.elastic.co/u/dobrien)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 3:21pm UTC](https://discuss.elastic.co/t/painless-compile-error-using-java/221263 "2020-02-27T15:21:46Z")
We are seeing strange errors in our elasticsearch log that our system does not call. "script\_fields" : { "myscript: : { "script" : { "source" : "java.lang.Math.class.forName("java.lang.System").getProperties()", "la… --- ## [Can't connect to COORDINATOR\_HOST when using emergency role token](https://discuss.elastic.co/t/cant-connect-to-coordinator-host-when-using-emergency-role-token/221218)
**Author:** [@Andrew\_Riley](https://discuss.elastic.co/u/Andrew_Riley)\ **Replies:** 1\ **Last updated:** [February 27, 2020, 2:38pm UTC](https://discuss.elastic.co/t/cant-connect-to-coordinator-host-when-using-emergency-role-token/221218 "2020-02-27T14:38:00Z")
I'm trying to recover my ECE instance after losing my co-ordinator server. The information on Using Emergency Roles token says to run specifying the old co-ordinator host, but the installation validation output says; … --- ## [Machine leaning Option not showing up in kibana](https://discuss.elastic.co/t/machine-leaning-option-not-showing-up-in-kibana/220359)
**Author:** [@Joy\_Chatterjee](https://discuss.elastic.co/u/Joy_Chatterjee)\ **Replies:** 4\ **Last updated:** [February 27, 2020, 2:34pm UTC](https://discuss.elastic.co/t/machine-leaning-option-not-showing-up-in-kibana/220359 "2020-02-27T14:34:45Z")
Hi Team , I am unable to Machine learning option in Kibana , though I see it in my spaces . I tried enabling and Disabling , but no luck . Xpack is enabled for my user account . Any suggestion ? Regards Joy --- ## [Offline Plugin update installation fails](https://discuss.elastic.co/t/offline-plugin-update-installation-fails/221255)
**Author:** [@Christian\_Hubinger](https://discuss.elastic.co/u/Christian_Hubinger)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 2:27pm UTC](https://discuss.elastic.co/t/offline-plugin-update-installation-fails/221255 "2020-02-27T14:27:37Z")
Hi, I've developed an extended version of the output-file-plugin (see this PR https://github.com/logstash-plugins/logstash-output-file/pull/85) and i want to ship this with our logstash configuration RPM we are building… --- ## [Cutoff Frequency alternatives](https://discuss.elastic.co/t/cutoff-frequency-alternatives/221257)
**Author:** [@enthousiast](https://discuss.elastic.co/u/enthousiast)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 2:30pm UTC](https://discuss.elastic.co/t/cutoff-frequency-alternatives/221257 "2020-02-27T14:30:56Z")
Hello, I'm using Elasticsearch as a search engine for several web applications. I was using cutoff\_frequency to ensure good relevance in different cases : for most of our query, it's used for deleveraging high frequen… --- ## [Customizing Kibana visualizations](https://discuss.elastic.co/t/customizing-kibana-visualizations/220343)
**Author:** [@Stephy\_Jacob](https://discuss.elastic.co/u/Stephy_Jacob)\ **Replies:** 4\ **Last updated:** [February 27, 2020, 2:10pm UTC](https://discuss.elastic.co/t/customizing-kibana-visualizations/220343 "2020-02-27T14:10:35Z")
Hi Team, I have created a Vertical bar chart visualization in Kibana 6.6. Now I wanted to do few things which is not possible directly in Kibana visualization like have d3 formatted label for y-axis so that I read 100… --- ## [Bug with "Filter for field present"?](https://discuss.elastic.co/t/bug-with-filter-for-field-present/221242)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 2\ **Last updated:** [February 27, 2020, 1:19pm UTC](https://discuss.elastic.co/t/bug-with-filter-for-field-present/221242 "2020-02-27T13:19:55Z")
Hello there, I'm wondering if there is a bug in Kiabana 7.6 in the function "Filter for field present" as when I click on it, applied filter is "exists\_exists as you can see here : Thanks for your feedback ! --- ## [Multiple Level with Parent Child Relation](https://discuss.elastic.co/t/multiple-level-with-parent-child-relation/221237)
**Author:** [@mobeit00](https://discuss.elastic.co/u/mobeit00)\ **Replies:** 1\ **Last updated:** [February 27, 2020, 1:11pm UTC](https://discuss.elastic.co/t/multiple-level-with-parent-child-relation/221237 "2020-02-27T13:11:29Z")
Hi I am new to elasticsearch and I am trying to map a folder structure that I want to search. My folders can have any number of subfolders and any number of files. Later I want to be able to search all children from the… --- ## [Unable to view the logs in kibana](https://discuss.elastic.co/t/unable-to-view-the-logs-in-kibana/221238)
**Author:** [@rvb\_n](https://discuss.elastic.co/u/rvb_n)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 12:29pm UTC](https://discuss.elastic.co/t/unable-to-view-the-logs-in-kibana/221238 "2020-02-27T12:29:34Z")
Hi I am getting this log as err log data flow is filebeat\>logstash\>kibana but now not able to view the log in kibana. mi/java\] does not meet this requirement \[2020-02-27T11:12:09,372\]\[WARN \]\[o.e.d.c.s.Settings … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1602) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1604)