# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1612 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1613 --- ## [Elast Alert](https://discuss.elastic.co/t/elast-alert/220577)
**Author:** [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 8:56am UTC](https://discuss.elastic.co/t/elast-alert/220577 "2020-02-24T08:56:15Z")
Hi all, I am new to elastic search. I want my ELK stack to generate an alert on the basic of 3 login failed attempts. Can any one help me out that how to achieve this. Need guidance on this. --- ## [I am trying to install elasticsearch on google cloud the status is active although it isn’t letting me connect to 9200 port](https://discuss.elastic.co/t/i-am-trying-to-install-elasticsearch-on-google-cloud-the-status-is-active-although-it-isn-t-letting-me-connect-to-9200-port/220451)
**Author:** [@ms94](https://discuss.elastic.co/u/ms94)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 8:46am UTC](https://discuss.elastic.co/t/i-am-trying-to-install-elasticsearch-on-google-cloud-the-status-is-active-although-it-isn-t-letting-me-connect-to-9200-port/220451 "2020-02-24T08:46:06Z")
I am trying to install elasticsearch on google cloud the status is active although it isn’t letting me connect to 9200 port --- ## [Does ECK offer log collection directly from files in kubernetes](https://discuss.elastic.co/t/does-eck-offer-log-collection-directly-from-files-in-kubernetes/220574)
**Author:** [@kumar\_kung](https://discuss.elastic.co/u/kumar_kung)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 8:23am UTC](https://discuss.elastic.co/t/does-eck-offer-log-collection-directly-from-files-in-kubernetes/220574 "2020-02-24T08:23:25Z")
Does ECK 1.0.0 GA offer log collection directly from files in kubernetes ? Or pls guide me to it --- ## [For indexing product attributes, more short text fields vs fewer fields with more words](https://discuss.elastic.co/t/for-indexing-product-attributes-more-short-text-fields-vs-fewer-fields-with-more-words/220548)
**Author:** [@Fong\_Ng](https://discuss.elastic.co/u/Fong_Ng)\ **Replies:** 0\ **Last updated:** [February 23, 2020, 12:35pm UTC](https://discuss.elastic.co/t/for-indexing-product-attributes-more-short-text-fields-vs-fewer-fields-with-more-words/220548 "2020-02-23T12:35:12Z")
I am planning to use elasticsearch to index product attributes. Each document should have around 60 fixed fields. I was reading the documentation about tuning for search speed. It mentions that when query\_string or multi… --- ## [\_jsonparsefailure with special characters?](https://discuss.elastic.co/t/jsonparsefailure-with-special-characters/220585)
**Author:** [@barryb](https://discuss.elastic.co/u/barryb)\ **Replies:** 0\ **Last updated:** [February 24, 2020, 7:53am UTC](https://discuss.elastic.co/t/jsonparsefailure-with-special-characters/220585 "2020-02-24T07:53:34Z")
We are getting \_jsonparsefailure for some records being input from a client in France We have a copy of their Database and when importing with the same logstash.config file we succeed in parsing all the records correctl… --- ## [Install index mapping stored in a file - elasticsearch 7.x](https://discuss.elastic.co/t/install-index-mapping-stored-in-a-file-elasticsearch-7-x/220355)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 7:38am UTC](https://discuss.elastic.co/t/install-index-mapping-stored-in-a-file-elasticsearch-7-x/220355 "2020-02-24T07:38:56Z")
Hi there, I have a json file with an index mapping definition in it. What is the best way to import it into elasticsearch? I would like to do it via curl / CLI. Cheers! --- ## [Elasticsearch fails to start when xpack security is enabled](https://discuss.elastic.co/t/elasticsearch-fails-to-start-when-xpack-security-is-enabled/220514)
**Author:** [@ljacobs7211](https://discuss.elastic.co/u/ljacobs7211)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 6:06am UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-when-xpack-security-is-enabled/220514 "2020-02-24T06:06:23Z")
Caused by: java.lang.IllegalStateException: failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin\] at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:614) ~\[elasticsearch-7.5.0.ja… --- ## [Quantitative Cluster Sizing](https://discuss.elastic.co/t/quantitative-cluster-sizing/219850)
**Author:** [@sks1234](https://discuss.elastic.co/u/sks1234)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 5:35am UTC](https://discuss.elastic.co/t/quantitative-cluster-sizing/219850 "2020-02-24T05:35:21Z")
Hi I am looking for Sizing Elastic Search Cluster and came across below session which is very informative. https://www.elastic.co/webinars/elasticsearch-sizing-and-capacity-planning I have few questions regarding the se… --- ## [Curator image not working with centos 8 base image](https://discuss.elastic.co/t/curator-image-not-working-with-centos-8-base-image/219970)
**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\ **Replies:** 5\ **Last updated:** [February 24, 2020, 5:27am UTC](https://discuss.elastic.co/t/curator-image-not-working-with-centos-8-base-image/219970 "2020-02-24T05:27:35Z")
Hi, I am trying to build curator image with centos 8 base image. Image is getting built but it is throwing below error while running: Traceback (most recent call last): File "/home/buh/.local/lib/python3.6/site-pack… --- ## [Logstash shutdown after executing command for MS SQL writing to elastic search](https://discuss.elastic.co/t/logstash-shutdown-after-executing-command-for-ms-sql-writing-to-elastic-search/220547)
**Author:** [@yashjain](https://discuss.elastic.co/u/yashjain)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 5:20am UTC](https://discuss.elastic.co/t/logstash-shutdown-after-executing-command-for-ms-sql-writing-to-elastic-search/220547 "2020-02-24T05:20:50Z")
The logstash runner shutsdown after executing the index once for MS SQL writing data to elastic search db. The conf file: input { jdbc { jdbc\_driver\_library =\> "C:\\MicrosoftSQLJDBCDriver\\sqljdbc\_4.2\\enu\\jre8\\sqljdb… --- ## [Tutorial Recommendations](https://discuss.elastic.co/t/tutorial-recommendations/220457)
**Author:** [@sroseman](https://discuss.elastic.co/u/sroseman)\ **Replies:** 1\ **Last updated:** [February 24, 2020, 4:18am UTC](https://discuss.elastic.co/t/tutorial-recommendations/220457 "2020-02-24T04:18:48Z")
Does anyone have any recommendations on tutorials to watch/read regarding understanding how to set up everything like Beats so that you can see the data in Kibana? I'm having a hard time understanding how to configure mo… --- ## [Remove part of message string BEFORE and AFTER config](https://discuss.elastic.co/t/remove-part-of-message-string-before-and-after-config/220470)
**Author:** [@isarib](https://discuss.elastic.co/u/isarib)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 1:58am UTC](https://discuss.elastic.co/t/remove-part-of-message-string-before-and-after-config/220470 "2020-02-24T01:58:54Z")
Hi, Message: /merlion/dpa2/cn133ta/j4\_sryuo/j4\_02\_sv\_ip I am trying to find a way to remove the strings BEFORE and AFTER a defined string in a message. In this message, the constant value is dpa2, and I want to discar… --- ## [Filebeat: daemonset mounting /var/lib/kubelet/pods not seeing new pvc data](https://discuss.elastic.co/t/filebeat-daemonset-mounting-var-lib-kubelet-pods-not-seeing-new-pvc-data/220244)
**Author:** [@Patrick\_Lieberg](https://discuss.elastic.co/u/Patrick_Lieberg)\ **Replies:** 1\ **Last updated:** [February 23, 2020, 9:35pm UTC](https://discuss.elastic.co/t/filebeat-daemonset-mounting-var-lib-kubelet-pods-not-seeing-new-pvc-data/220244 "2020-02-23T21:35:49Z")
We have a filebeat daemonset in our kubernetes cluster and we have mount the /var/lib/kubelet/pods hostpath from the host node so we can collect log data stored on pvc's. When a new application pod comes online and a n… --- ## [Parse numbers from Storage units in logs](https://discuss.elastic.co/t/parse-numbers-from-storage-units-in-logs/218400)
**Author:** [@nmoham](https://discuss.elastic.co/u/nmoham)\ **Replies:** 9\ **Last updated:** [February 23, 2020, 9:23pm UTC](https://discuss.elastic.co/t/parse-numbers-from-storage-units-in-logs/218400 "2020-02-23T21:23:44Z")
Extract the NUMBER from logs with storage sizes. Sample Logs - physical.memory.total=31.4G, physical.memory.free=18.8G, swap.space.total=7.8G, swap.space.free=7.8G, heap.memory.used=4.5G, heap.memory.free=536.5M, heap.… --- ## [Elasticsearch mappings for ASA](https://discuss.elastic.co/t/elasticsearch-mappings-for-asa/220515)
**Author:** [@digger86](https://discuss.elastic.co/u/digger86)\ **Replies:** 9\ **Last updated:** [February 23, 2020, 9:03pm UTC](https://discuss.elastic.co/t/elasticsearch-mappings-for-asa/220515 "2020-02-23T21:03:18Z")
I am new to using the Elastic stack. What is most important to me is to collect firewall logs from an ASA. One of the challenges is that I cannot not search for networks in the logs because the IP addresses are mapped to… --- ## [Connection performance Logstash =\> Logstash (Lumberjack protocol) - solution performance](https://discuss.elastic.co/t/connection-performance-logstash-logstash-lumberjack-protocol-solution-performance/220566)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 0\ **Last updated:** [February 23, 2020, 7:02pm UTC](https://discuss.elastic.co/t/connection-performance-logstash-logstash-lumberjack-protocol-solution-performance/220566 "2020-02-23T19:02:11Z")
Connection performance Logstash =\> Logstash (Lumberjack protocol) - solution performance I have a question about Logstash =\> Logstash connection (data flow between two different Logstashes on different physical machines… --- ## [Elasticsearch ec2 plugin configuration fail](https://discuss.elastic.co/t/elasticsearch-ec2-plugin-configuration-fail/219432)
**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\ **Replies:** 12\ **Last updated:** [February 23, 2020, 4:09pm UTC](https://discuss.elastic.co/t/elasticsearch-ec2-plugin-configuration-fail/219432 "2020-02-23T16:09:30Z")
I am trying to configure an elasticsearch cluster in aws using the ec2 discovery plugin. I am running on Elasticsearch 7.6 . I have attached an instance-profile that has all the access for ec2. The logs are saying \*\* mas… --- ## [Executing elasticsearch-sql using painless script](https://discuss.elastic.co/t/executing-elasticsearch-sql-using-painless-script/220488)
**Author:** [@yoavb](https://discuss.elastic.co/u/yoavb)\ **Replies:** 1\ **Last updated:** [February 23, 2020, 4:02pm UTC](https://discuss.elastic.co/t/executing-elasticsearch-sql-using-painless-script/220488 "2020-02-23T16:02:36Z")
Hello, \_xpack/sql?format=txt enable to run sql queries using curl. I was wondering if it is possible to run sql queries using painless script. If it is possible , kindly share an example Thanks Yoav --- ## [Elasticsearch Unreachable: hosted in aws from logstash](https://discuss.elastic.co/t/elasticsearch-unreachable-hosted-in-aws-from-logstash/220558)
**Author:** [@Ravikumar\_K](https://discuss.elastic.co/u/Ravikumar_K)\ **Replies:** 0\ **Last updated:** [February 23, 2020, 2:47pm UTC](https://discuss.elastic.co/t/elasticsearch-unreachable-hosted-in-aws-from-logstash/220558 "2020-02-23T14:47:57Z")
Hi, I am trying to connect to Elastic search hosted in aws from an EC2 instance via logstash getting below error. \[2020-02-23T14:46:08,685\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Attempted to resurrect connection… --- ## [Format Histogram tick labels](https://discuss.elastic.co/t/format-histogram-tick-labels/220556)
**Author:** [@ranitg](https://discuss.elastic.co/u/ranitg)\ **Replies:** 0\ **Last updated:** [February 23, 2020, 2:20pm UTC](https://discuss.elastic.co/t/format-histogram-tick-labels/220556 "2020-02-23T14:20:06Z")
Hi, I am trying to format the x-axis tick labels. I have a histogram that counts documents according to hour of day (0 to 23). On the visualization I want the x-axis ticks to be 0:00, 1:00 ... 23:00. How can I achieve t… --- ## [Logstash errors about no available connections in the connection pool with elastic in the same server](https://discuss.elastic.co/t/logstash-errors-about-no-available-connections-in-the-connection-pool-with-elastic-in-the-same-server/220554)
**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\ **Replies:** 0\ **Last updated:** [February 23, 2020, 2:09pm UTC](https://discuss.elastic.co/t/logstash-errors-about-no-available-connections-in-the-connection-pool-with-elastic-in-the-same-server/220554 "2020-02-23T14:09:13Z")
Hi All, I noticed that one pipeline was falling behind and I checked the logs where I found the following entries, which should mean that there are no available connections or routes to elastic but both instances run in… --- ## [Increasing replicas vs increasing machine](https://discuss.elastic.co/t/increasing-replicas-vs-increasing-machine/220552)
**Author:** [@royal\_man](https://discuss.elastic.co/u/royal_man)\ **Replies:** 0\ **Last updated:** [February 23, 2020, 1:32pm UTC](https://discuss.elastic.co/t/increasing-replicas-vs-increasing-machine/220552 "2020-02-23T13:32:41Z")
I want to get opinion on increasing the number of replicas vs increasing machine size. Configuration: 1 node 1 shard architecture and I want to double the load on my Elasticsearch cluster. Increasing replicas: If I ma… --- ## [Link to an image file in Kibana](https://discuss.elastic.co/t/link-to-an-image-file-in-kibana/220034)
**Author:** [@J.K](https://discuss.elastic.co/u/J.K)\ **Replies:** 2\ **Last updated:** [February 23, 2020, 1:29pm UTC](https://discuss.elastic.co/t/link-to-an-image-file-in-kibana/220034 "2020-02-23T13:29:08Z")
In Kibana Index Patterns there is a field that contains a link to an image. The image is saved on my local machine, so to open the image in the chrome explorer I have to put the url: "file://thePath/fileName.png". In … --- ## [Disk space full elasticsearch](https://discuss.elastic.co/t/disk-space-full-elasticsearch/220037)
**Author:** [@Ilija\_Angeloski](https://discuss.elastic.co/u/Ilija_Angeloski)\ **Replies:** 10\ **Last updated:** [February 23, 2020, 11:00am UTC](https://discuss.elastic.co/t/disk-space-full-elasticsearch/220037 "2020-02-23T11:00:35Z")
After I deleted all the indices the disk space is still almost full, no place is freed up. I tried \`\`\` curl -XPOST 'http://localhost:9200/\_forcemerge?only\_expunge\_deletes=true', but still the disk has same amount. Is th… --- ## [Count of Elastic Search index varying when querying through Presto](https://discuss.elastic.co/t/count-of-elastic-search-index-varying-when-querying-through-presto/220537)
**Author:** [@Mananpreet\_Singh](https://discuss.elastic.co/u/Mananpreet_Singh)\ **Replies:** 0\ **Last updated:** [February 23, 2020, 9:48am UTC](https://discuss.elastic.co/t/count-of-elastic-search-index-varying-when-querying-through-presto/220537 "2020-02-23T09:48:41Z")
--- ## [How to attach an attachment in the logstash output email](https://discuss.elastic.co/t/how-to-attach-an-attachment-in-the-logstash-output-email/220530)
**Author:** [@kc55](https://discuss.elastic.co/u/kc55)\ **Replies:** 0\ **Last updated:** [February 23, 2020, 5:37am UTC](https://discuss.elastic.co/t/how-to-attach-an-attachment-in-the-logstash-output-email/220530 "2020-02-23T05:37:21Z")
Hi all, In the guide format , they said the attachment is using array. However after the format and it seems the email has been sent but no attachment in it. output { if "shouldmail" in \[tags\] { email { to =\>… --- ## [Transforming/filtering json logs](https://discuss.elastic.co/t/transforming-filtering-json-logs/220523)
**Author:** [@swisscheese](https://discuss.elastic.co/u/swisscheese)\ **Replies:** 0\ **Last updated:** [February 23, 2020, 2:34am UTC](https://discuss.elastic.co/t/transforming-filtering-json-logs/220523 "2020-02-23T02:34:18Z")
I have some WAF logs (from AWS) that are already in json format. I want to modify them with logstash in a few specific ways, and it’s not clear to me from the docs what the best way to do this is. Hoping someone can poin… --- ## [Проблема с поиском с сортировкой по дистанции](https://discuss.elastic.co/t/topic/220516)
**Author:** [@Vivaldy](https://discuss.elastic.co/u/Vivaldy)\ **Replies:** 2\ **Last updated:** [February 23, 2020, 1:59am UTC](https://discuss.elastic.co/t/topic/220516 "2020-02-23T01:59:26Z")
Если делаю поиск без сортировки то все выдает отлично, координаты в данных есть, типа geo\_point, однако если делаю такой запрос: GET \_search { "sort" : \[{ "\_geo\_distance" : { "geo\_location" : \[56.… --- ## [ElasticSearch won’t install](https://discuss.elastic.co/t/elasticsearch-won-t-install/220493)
**Author:** [@GulfTower](https://discuss.elastic.co/u/GulfTower)\ **Replies:** 1\ **Last updated:** [February 22, 2020, 5:10pm UTC](https://discuss.elastic.co/t/elasticsearch-won-t-install/220493 "2020-02-22T17:10:58Z")
Trying to install Elasticsearch 7.6 on my Win10 laptop. Getting the error below i've bolded: C:\\WINDOWS\\system32\>cd C:\\ELK Stack\\elasticsearch-7.6.0\\bin C:\\ELK Stack\\elasticsearch-7.6.0\\bin\>elasticsearch.bat "could n… --- ## [How to remove fuzziness in Simple Query String?](https://discuss.elastic.co/t/how-to-remove-fuzziness-in-simple-query-string/220078)
**Author:** [@photocurio](https://discuss.elastic.co/u/photocurio)\ **Replies:** 7\ **Last updated:** [February 22, 2020, 4:31pm UTC](https://discuss.elastic.co/t/how-to-remove-fuzziness-in-simple-query-string/220078 "2020-02-22T16:31:00Z")
I am trying to disable fuzziness in my ElasticSearch query. The issue is that a search for medication returns lots of hits for medical. My query is below. The fuzzy\_max\_expansions arg doesn't have any effect. If I ad… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1611) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1613)