# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1651 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1652 --- ## [GUID is not a configured index pattern ID Showing the default index pattern](https://discuss.elastic.co/t/guid-is-not-a-configured-index-pattern-id-showing-the-default-index-pattern/217405)
**Author:** [@daz1761](https://discuss.elastic.co/u/daz1761)\ **Replies:** 3\ **Last updated:** [February 3, 2020, 8:28am UTC](https://discuss.elastic.co/t/guid-is-not-a-configured-index-pattern-id-showing-the-default-index-pattern/217405 "2020-02-03T08:28:58Z")
I am new to ELK, and I have just spun up the containers including Filebeat via Docker Compose to read some dummy logs from a file (see https://github.com/moryachok/elasticstack-lab). When I go to the Discovery tab in Ki… --- ## [How to : Using Ruby filter, Perform db lookup while iterating the array](https://discuss.elastic.co/t/how-to-using-ruby-filter-perform-db-lookup-while-iterating-the-array/217570)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 0\ **Last updated:** [February 3, 2020, 7:53am UTC](https://discuss.elastic.co/t/how-to-using-ruby-filter-perform-db-lookup-while-iterating-the-array/217570 "2020-02-03T07:53:30Z")
My jdbc\_streaming produce an array like this "attachment": \[ { "departmentid" : "2" }\] now i would like to lookup my db using the departmentid, and get the equivalent department name and put it as below "attachment"… --- ## [When will Elasticsearch 7.6.0 be released?](https://discuss.elastic.co/t/when-will-elasticsearch-7-6-0-be-released/217569)
**Author:** [@yc1024](https://discuss.elastic.co/u/yc1024)\ **Replies:** 1\ **Last updated:** [February 3, 2020, 7:32am UTC](https://discuss.elastic.co/t/when-will-elasticsearch-7-6-0-be-released/217569 "2020-02-03T07:32:49Z")
I saw the elasticsearch 7.6.0 release notes on the elasticsearch official website on 2020/01/16, but I never saw the tag of the elasticsearch 7.6.0. When will Elasticsearch 7.6.0 be released? --- ## [Logstash not updating record and not giving any error](https://discuss.elastic.co/t/logstash-not-updating-record-and-not-giving-any-error/216977)
**Author:** [@saifrehman](https://discuss.elastic.co/u/saifrehman)\ **Replies:** 3\ **Last updated:** [February 3, 2020, 7:29am UTC](https://discuss.elastic.co/t/logstash-not-updating-record-and-not-giving-any-error/216977 "2020-02-03T07:29:09Z")
Logstash not updating documents. I am not receiving any error . Here is my code. input{ jdbc { jdbc\_connection\_string =\> "-------" jdbc\_user =\> "------" jdbc\_password =\> "-----" jdbc\_validate\_connection =\> true … --- ## [Parse csv data wrapped in "message" from filebeat in logstash](https://discuss.elastic.co/t/parse-csv-data-wrapped-in-message-from-filebeat-in-logstash/216835)
**Author:** [@mohammad\_hasan\_dabba](https://discuss.elastic.co/u/mohammad_hasan_dabba)\ **Replies:** 6\ **Last updated:** [February 3, 2020, 7:22am UTC](https://discuss.elastic.co/t/parse-csv-data-wrapped-in-message-from-filebeat-in-logstash/216835 "2020-02-03T07:22:39Z")
Hi i'm using filebeat to send jmeter logs to logstash but i have a problem log data are wrapped in "message" key and the value is a csv formatted text i tried to unwrap data with CSV filter plugin in logstash. i can … --- ## [Error while reindexing data: Mixing up field types \[ ES version 5.4.3 \]](https://discuss.elastic.co/t/error-while-reindexing-data-mixing-up-field-types-es-version-5-4-3/217142)
**Author:** [@ashwani2797](https://discuss.elastic.co/u/ashwani2797)\ **Replies:** 2\ **Last updated:** [February 3, 2020, 6:59am UTC](https://discuss.elastic.co/t/error-while-reindexing-data-mixing-up-field-types-es-version-5-4-3/217142 "2020-02-03T06:59:04Z")
Hi Team, I am reindexing data because the required change type of field, but during reindexing, I got the error. Mixing up field types: class org.elasticsearch.index.mapper.KeywordFieldMapper$KeywordFieldType != class … --- ## [.monitoring-es-6-\*インデックスファイルの保存期間変更](https://discuss.elastic.co/t/monitoring-es-6/214927)
**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\ **Replies:** 3\ **Last updated:** [February 3, 2020, 6:23am UTC](https://discuss.elastic.co/t/monitoring-es-6/214927 "2020-02-03T06:23:33Z")
Elasticsearchのディスク容量が閾値を超えたので、indexがロックされました。 原因を調査しました。 原因 monitoring-es-6-\*インデックスファイルが、7個あり、ギガ単位サイズでした。 対処 monitoring-es-6-\*インデックスファイルを7日間保存から1日保存にしました。 しかし、対処の設定が反映されず、.monitoring-es-6-\*のインデックスのファイル数が 一日ごとに、増えて… --- ## [ESの「.monitoring-es-6-yyyymm.dd」の保存期間変更と対象限定について](https://discuss.elastic.co/t/es-monitoring-es-6-yyyymm-dd/217315)
**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\ **Replies:** 2\ **Last updated:** [February 3, 2020, 6:18am UTC](https://discuss.elastic.co/t/es-monitoring-es-6-yyyymm-dd/217315 "2020-02-03T06:18:03Z")
Elasticsearch(6.5.4)にて monitoring機能を有効にしました。 「.monitoring-es-6-yyyymm.dd」のサイズが大きいため保存期間を変更したいです。 デフォルトの7日保存ではなく、3日保存にしたいです。 サイズが大きい「.monitoring-es-6-yyyymm.dd」のindexのみを、 3日保存にすることは可能でしょうか？ 可能でしたら、設定コマンド等をご教示をお願いします… --- ## [What's the best way to sync data between MySQL and Elasticsearch](https://discuss.elastic.co/t/whats-the-best-way-to-sync-data-between-mysql-and-elasticsearch/217558)
**Author:** [@Shafath\_Ahmed](https://discuss.elastic.co/u/Shafath_Ahmed)\ **Replies:** 3\ **Last updated:** [February 3, 2020, 6:15am UTC](https://discuss.elastic.co/t/whats-the-best-way-to-sync-data-between-mysql-and-elasticsearch/217558 "2020-02-03T06:15:14Z")
Hi All We are using MySQL as primary db and Elasticsearch for secondary db(basically for search purpose). We are building a Job Portal. There are mainly three use cases where the search will be performed on Elasticsearc… --- ## [Was anxious to try Kibana 7.5.2 docker. Doesn't work](https://discuss.elastic.co/t/was-anxious-to-try-kibana-7-5-2-docker-doesnt-work/217475)
**Author:** [@initproto](https://discuss.elastic.co/u/initproto)\ **Replies:** 2\ **Last updated:** [February 3, 2020, 4:33am UTC](https://discuss.elastic.co/t/was-anxious-to-try-kibana-7-5-2-docker-doesnt-work/217475 "2020-02-03T04:33:17Z")
Hi, I ran elastic 7.5.2 docker and kibana 7.5.2 docker. I go to the kibana url and it says { "statusCode": 400, "error": "Bad Request", "message": "Invalid cookie header" } A shame. Any idea why it's broken? $ d… --- ## [Search against a scripted field](https://discuss.elastic.co/t/search-against-a-scripted-field/217307)
**Author:** [@martin\_edge](https://discuss.elastic.co/u/martin_edge)\ **Replies:** 3\ **Last updated:** [February 3, 2020, 12:36am UTC](https://discuss.elastic.co/t/search-against-a-scripted-field/217307 "2020-02-03T00:36:34Z")
Hello, I can't make my search work based on a scripted field which returns a number or null. I've tried through the Kibana QL or Lucene but no luck so far. Some examples: ratio :\* returns all the documents, even th… --- ## [Polling New/Modified elasticsearch records to another endpoint](https://discuss.elastic.co/t/polling-new-modified-elasticsearch-records-to-another-endpoint/217530)
**Author:** [@Zee](https://discuss.elastic.co/u/Zee)\ **Replies:** 1\ **Last updated:** [February 3, 2020, 12:32am UTC](https://discuss.elastic.co/t/polling-new-modified-elasticsearch-records-to-another-endpoint/217530 "2020-02-03T00:32:47Z")
Hi, I am trying to find a solution to read all elasticsearch records periodically every 1 minute, that have been modified or newly created in an elasticsearch index. These new records further need to be published using … --- ## [ES 7.3 - Delete by Query - Deletes more than match clause](https://discuss.elastic.co/t/es-7-3-delete-by-query-deletes-more-than-match-clause/217544)
**Author:** [@u3432](https://discuss.elastic.co/u/u3432)\ **Replies:** 6\ **Last updated:** [February 2, 2020, 11:48pm UTC](https://discuss.elastic.co/t/es-7-3-delete-by-query-deletes-more-than-match-clause/217544 "2020-02-02T23:48:39Z")
Hi all, I am using Elastic Stack to process some logs. There are some logs I dont need so decided to delete them. I deleted them using delete by query and setting the match for log.file.path. Here is the curl setup I us… --- ## [Help needed, Elastic+Kibana Ubuntu 18.04.LTS problem](https://discuss.elastic.co/t/help-needed-elastic-kibana-ubuntu-18-04-lts-problem/217507)
**Author:** [@mmalisa12](https://discuss.elastic.co/u/mmalisa12)\ **Replies:** 4\ **Last updated:** [February 2, 2020, 5:16pm UTC](https://discuss.elastic.co/t/help-needed-elastic-kibana-ubuntu-18-04-lts-problem/217507 "2020-02-02T17:16:30Z")
Hi, pretty frustrating installation of Elastic and Kibana. Elastic is running OK, checked with curl, got "You know, for searching" reply. Starting kibana with --allow-root to see where problem is and message is: Licen… --- ## [Agg count only once per parent in nested objects](https://discuss.elastic.co/t/agg-count-only-once-per-parent-in-nested-objects/217267)
**Author:** [@Philipp\_Loew](https://discuss.elastic.co/u/Philipp_Loew)\ **Replies:** 2\ **Last updated:** [February 2, 2020, 3:37pm UTC](https://discuss.elastic.co/t/agg-count-only-once-per-parent-in-nested-objects/217267 "2020-02-02T15:37:22Z")
Hi there, I have a mapping with nested objects, that we use to combine variants to a main product. we do nested aggregations on the variants to find values of certain keys. The agg counts are incremented by one, for ea… --- ## [Multi Filebeats input and one output via logstash](https://discuss.elastic.co/t/multi-filebeats-input-and-one-output-via-logstash/217534)
**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\ **Replies:** 0\ **Last updated:** [February 2, 2020, 3:15pm UTC](https://discuss.elastic.co/t/multi-filebeats-input-and-one-output-via-logstash/217534 "2020-02-02T15:15:05Z")
Hi Hi I have at the moment 2 vm's from where I want to send log files (centos 8 machines) to logstash. I have this input configuration: # 01-inputs.conf input { udp { port =\> 5140 } beats { port =\> 5044 } … --- ## [4096 characters input limitation! missing part of logs in message field](https://discuss.elastic.co/t/4096-characters-input-limitation-missing-part-of-logs-in-message-field/217522)
**Author:** [@kasra](https://discuss.elastic.co/u/kasra)\ **Replies:** 2\ **Last updated:** [February 2, 2020, 2:03pm UTC](https://discuss.elastic.co/t/4096-characters-input-limitation-missing-part-of-logs-in-message-field/217522 "2020-02-02T14:03:17Z")
I have issue with sending logs which have more than 4096 characters! the thing is some of my logs contain more than 4096 characters and the result is jsonparsefailure . I have also used multiline codec for my input but… --- ## [Mcfee Epo XMl part contains unwanted \\".How to remove this](https://discuss.elastic.co/t/mcfee-epo-xml-part-contains-unwanted-how-to-remove-this/217519)
**Author:** [@Ozil](https://discuss.elastic.co/u/Ozil)\ **Replies:** 1\ **Last updated:** [February 2, 2020, 11:25am UTC](https://discuss.elastic.co/t/mcfee-epo-xml-part-contains-unwanted-how-to-remove-this/217519 "2020-02-02T11:25:27Z")
Mcafee EPO XML part contains extra " " " .Because of this xml become invalid. i would like to replace " with ". is that possible.i tried with Gsub mutate { gsub =\> \[ "syslog5424\_msg","\[\\"\]", """\] } its not working p… --- ## [Boost\_factor deprecated?](https://discuss.elastic.co/t/boost-factor-deprecated/217513)
**Author:** [@itmare](https://discuss.elastic.co/u/itmare)\ **Replies:** 0\ **Last updated:** [February 2, 2020, 5:39am UTC](https://discuss.elastic.co/t/boost-factor-deprecated/217513 "2020-02-02T05:39:21Z")
hi, I have a question real quick. It seems like boost\_factor option (functions in function\_score) is deprecated and replaced to weight. Is it right? If it is true, from which version it is changed like that? And why… --- ## [Logstash Avro Kafka Codec issue](https://discuss.elastic.co/t/logstash-avro-kafka-codec-issue/217510)
**Author:** [@Nick11](https://discuss.elastic.co/u/Nick11)\ **Replies:** 0\ **Last updated:** [February 2, 2020, 5:05am UTC](https://discuss.elastic.co/t/logstash-avro-kafka-codec-issue/217510 "2020-02-02T05:05:13Z")
Hi all, I am running a simple logstash pipeline to consume a message from a Kafka topic, which is in AVRO format and display it i on the stdout. I get all empty elements in the logstash output. AVRO Schema (bestMatchin… --- ## [Cluster sitting idle using 80% CPU, System Load over 5, ES 7.4.1](https://discuss.elastic.co/t/cluster-sitting-idle-using-80-cpu-system-load-over-5-es-7-4-1/217063)
**Author:** [@Doc\_Kaos](https://discuss.elastic.co/u/Doc_Kaos)\ **Replies:** 6\ **Last updated:** [February 1, 2020, 7:11pm UTC](https://discuss.elastic.co/t/cluster-sitting-idle-using-80-cpu-system-load-over-5-es-7-4-1/217063 "2020-02-01T19:11:41Z")
After ingesting some test data in our cluster, we are seeing the data nodes run at over 80% CPU and a system load of between 2-5 on each data node when it is just sitting idle. There is nothing ingesting, nothing queryin… --- ## [Reindex data into smallers index](https://discuss.elastic.co/t/reindex-data-into-smallers-index/217336)
**Author:** [@LuigiDelavega](https://discuss.elastic.co/u/LuigiDelavega)\ **Replies:** 3\ **Last updated:** [February 1, 2020, 4:16pm UTC](https://discuss.elastic.co/t/reindex-data-into-smallers-index/217336 "2020-02-01T16:16:23Z")
Hello, I'm looking to aggregate index data to new smallers indexes. I will try to explain myself quickly : I'm getting CPU infos every 30 seconds in A-Index pour real time monitoring. After a week, i would like to get … --- ## [MongoDB Atlas Integration with Logstash through logstash-output-mongodb plugin](https://discuss.elastic.co/t/mongodb-atlas-integration-with-logstash-through-logstash-output-mongodb-plugin/217500)
**Author:** [@rodher](https://discuss.elastic.co/u/rodher)\ **Replies:** 0\ **Last updated:** [February 1, 2020, 4:15pm UTC](https://discuss.elastic.co/t/mongodb-atlas-integration-with-logstash-through-logstash-output-mongodb-plugin/217500 "2020-02-01T16:15:33Z")
Hi I am trying to connect Logstash with MongoDB Atlas using logstash-output-mongodb plugin. However, some issues happen. Currently, I am using logstash 6.7.2, and logtsash-output-plugin version 3.1.6 The integration I… --- ## [How to Create Simple Index in Kibana 7.5.2?](https://discuss.elastic.co/t/how-to-create-simple-index-in-kibana-7-5-2/217489)
**Author:** [@initproto](https://discuss.elastic.co/u/initproto)\ **Replies:** 1\ **Last updated:** [February 1, 2020, 1:39pm UTC](https://discuss.elastic.co/t/how-to-create-simple-index-in-kibana-7-5-2/217489 "2020-02-01T13:39:21Z")
Hi, In previous Kibana, I could point it to an index pattern in my elasticsearch easily. In 7.5.2 I cannot do this? I have an index I created in elastic. I can see it in Kibana. I want to create an index pattern using … --- ## [Copy\_to field in an update script with moving a object field to a nested field?](https://discuss.elastic.co/t/copy-to-field-in-an-update-script-with-moving-a-object-field-to-a-nested-field/217247)
**Author:** [@JPVay](https://discuss.elastic.co/u/JPVay)\ **Replies:** 1\ **Last updated:** [February 1, 2020, 11:30am UTC](https://discuss.elastic.co/t/copy-to-field-in-an-update-script-with-moving-a-object-field-to-a-nested-field/217247 "2020-02-01T11:30:17Z")
version : 7.5 Using JS API but same with REST API making an update like : { index : "myindex", id : pid, refresh : true, body : { "script" : { "source" : " ctx.\_source.Histo.add(ctx.\_source.Actual); ctx.\_source… --- ## [Elasticsearch 7.5.2 Cluster on EC2: Security Group](https://discuss.elastic.co/t/elasticsearch-7-5-2-cluster-on-ec2-security-group/217481)
**Author:** [@ckough](https://discuss.elastic.co/u/ckough)\ **Replies:** 2\ **Last updated:** [February 1, 2020, 11:09am UTC](https://discuss.elastic.co/t/elasticsearch-7-5-2-cluster-on-ec2-security-group/217481 "2020-02-01T11:09:15Z")
Hi There, I'm testing out a 3 x ES Node cluster on EC2. When I set my Security Group to inbound allow all (outbound is allow all in all cases), the cluster has no issue. But when I set a new SG to allow inbound 9200, 9… --- ## [Is it okay to have multiple ES nodes on one machine?](https://discuss.elastic.co/t/is-it-okay-to-have-multiple-es-nodes-on-one-machine/217486)
**Author:** [@Arman\_Ajdani](https://discuss.elastic.co/u/Arman_Ajdani)\ **Replies:** 3\ **Last updated:** [February 1, 2020, 9:53am UTC](https://discuss.elastic.co/t/is-it-okay-to-have-multiple-es-nodes-on-one-machine/217486 "2020-02-01T09:53:12Z")
Is it okay to have multiple ES nodes on one machine? what are the cons to this action? --- ## [How to assign correctly shards when a new node join cluster?](https://discuss.elastic.co/t/how-to-assign-correctly-shards-when-a-new-node-join-cluster/217436)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 3\ **Last updated:** [February 1, 2020, 6:54am UTC](https://discuss.elastic.co/t/how-to-assign-correctly-shards-when-a-new-node-join-cluster/217436 "2020-02-01T06:54:52Z")
Hi, this is my current scenario: 9 DATA nodes A lot of indices (avg size 5 GB and 3 shards and 2 replica) 1 big index (100 GB size and 12 shards and 3 replica) When a new DATA node joins the cluster, Elasticsearch w… --- ## [Search documents with specific field value in time range](https://discuss.elastic.co/t/search-documents-with-specific-field-value-in-time-range/217422)
**Author:** [@PeterH](https://discuss.elastic.co/u/PeterH)\ **Replies:** 1\ **Last updated:** [February 1, 2020, 4:35am UTC](https://discuss.elastic.co/t/search-documents-with-specific-field-value-in-time-range/217422 "2020-02-01T04:35:47Z")
I want to search all documents that have a field "logLevel" set to "WARNING" in the last 24 hours. How do I have to format this query for \_search or python elasticsearch? This is my current query: "query": { "term": {… --- ## [Elasticsearch with TLS for external and HTTP for localhost?](https://discuss.elastic.co/t/elasticsearch-with-tls-for-external-and-http-for-localhost/217428)
**Author:** [@ptselios](https://discuss.elastic.co/u/ptselios)\ **Replies:** 1\ **Last updated:** [February 1, 2020, 4:33am UTC](https://discuss.elastic.co/t/elasticsearch-with-tls-for-external-and-http-for-localhost/217428 "2020-02-01T04:33:37Z")
Is it possible to make Elasticsearch for listen on HTTPS for external traffic (traffic that targets the IP of the machine) and use plain HTTP for localhost connections? I have Kibana on the same host as Elasticsearch an… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1650) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1652)