# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1654 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1655 --- ## [Config file that checks conditions before naming fields](https://discuss.elastic.co/t/config-file-that-checks-conditions-before-naming-fields/217253)
**Author:** [@teezy](https://discuss.elastic.co/u/teezy)\ **Replies:** 4\ **Last updated:** [January 31, 2020, 10:01am UTC](https://discuss.elastic.co/t/config-file-that-checks-conditions-before-naming-fields/217253 "2020-01-31T10:01:06Z")
Hi, I have a secure log file with the following content: Jan 12 08:28:24 name sshd\[11483\]: Did not receive identification string from xx.xxx.xxx.xx port xxxxx Jan 12 08:38:54 name proftpd\[12559\]: xx.xxx.xxx.xx (xx.xxx.x… --- ## [Correct date format for data ingestion](https://discuss.elastic.co/t/correct-date-format-for-data-ingestion/217331)
**Author:** [@T\_Martin\_T](https://discuss.elastic.co/u/T_Martin_T)\ **Replies:** 1\ **Last updated:** [January 31, 2020, 9:58am UTC](https://discuss.elastic.co/t/correct-date-format-for-data-ingestion/217331 "2020-01-31T09:58:06Z")
Hi guys, Im trying to ingest some data and I encountered a problem with the correct date assignment. The following sample of data looks like this: "price\_eur" =\> 4922.28, "engine\_power" =\> 122, "maker" =\> "mazda", … --- ## [java.lang.IllegalArgumentException Error using Bulk Update API](https://discuss.elastic.co/t/java-lang-illegalargumentexception-error-using-bulk-update-api/217306)
**Author:** [@Toshif](https://discuss.elastic.co/u/Toshif)\ **Replies:** 4\ **Last updated:** [January 31, 2020, 9:50am UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-error-using-bulk-update-api/217306 "2020-01-31T09:50:37Z")
Hello people, I am trying to bulk update in elasticSearch using java. I have a JSON list and I'm passing that list in bulk request to update, but its throwing an error as below : Exception in thread "main" java.lang.I… --- ## [Reindex causes mapper\_parsing\_exception](https://discuss.elastic.co/t/reindex-causes-mapper-parsing-exception/217328)
**Author:** [@Gavin\_Hardy](https://discuss.elastic.co/u/Gavin_Hardy)\ **Replies:** 7\ **Last updated:** [January 31, 2020, 9:50am UTC](https://discuss.elastic.co/t/reindex-causes-mapper-parsing-exception/217328 "2020-01-31T09:50:05Z")
Hello, We are currently using Functionbeat to create our templates, and yesterday we started seeing errors. Looking at the index's that were affected, it appears someone had create a custom template, which caused the er… --- ## [So many Error in my cluster](https://discuss.elastic.co/t/so-many-error-in-my-cluster/217333)
**Author:** [@Medidou](https://discuss.elastic.co/u/Medidou)\ **Replies:** 2\ **Last updated:** [January 31, 2020, 9:42am UTC](https://discuss.elastic.co/t/so-many-error-in-my-cluster/217333 "2020-01-31T09:42:32Z")
Hello, (sorry my english) i got so many error, \[2020-01-31T09:18:19,720\]\[WARN \]\[o.e.c.r.a.AllocationService\] \[node-name-01\] \[.monitoring-kibana-6-2020.01.31\]\[0\] marking unavailable shards as stale: \[w\_kcv7S8u9\_B8w\] \[2… --- ## [Logstash JSON codec vs JSON filter performance](https://discuss.elastic.co/t/logstash-json-codec-vs-json-filter-performance/217334)
**Author:** [@TWhitehouse](https://discuss.elastic.co/u/TWhitehouse)\ **Replies:** 0\ **Last updated:** [January 31, 2020, 9:24am UTC](https://discuss.elastic.co/t/logstash-json-codec-vs-json-filter-performance/217334 "2020-01-31T09:24:50Z")
Hey If I have input coming into a pipeline in JSON format, which is faster to use? I have multiple pipeline workers, so multiple threads executing filter+output. I was thinking input would be essentially 1 thread as i… --- ## [ElasticsearchOutput::RecoverableRequestFailure error="could not push logs to Elasticsearch cluster](https://discuss.elastic.co/t/elasticsearchoutput-recoverablerequestfailure-error-could-not-push-logs-to-elasticsearch-cluster/217326)
**Author:** [@Tania\_Saez](https://discuss.elastic.co/u/Tania_Saez)\ **Replies:** 1\ **Last updated:** [January 31, 2020, 9:11am UTC](https://discuss.elastic.co/t/elasticsearchoutput-recoverablerequestfailure-error-could-not-push-logs-to-elasticsearch-cluster/217326 "2020-01-31T09:11:35Z")
Ingesting traffic from td-agent to elasticsearch index created, I see the process fails in the ingestion after some days working fine. This is the error I got and the index stop ingresing traffic: 2020-01-20 05:38:44 +… --- ## [Get All Data Through Elasticsearch](https://discuss.elastic.co/t/get-all-data-through-elasticsearch/217323)
**Author:** [@rickyooi](https://discuss.elastic.co/u/rickyooi)\ **Replies:** 1\ **Last updated:** [January 31, 2020, 9:10am UTC](https://discuss.elastic.co/t/get-all-data-through-elasticsearch/217323 "2020-01-31T09:10:19Z")
Hi, How to write an elastic query to return all data instead of putting size in the query? As I try a query without putting size, it just return 10 sets of data. --- ## [Substring not returning consistent result](https://discuss.elastic.co/t/substring-not-returning-consistent-result/217330)
**Author:** [@Laxmi\_Barthwal](https://discuss.elastic.co/u/Laxmi_Barthwal)\ **Replies:** 0\ **Last updated:** [January 31, 2020, 9:04am UTC](https://discuss.elastic.co/t/substring-not-returning-consistent-result/217330 "2020-01-31T09:04:20Z")
When using scripted fields to extract date from \_source field ( log.keyword) , then getting date as january1 1970 in some case and in some case getting correct date. My script is for test2 : returns Date if (doc\['… --- ## [Sorting on field which in text data type but integer will be store](https://discuss.elastic.co/t/sorting-on-field-which-in-text-data-type-but-integer-will-be-store/217046)
**Author:** [@Gopal\_Chauhan](https://discuss.elastic.co/u/Gopal_Chauhan)\ **Replies:** 3\ **Last updated:** [January 31, 2020, 9:05am UTC](https://discuss.elastic.co/t/sorting-on-field-which-in-text-data-type-but-integer-will-be-store/217046 "2020-01-31T09:05:32Z")
Hi, We have a field in index - TempNo which has to be text type but all values in this field are number (integer) When i am doing sorting (desc) on this field , sort does not happen correctly. I am not getting result i… --- ## [Logstash as syslog server - TCP is not working](https://discuss.elastic.co/t/logstash-as-syslog-server-tcp-is-not-working/217044)
**Author:** [@ptselios](https://discuss.elastic.co/u/ptselios)\ **Replies:** 1\ **Last updated:** [January 31, 2020, 8:35am UTC](https://discuss.elastic.co/t/logstash-as-syslog-server-tcp-is-not-working/217044 "2020-01-31T08:35:34Z")
Hello, I am completely new to the ELK stack and I have just installed an ELK all-in-one machine for testing purposes. In our organization we want to send all syslog messages to logstash and then to ES. I have the follo… --- ## [Add aws profile arn in elastic keystore](https://discuss.elastic.co/t/add-aws-profile-arn-in-elastic-keystore/217316)
**Author:** [@Sudharshan\_K\_S](https://discuss.elastic.co/u/Sudharshan_K_S)\ **Replies:** 0\ **Last updated:** [January 31, 2020, 8:09am UTC](https://discuss.elastic.co/t/add-aws-profile-arn-in-elastic-keystore/217316 "2020-01-31T08:09:45Z")
How can I add the profile arn into the elastic keystore since there is already a way to add the s3 access key and secret key. This is regarding the snapshots with s3 repositry. I have followed the steps as given here h… --- ## [ElasticSearch Input and data manipulation](https://discuss.elastic.co/t/elasticsearch-input-and-data-manipulation/217252)
**Author:** [@Stefano\_Bossi](https://discuss.elastic.co/u/Stefano_Bossi)\ **Replies:** 3\ **Last updated:** [January 31, 2020, 8:04am UTC](https://discuss.elastic.co/t/elasticsearch-input-and-data-manipulation/217252 "2020-01-31T08:04:01Z")
I am trying to use the ES input plugin for logstash to further manipulate some data and reinsert the data into ES. I have a logstash filter like this: input { elasticsearch { hosts =\> \[ "ms-master… --- ## [Tuning refresh interval for eck cluster](https://discuss.elastic.co/t/tuning-refresh-interval-for-eck-cluster/217291)
**Author:** [@dineshabbi](https://discuss.elastic.co/u/dineshabbi)\ **Replies:** 1\ **Last updated:** [January 31, 2020, 7:34am UTC](https://discuss.elastic.co/t/tuning-refresh-interval-for-eck-cluster/217291 "2020-01-31T07:34:55Z")
How can I configure certain cluster/index settings from elasticsearch.yaml ? Say if I want to tune index.refresh\_interval ? Whats the default value used by the eck ? --- ## [X-pack setup procedure for 3 node architecture](https://discuss.elastic.co/t/x-pack-setup-procedure-for-3-node-architecture/217061)
**Author:** [@RaV\_Theja\_sharma](https://discuss.elastic.co/u/RaV_Theja_sharma)\ **Replies:** 2\ **Last updated:** [January 31, 2020, 7:00am UTC](https://discuss.elastic.co/t/x-pack-setup-procedure-for-3-node-architecture/217061 "2020-01-31T07:00:59Z")
Hi, We are planing to buy x-pack gold, we are not aware of the entire process from buying to the implementation in our 3 ES node environments, Please suggest us the process. Thanks in advance. --- ## [MongoDB Input threw an exception, restarting {:exception=\>#\ **Author:** [@Raghala\_Purushotham](https://discuss.elastic.co/u/Raghala_Purushotham)\ **Replies:** 0\ **Last updated:** [January 31, 2020, 6:33am UTC](https://discuss.elastic.co/t/mongodb-input-threw-an-exception-restarting-exception-bson/217302 "2020-01-31T06:33:22Z") Hi, I am trying to import the data from MongoDB to Elastic. As part of that, I am using the "logstash-input-mongodb" as an input plugin. But I am facing the below error while importing it. Conf file: input { mongodb { … --- ## [Elasticsearch index read only](https://discuss.elastic.co/t/elasticsearch-index-read-only/217304)
**Author:** [@rj23495](https://discuss.elastic.co/u/rj23495)\ **Replies:** 0\ **Last updated:** [January 31, 2020, 6:42am UTC](https://discuss.elastic.co/t/elasticsearch-index-read-only/217304 "2020-01-31T06:42:50Z")
I have 1.7tb of disk space available for my indices but when the indices occupy around 1.2tb, indices state is changed to read only. This is a managed elasticsearch service. Need to understand the reason because normally… --- ## [How To remove \\ from the existing log formate](https://discuss.elastic.co/t/how-to-remove-from-the-existing-log-formate/217295)
**Author:** [@Ozil](https://discuss.elastic.co/u/Ozil)\ **Replies:** 3\ **Last updated:** [January 31, 2020, 5:19am UTC](https://discuss.elastic.co/t/how-to-remove-from-the-existing-log-formate/217295 "2020-01-31T05:19:11Z")
Hi all I am trying to parse McFee EPO logs using logstash. I am using the combination of grok and XML filter to parse the log. In the input data set there are few \\ within the XML part so I am not able to parse the log … --- ## [Logstash Mysql](https://discuss.elastic.co/t/logstash-mysql/217301)
**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\ **Replies:** 0\ **Last updated:** [January 31, 2020, 6:24am UTC](https://discuss.elastic.co/t/logstash-mysql/217301 "2020-01-31T06:24:32Z")
I make connectivity of elk stack with mysql. I parse the data from mysql it works perfectly but when i parse the one table with select \* command it tells me that unique id \>0 but when i make a view of that table it parse… --- ## [Unable to launch kibana from elastic search deployment](https://discuss.elastic.co/t/unable-to-launch-kibana-from-elastic-search-deployment/217138)
**Author:** [@ysunil702](https://discuss.elastic.co/u/ysunil702)\ **Replies:** 1\ **Last updated:** [January 31, 2020, 6:02am UTC](https://discuss.elastic.co/t/unable-to-launch-kibana-from-elastic-search-deployment/217138 "2020-01-31T06:02:16Z")
i am launching URL of kibana from elastic search deployment but there is showing message "This site cant be reached". --- ## [Time mismatch @timestamp and message](https://discuss.elastic.co/t/time-mismatch-timestamp-and-message/216999)
**Author:** [@faridmmv](https://discuss.elastic.co/u/faridmmv)\ **Replies:** 11\ **Last updated:** [January 31, 2020, 5:37am UTC](https://discuss.elastic.co/t/time-mismatch-timestamp-and-message/216999 "2020-01-31T05:37:45Z")
Hi. How can i configure logstash to have @timestamp and message time equal. My Config is: input { beats { port =\> 5044 } } filter { if \[type\] == "syslog" { grok { match =\> { "message" =\> "%{SYSLOGTIMESTAMP:… --- ## [Scaling :logstash with reading MARIADB as input and elasticsearch is the output](https://discuss.elastic.co/t/scaling-logstash-with-reading-mariadb-as-input-and-elasticsearch-is-the-output/217292)
**Author:** [@pranab155](https://discuss.elastic.co/u/pranab155)\ **Replies:** 0\ **Last updated:** [January 31, 2020, 4:06am UTC](https://discuss.elastic.co/t/scaling-logstash-with-reading-mariadb-as-input-and-elasticsearch-is-the-output/217292 "2020-01-31T04:06:18Z")
Hi , i have below queries , 1.can we read by two instance of logstash from same table ensuring there is no duplicate record read by either of instance and table has pk column name as "seq\_No" 2. if elastic search is … --- ## [Horizontal and vertical upgrade of eck cluster](https://discuss.elastic.co/t/horizontal-and-vertical-upgrade-of-eck-cluster/210309)
**Author:** [@dineshabbi](https://discuss.elastic.co/u/dineshabbi)\ **Replies:** 2\ **Last updated:** [January 31, 2020, 3:46am UTC](https://discuss.elastic.co/t/horizontal-and-vertical-upgrade-of-eck-cluster/210309 "2020-01-31T03:46:09Z")
As per the documentation, I tried doing upgrades of the cluster using some of the examples given in https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-orchestration.html a) Horizontal upgrade: I see a new service … --- ## [NGram Tokenizerについて](https://discuss.elastic.co/t/ngram-tokenizer/217161)
**Author:** [@Yukie](https://discuss.elastic.co/u/Yukie)\ **Replies:** 4\ **Last updated:** [January 31, 2020, 2:50am UTC](https://discuss.elastic.co/t/ngram-tokenizer/217161 "2020-01-31T02:50:01Z")
はじめまして。 Elasticsearch初心者です。 日本語・英語・記号など、さまざまな文字が含まれるデータの中より、 単純に指定した文字が含まれる（部分一致）データを抽出しようとしています。 指定する文字は「１文字～」です。 ngram\_tokenizer: { type: "nGram", min\_gram: "1", max\_gram: "2", token\_chars: \["lette… --- ## [Scripted fields to convert IP string to GeoIP?](https://discuss.elastic.co/t/scripted-fields-to-convert-ip-string-to-geoip/217243)
**Author:** [@Rahul\_Kumar4](https://discuss.elastic.co/u/Rahul_Kumar4)\ **Replies:** 5\ **Last updated:** [January 31, 2020, 1:14am UTC](https://discuss.elastic.co/t/scripted-fields-to-convert-ip-string-to-geoip/217243 "2020-01-31T01:14:17Z")
Is the possible to use Kibana Scripted fields (Using Painless) to convert an IP address field (that is currently indexed as a string) to a GeoJSON object (geoip datatype) field? --- ## [Could not index event to Elasticsearch, failed to parse \[timestamp\]](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-failed-to-parse-timestamp/216742)
**Author:** [@klang](https://discuss.elastic.co/u/klang)\ **Replies:** 2\ **Last updated:** [January 30, 2020, 10:44pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-failed-to-parse-timestamp/216742 "2020-01-30T22:44:18Z")
Good evening, I'm pushing JSON content from filebeats to logstash and I'm receiving a 'failed to parse \[timestamp\]' error and don't understand what is wrong but to be fair, I'm, pretty green to this technology. Sample … --- ## [Unable to log in elastic using the non-default user's username and password](https://discuss.elastic.co/t/unable-to-log-in-elastic-using-the-non-default-users-username-and-password/216937)
**Author:** [@pingz](https://discuss.elastic.co/u/pingz)\ **Replies:** 3\ **Last updated:** [January 30, 2020, 10:27pm UTC](https://discuss.elastic.co/t/unable-to-log-in-elastic-using-the-non-default-users-username-and-password/216937 "2020-01-30T22:27:06Z")
I was able to successfully create a user 'test1' and assign it the superuser role. Execute rest api POST /\_security/user/test1?pretty { "password" : "test@1", "roles" : \[ "superuser"\], "full\_name" : "Test User", "… --- ## [Kibana's Top Hits aggregation "sort by" field broken](https://discuss.elastic.co/t/kibanas-top-hits-aggregation-sort-by-field-broken/216971)
**Author:** [@mrotmann](https://discuss.elastic.co/u/mrotmann)\ **Replies:** 3\ **Last updated:** [January 30, 2020, 9:49pm UTC](https://discuss.elastic.co/t/kibanas-top-hits-aggregation-sort-by-field-broken/216971 "2020-01-30T21:49:19Z")
I am using Kibana to visualizing some data. The "terms aggregation" is kind of broken. It looks like this: So there are to fields named "field", i guess one of whose should be "sortBy" (referring to screenshots acros… --- ## [Setting up an coordinating node](https://discuss.elastic.co/t/setting-up-an-coordinating-node/217277)
**Author:** [@jnpetty](https://discuss.elastic.co/u/jnpetty)\ **Replies:** 0\ **Last updated:** [January 30, 2020, 9:35pm UTC](https://discuss.elastic.co/t/setting-up-an-coordinating-node/217277 "2020-01-30T21:35:37Z")
Currently we have a 4 node ES cluster and separate LS and Kibana nodes. I am thinking about setting up a coordinating node alongside Kibana. My goal if to make Kibana a little more resilient and functional when I am doin… --- ## [Exact Match with Synonyms](https://discuss.elastic.co/t/exact-match-with-synonyms/216735)
**Author:** [@plawler92](https://discuss.elastic.co/u/plawler92)\ **Replies:** 1\ **Last updated:** [January 30, 2020, 9:24pm UTC](https://discuss.elastic.co/t/exact-match-with-synonyms/216735 "2020-01-30T21:24:45Z")
Hi, I have a field containing city names that I would like to get the exact city name out of while still utilizing synonyms. So If I searched for either "St Louis" or "Saint Louis" I would get back "Saint Louis" but no… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1653) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1655)