# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1656 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1657 --- ## [Collecte, traitement et analyse des informations avec ELK](https://discuss.elastic.co/t/collecte-traitement-et-analyse-des-informations-avec-elk/217207)
**Author:** [@QuentinRogeret](https://discuss.elastic.co/u/QuentinRogeret)\ **Replies:** 3\ **Last updated:** [January 30, 2020, 3:14pm UTC](https://discuss.elastic.co/t/collecte-traitement-et-analyse-des-informations-avec-elk/217207 "2020-01-30T15:14:52Z")
Bonjour à tous, Je suis actuellement en pleine recherche de la stack "parfaite" ( évidemment ) pour un projet dans l'entreprise ou je travaille actuellement. Pour description simple je dois : Collecter des données à … --- ## [How i can work with kibana (Grockl)](https://discuss.elastic.co/t/how-i-can-work-with-kibana-grockl/217218)
**Author:** [@Sergey\_Serov](https://discuss.elastic.co/u/Sergey_Serov)\ **Replies:** 0\ **Last updated:** [January 30, 2020, 3:02pm UTC](https://discuss.elastic.co/t/how-i-can-work-with-kibana-grockl/217218 "2020-01-30T15:02:58Z")
I'm not sure what it's called, sort of grok maybe ) Do not judge strictly) today I am the first day with ELK. I have a problem with fields received from Windows Server. 'Execution ProcessID' = 'ProcessId' Can someone… --- ## [Trouble comparing fields of 2 separate index](https://discuss.elastic.co/t/trouble-comparing-fields-of-2-separate-index/217215)
**Author:** [@Preeti](https://discuss.elastic.co/u/Preeti)\ **Replies:** 0\ **Last updated:** [January 30, 2020, 2:47pm UTC](https://discuss.elastic.co/t/trouble-comparing-fields-of-2-separate-index/217215 "2020-01-30T14:47:41Z")
Hi All, Need advise in creating a watch which will compare 2 text fields present in 2 different indexes. Condition is if any word present in field of 2nd index is found in field of 1st index, it should alert. Eg - In… --- ## [Elasticsearch and deb repository (specific version?)](https://discuss.elastic.co/t/elasticsearch-and-deb-repository-specific-version/217057)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 1\ **Last updated:** [January 30, 2020, 2:37pm UTC](https://discuss.elastic.co/t/elasticsearch-and-deb-repository-specific-version/217057 "2020-01-30T14:37:18Z")
Hi! In the documentation we can find information: Save the repository definition to /etc/apt/sources.list.d/elastic-7.x.list : echo "deb https://artifacts.elastic.co/packages/7.x/apt stable main" | sudo tee -a /etc/… --- ## [Mapping; extract substring from URL as its own field](https://discuss.elastic.co/t/mapping-extract-substring-from-url-as-its-own-field/217128)
**Author:** [@Tobias\_Eriksson](https://discuss.elastic.co/u/Tobias_Eriksson)\ **Replies:** 1\ **Last updated:** [January 30, 2020, 2:29pm UTC](https://discuss.elastic.co/t/mapping-extract-substring-from-url-as-its-own-field/217128 "2020-01-30T14:29:09Z")
Out logging contains all URLs that comes in to our server Now in the full URL is in the "message" field e.g. "http://server/api/orders?filter=(EQ%20reference-number%20"5c631c69-e06f-411b-8a21-d1bb37958071")&include=or… --- ## [Unassigned shards - problem (does not recover / assign)](https://discuss.elastic.co/t/unassigned-shards-problem-does-not-recover-assign/217022)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 3\ **Last updated:** [January 30, 2020, 2:26pm UTC](https://discuss.elastic.co/t/unassigned-shards-problem-does-not-recover-assign/217022 "2020-01-30T14:26:06Z")
Hi! I have a problem with the Elasticsearch cluster. After restarting one of the nodes (resizing partitions in virtualization) this node started normally. Some shards on the node work good. A few shards, however, hav… --- ## [Filebeats Sending Data to the Wrong index (ignoring .yml config and using default index)](https://discuss.elastic.co/t/filebeats-sending-data-to-the-wrong-index-ignoring-yml-config-and-using-default-index/216708)
**Author:** [@guibarati](https://discuss.elastic.co/u/guibarati)\ **Replies:** 9\ **Last updated:** [January 30, 2020, 2:17pm UTC](https://discuss.elastic.co/t/filebeats-sending-data-to-the-wrong-index-ignoring-yml-config-and-using-default-index/216708 "2020-01-30T14:17:39Z")
Hi, I'm testing a filebeats indexing of JSON content created with wireshark. I have the filebeat.yml configured as below, but the logs keep going to the default filebeats index, (filebeat-7.5.2-2020.01.27-000001). Can… --- ## [Elasticsearch hits in logs per index](https://discuss.elastic.co/t/elasticsearch-hits-in-logs-per-index/217199)
**Author:** [@negiadventures](https://discuss.elastic.co/u/negiadventures)\ **Replies:** 1\ **Last updated:** [January 30, 2020, 2:11pm UTC](https://discuss.elastic.co/t/elasticsearch-hits-in-logs-per-index/217199 "2020-01-30T14:11:38Z")
Is there a way in which we can track the hits for each query in log file? --- ## [Применение csv фильтра после grok](https://discuss.elastic.co/t/csv-grok/216068)
**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\ **Replies:** 14\ **Last updated:** [January 30, 2020, 2:09pm UTC](https://discuss.elastic.co/t/csv-grok/216068 "2020-01-30T14:09:12Z")
Здравствуйте! Есть необходимость парсить csv фильтром то, что не распарсил grok. Я сделал конфиг: filter { if "ise" in \[tags\] and (\[message\] !~ "NetworkDeviceName=ASA1-VPN" and \[message\] !~ "NetworkDeviceName=ASA2-… --- ## [JSON input field](https://discuss.elastic.co/t/json-input-field/217007)
**Author:** [@Mbt\_Mbt](https://discuss.elastic.co/u/Mbt_Mbt)\ **Replies:** 13\ **Last updated:** [January 30, 2020, 1:23pm UTC](https://discuss.elastic.co/t/json-input-field/217007 "2020-01-30T13:23:32Z")
Good afternoon, I am trying to save the information contained in a field in independent fields for later analysis in kibana. I have tried actions of the json target, source plugin ... but I don't get any positive result… --- ## [Beats pipelines automation](https://discuss.elastic.co/t/beats-pipelines-automation/217193)
**Author:** [@gborg](https://discuss.elastic.co/u/gborg)\ **Replies:** 0\ **Last updated:** [January 30, 2020, 1:19pm UTC](https://discuss.elastic.co/t/beats-pipelines-automation/217193 "2020-01-30T13:19:53Z")
Hello I have a lot of servers running beats that are collected into a "middle layer"(1) before they are shipped to elasticsearch and I am currently managing the pipelines by hand, installing filebeat, set up against ela… --- ## [Increasing the search.max\_buckets makes kibana stuck](https://discuss.elastic.co/t/increasing-the-search-max-buckets-makes-kibana-stuck/217192)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 0\ **Last updated:** [January 30, 2020, 1:08pm UTC](https://discuss.elastic.co/t/increasing-the-search-max-buckets-makes-kibana-stuck/217192 "2020-01-30T13:08:35Z")
I am trying to make an histogram with 3 sub-bucket but I get "Request to Elasticsearch failed:" with error : "Trying to create too many buckets. Must be less than or equal to: \[10000\] but was \[10001\]. This limit can be… --- ## [How to change default header column's of visulization page](https://discuss.elastic.co/t/how-to-change-default-header-columns-of-visulization-page/217117)
**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\ **Replies:** 2\ **Last updated:** [January 30, 2020, 1:07pm UTC](https://discuss.elastic.co/t/how-to-change-default-header-columns-of-visulization-page/217117 "2020-01-30T13:07:33Z")
Hi Can we change or configure new header in the visualization page. We have "Title", "type" and "Actions" as header column's of Visualization page. After selecting the type of visualization, selcting "Index Pattern" i… --- ## [Modify search.max\_buckets](https://discuss.elastic.co/t/modify-search-max-buckets/217175)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 2\ **Last updated:** [January 30, 2020, 1:01pm UTC](https://discuss.elastic.co/t/modify-search-max-buckets/217175 "2020-01-30T13:01:31Z")
Hi, I am trying to modify "search.max\_buckets" by: curl -X PUT "localhost:9200/\_cluster/settings?pretty" -H 'Content-Type: application/json' -d' { "defaults" : { "search.max\_buckets" : "15000" } } ' and I get t… --- ## [Accurate count of distinct values](https://discuss.elastic.co/t/accurate-count-of-distinct-values/217188)
**Author:** [@Kobi\_Atun](https://discuss.elastic.co/u/Kobi_Atun)\ **Replies:** 0\ **Last updated:** [January 30, 2020, 12:57pm UTC](https://discuss.elastic.co/t/accurate-count-of-distinct-values/217188 "2020-01-30T12:57:54Z")
Hello, I'm using elastic search in order to store information about search terms. My document structure: site search term date (year and month) data1 data2 I have an index for each month. For a given query with sit… --- ## [Handling cluster.initial\_master\_nodes on automated provisioning](https://discuss.elastic.co/t/handling-cluster-initial-master-nodes-on-automated-provisioning/217166)
**Author:** [@LED](https://discuss.elastic.co/u/LED)\ **Replies:** 2\ **Last updated:** [January 30, 2020, 12:42pm UTC](https://discuss.elastic.co/t/handling-cluster-initial-master-nodes-on-automated-provisioning/217166 "2020-01-30T12:42:08Z")
Hi, I'm trying to deploy a ES Cluster in Azure using Machine Scale Sets; to allow us to increase the number of nodes quickly.I would like these to be configured automatically using packer to create the machine image pri… --- ## [Rollup indices have the "avg" field containing the same value as the "sum" field](https://discuss.elastic.co/t/rollup-indices-have-the-avg-field-containing-the-same-value-as-the-sum-field/217177)
**Author:** [@yagodorea](https://discuss.elastic.co/u/yagodorea)\ **Replies:** 0\ **Last updated:** [January 30, 2020, 12:16pm UTC](https://discuss.elastic.co/t/rollup-indices-have-the-avg-field-containing-the-same-value-as-the-sum-field/217177 "2020-01-30T12:16:59Z")
I think this is a bug in the rollup job, I can't plot reliable data using the rolled up indice because I can't get metrics average, only the sum. I'm using ES 7.4.0 and I'm specifically trying to make visualizations on k… --- ## [Migrate cloud.elastic.co index from amazon deployment to azure deployment](https://discuss.elastic.co/t/migrate-cloud-elastic-co-index-from-amazon-deployment-to-azure-deployment/216302)
**Author:** [@vchalmel](https://discuss.elastic.co/u/vchalmel)\ **Replies:** 2\ **Last updated:** [January 30, 2020, 12:33pm UTC](https://discuss.elastic.co/t/migrate-cloud-elastic-co-index-from-amazon-deployment-to-azure-deployment/216302 "2020-01-30T12:33:46Z")
Hi ! In order to avoid connexion stability issues for an Azure hosted API using an originally AWS hosted elastic cloud deployment I am seeking to migrate the indices of said deployment to a new Azure hosted deployment i… --- ## [Which node is used for transforms?](https://discuss.elastic.co/t/which-node-is-used-for-transforms/217163)
**Author:** [@Federico\_Bevione](https://discuss.elastic.co/u/Federico_Bevione)\ **Replies:** 1\ **Last updated:** [January 30, 2020, 12:26pm UTC](https://discuss.elastic.co/t/which-node-is-used-for-transforms/217163 "2020-01-30T12:26:32Z")
Hi there, I'm new to this community. I'm wondering which kind of node (data, ingest, etc) is used to run transforms. I've defined 2 different transforms and I'm trying to understand why cpu usage on data nodes is rais… --- ## [Logstash on RHEL 8.x](https://discuss.elastic.co/t/logstash-on-rhel-8-x/217178)
**Author:** [@caiossouza](https://discuss.elastic.co/u/caiossouza)\ **Replies:** 0\ **Last updated:** [January 30, 2020, 12:20pm UTC](https://discuss.elastic.co/t/logstash-on-rhel-8-x/217178 "2020-01-30T12:20:30Z")
Hi, I would like to confirm if we can run Logstash on RHEL 8.x servers. Reading the Support Matrix (https://www.elastic.co/pt/support/matrix) we can see RHEL 8.X is compatible with some recent components, like beats, b… --- ## [Circuit breaker logging](https://discuss.elastic.co/t/circuit-breaker-logging/217170)
**Author:** [@mats990](https://discuss.elastic.co/u/mats990)\ **Replies:** 2\ **Last updated:** [January 30, 2020, 12:19pm UTC](https://discuss.elastic.co/t/circuit-breaker-logging/217170 "2020-01-30T12:19:41Z")
Hi, We have configured circuit breakers which from time to time get triggered. We can see logs similar to this: Example: \[request\] New used memory 320131168 \[305.3mb\] for data of \[\\] would be larger than … --- ## [Sending Log4J logs (in XML) again](https://discuss.elastic.co/t/sending-log4j-logs-in-xml-again/215739)
**Author:** [@JY\_DT](https://discuss.elastic.co/u/JY_DT)\ **Replies:** 13\ **Last updated:** [January 30, 2020, 12:16pm UTC](https://discuss.elastic.co/t/sending-log4j-logs-in-xml-again/215739 "2020-01-30T12:16:03Z")
Hi, This is a follow up to an earlier post on a similar topic. I'm trying to send Log4j logs in XML format to Elasticsearch using Logstash. My XML file is: \ **Author:** [@Toshif](https://discuss.elastic.co/u/Toshif)\ **Replies:** 3\ **Last updated:** [January 30, 2020, 12:11pm UTC](https://discuss.elastic.co/t/how-to-retrieve-sum-from-elasticsearch-using-java/217158 "2020-01-30T12:11:35Z") Hello, I am having 5 fileds (viz. A,B,C & D) in my index. I want to retrieve sum of field B for my query using java. Can any1 explain me to do so ? I've gone through Elastic Docs about aggregation, but did not unders… --- ## [Elasticsearch installation issues on RHEL6](https://discuss.elastic.co/t/elasticsearch-installation-issues-on-rhel6/216374)
**Author:** [@Shreya](https://discuss.elastic.co/u/Shreya)\ **Replies:** 5\ **Last updated:** [January 30, 2020, 11:56am UTC](https://discuss.elastic.co/t/elasticsearch-installation-issues-on-rhel6/216374 "2020-01-30T11:56:02Z")
I am facing the following issue while installing Elasticsearch. Kindly help. \`\[root@abc log\]# yum install -y elasticsearch Setting up Install Process Filebeat-7.x | 1.3 kB … --- ## [Language Translation API](https://discuss.elastic.co/t/language-translation-api/216886)
**Author:** [@jyotis](https://discuss.elastic.co/u/jyotis)\ **Replies:** 3\ **Last updated:** [January 30, 2020, 11:47am UTC](https://discuss.elastic.co/t/language-translation-api/216886 "2020-01-30T11:47:37Z")
Hi Team, I want to integrate Elastic search with my App. I'm wondering if there is any API(Rest API) for language translation. My use case is if i search in french "problème", would be able to get result related to prob… --- ## [Multiple search filters in has\_child query](https://discuss.elastic.co/t/multiple-search-filters-in-has-child-query/216634)
**Author:** [@johnkary](https://discuss.elastic.co/u/johnkary)\ **Replies:** 3\ **Last updated:** [January 29, 2020, 3:40pm UTC](https://discuss.elastic.co/t/multiple-search-filters-in-has-child-query/216634 "2020-01-29T15:40:06Z")
Hi all! I have an index with parent-child capability and the has\_child query below with a filter-range applied on children (child\_field\_1). My issues here are 2. I cannot put multiple filters to children (only one), M… --- ## [Map only specific fields to save space](https://discuss.elastic.co/t/map-only-specific-fields-to-save-space/217157)
**Author:** [@Tobias\_Eriksson](https://discuss.elastic.co/u/Tobias_Eriksson)\ **Replies:** 0\ **Last updated:** [January 30, 2020, 10:33am UTC](https://discuss.elastic.co/t/map-only-specific-fields-to-save-space/217157 "2020-01-30T10:33:21Z")
I would like to map only 5 or so fields in the incoming data, the rest I do not care about How would my mapping look like then ? Right now it looks like this: PUT /\_template/tobias2-all-audit { "order" : 0, "versi… --- ## [Facing issue while installing any filter plugin such as logstash-filter-elapsed](https://discuss.elastic.co/t/facing-issue-while-installing-any-filter-plugin-such-as-logstash-filter-elapsed/216918)
**Author:** [@nishug001](https://discuss.elastic.co/u/nishug001)\ **Replies:** 3\ **Last updated:** [January 30, 2020, 10:27am UTC](https://discuss.elastic.co/t/facing-issue-while-installing-any-filter-plugin-such-as-logstash-filter-elapsed/216918 "2020-01-30T10:27:35Z")
Hi everyone, I'm trying to install logstash-filter-elapsed on my logstash environment but I'm getting below error every time. I tried installing other plugins but still observe the same issue. Can someone please help… --- ## [How up score for one a index if I have many indexes](https://discuss.elastic.co/t/how-up-score-for-one-a-index-if-i-have-many-indexes/217145)
**Author:** [@RussLan\_Gutsalyuk](https://discuss.elastic.co/u/RussLan_Gutsalyuk)\ **Replies:** 0\ **Last updated:** [January 30, 2020, 9:48am UTC](https://discuss.elastic.co/t/how-up-score-for-one-a-index-if-i-have-many-indexes/217145 "2020-01-30T09:48:41Z")
Hello. I have many indexes ("INDEX1","INDEX2","INDEX3") \[ "index" =\> \["INDEX1","INDEX2","INDEX3"\] "body" =\> \[ "query" =\> \[ "bool" =\> \[ "must" =\> \[ … --- ## [Run elastic-operator with fewer permissions? Disable webhook?](https://discuss.elastic.co/t/run-elastic-operator-with-fewer-permissions-disable-webhook/217135)
**Author:** [@CoaxVex](https://discuss.elastic.co/u/CoaxVex)\ **Replies:** 1\ **Last updated:** [January 30, 2020, 9:31am UTC](https://discuss.elastic.co/t/run-elastic-operator-with-fewer-permissions-disable-webhook/217135 "2020-01-30T09:31:03Z")
The elastic-operator ClusterRole, which is deployed and granted when installing with the "all-in-one.yaml" method gives a lot of permissions on the cluster. So much even, you may as well be running the operator as cluste… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1655) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1657)