# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1663 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1664 --- ## [Elasticsearch and overload](https://discuss.elastic.co/t/elasticsearch-and-overload/216700)
**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\ **Replies:** 2\ **Last updated:** [January 27, 2020, 6:13pm UTC](https://discuss.elastic.co/t/elasticsearch-and-overload/216700 "2020-01-27T18:13:43Z")
Hello, our Elasticsearch cluster is used to store a variety of logs including Windows domain controller logs; I noticed that since adding Cisco netflow logs (which was over a million events ever 15 minutes) Elasticsearch… --- ## [Short\_message and host must be set](https://discuss.elastic.co/t/short-message-and-host-must-be-set/216709)
**Author:** [@sblancocr](https://discuss.elastic.co/u/sblancocr)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 6:10pm UTC](https://discuss.elastic.co/t/short-message-and-host-must-be-set/216709 "2020-01-27T18:10:35Z")
Hi.. I have a logstash and i try to connect to graylog2. The logstash configuration is: input { beats { port =\> 5044 ssl =\> true ssl\_certificate =\> "/etc/pki/tls/certs/XXXX.crt" ssl\_key =\> "/etc/pki/tls/private/Y… --- ## [CSV filter duplicate output result](https://discuss.elastic.co/t/csv-filter-duplicate-output-result/216521)
**Author:** [@pierrejutard](https://discuss.elastic.co/u/pierrejutard)\ **Replies:** 6\ **Last updated:** [January 27, 2020, 5:59pm UTC](https://discuss.elastic.co/t/csv-filter-duplicate-output-result/216521 "2020-01-27T17:59:58Z")
Hello, Under windows 10, with 7.5.2 ES stack version, I try to make a pipeline from a csv file (";") delimiter to ES but the output is not stable. For instance it duplicates the result: The output is:{ "twod" =\> 0.… --- ## [ECE IP Change](https://discuss.elastic.co/t/ece-ip-change/216561)
**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 5:07pm UTC](https://discuss.elastic.co/t/ece-ip-change/216561 "2020-01-27T17:07:24Z")
Hi all, I have installed ECE on 3 machines, however, I had to move them to a new network and thus the IPs have changed. ECE is still trying to connect to the old IP addresses. Where do I go to change this? 2020.01.26 … --- ## [Problem to Disable Xpack.Security.Enabled ECK K8S](https://discuss.elastic.co/t/problem-to-disable-xpack-security-enabled-eck-k8s/216705)
**Author:** [@Marinho\_DevOPs](https://discuss.elastic.co/u/Marinho_DevOPs)\ **Replies:** 0\ **Last updated:** [January 27, 2020, 5:05pm UTC](https://discuss.elastic.co/t/problem-to-disable-xpack-security-enabled-eck-k8s/216705 "2020-01-27T17:05:29Z")
Hi, I'm problem to disable authentication in ECK K8S. i set in config xpack.security.enabled to false. But my cluster not work Up. config: node.master: true node.data: true node.ingest: true xpack.security.enabled… --- ## [\[warning\]\[migrations\] Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms](https://discuss.elastic.co/t/warning-migrations-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/215472)
**Author:** [@mparp](https://discuss.elastic.co/u/mparp)\ **Replies:** 5\ **Last updated:** [January 27, 2020, 4:50pm UTC](https://discuss.elastic.co/t/warning-migrations-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/215472 "2020-01-27T16:50:52Z")
Hi all! Can you please help me to solve the problem with Kibana. I installed latest version of Elasticsearch and Kibana on the same server with minimum configuration. Installation is standalone. Server IP address 192.… --- ## [Rank\_feature takes a lot of space](https://discuss.elastic.co/t/rank-feature-takes-a-lot-of-space/216337)
**Author:** [@snakeztc](https://discuss.elastic.co/u/snakeztc)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 11:16am UTC](https://discuss.elastic.co/t/rank-feature-takes-a-lot-of-space/216337 "2020-01-27T11:16:05Z")
I am using rank features for a customized ranking function. I used rank\_features as the data type, and a document usually contains about 5000 features out of 30K possible keys. It's taking way too much space though. For… --- ## [Can i use a custom field to update a elasticsearch doc?](https://discuss.elastic.co/t/can-i-use-a-custom-field-to-update-a-elasticsearch-doc/216652)
**Author:** [@noelzubinvictor](https://discuss.elastic.co/u/noelzubinvictor)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 12:47pm UTC](https://discuss.elastic.co/t/can-i-use-a-custom-field-to-update-a-elasticsearch-doc/216652 "2020-01-27T12:47:21Z")
Say my doc looks something like this. { ... a: {...}, b: {...} } and i need to partially update a and b asychronously and maintain the order of updates. Since the exteranal version in elasticsearch is for the who… --- ## [Retrieve Hour and Day from Timestamp](https://discuss.elastic.co/t/retrieve-hour-and-day-from-timestamp/216093)
**Author:** [@Jim\_Thunder](https://discuss.elastic.co/u/Jim_Thunder)\ **Replies:** 3\ **Last updated:** [January 27, 2020, 4:10pm UTC](https://discuss.elastic.co/t/retrieve-hour-and-day-from-timestamp/216093 "2020-01-27T16:10:05Z")
Hello! My code here is getting the hour and day from a newly (and more accurate) timestamp. The timestamp is updated with a -0600 for the timezone. When I retrieve the hour from this timestamp, it doesn't include the fa… --- ## [How to combine oracle db and logfile to get output in kibana using logstash](https://discuss.elastic.co/t/how-to-combine-oracle-db-and-logfile-to-get-output-in-kibana-using-logstash/216693)
**Author:** [@saravana\_hariharan](https://discuss.elastic.co/u/saravana_hariharan)\ **Replies:** 0\ **Last updated:** [January 27, 2020, 4:09pm UTC](https://discuss.elastic.co/t/how-to-combine-oracle-db-and-logfile-to-get-output-in-kibana-using-logstash/216693 "2020-01-27T16:09:35Z")
my question is possible for oracle database and logfile data into same indexpattern like multiple input and single output im tried but logfile data cant be readed --- ## [Save data from Databricks to ElasticSearch Cloud](https://discuss.elastic.co/t/save-data-from-databricks-to-elasticsearch-cloud/216679)
**Author:** [@shoeb\_ansari](https://discuss.elastic.co/u/shoeb_ansari)\ **Replies:** 0\ **Last updated:** [January 27, 2020, 3:04pm UTC](https://discuss.elastic.co/t/save-data-from-databricks-to-elasticsearch-cloud/216679 "2020-01-27T15:04:28Z")
While executing the Databricks notebook to save data in Elasticsearch cloud if you are getting below error: “org.elasticsearch.hadoop.EsHadoopIllegalArgumentException: Cannot detect ES version - typically this happens… --- ## [How to check if the field exists before to define him as geoppoint](https://discuss.elastic.co/t/how-to-check-if-the-field-exists-before-to-define-him-as-geoppoint/214871)
**Author:** [@IneedHelp](https://discuss.elastic.co/u/IneedHelp)\ **Replies:** 6\ **Last updated:** [January 27, 2020, 3:06pm UTC](https://discuss.elastic.co/t/how-to-check-if-the-field-exists-before-to-define-him-as-geoppoint/214871 "2020-01-27T15:06:59Z")
Hello, I use Filebeats, Logstash and Elasticsearch to parse differents types of logs files ( IIS, Syslog, Apache, ... ) and watch the result with Kibana. I want to add a map on my dashboard so I use geoip to get gps coo… --- ## [Thread\_pool.size bigger than # processors](https://discuss.elastic.co/t/thread-pool-size-bigger-than-processors/216681)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 2\ **Last updated:** [January 27, 2020, 3:43pm UTC](https://discuss.elastic.co/t/thread-pool-size-bigger-than-processors/216681 "2020-01-27T15:43:28Z")
Hi, I would like to tune thread\_pool.size value so I would like to understand what could happen if I will set a value bigger than the # of processors. For instance, I have a VM with 8 core so for search.thread\_pool siz… --- ## [Geo\_point for conection map](https://discuss.elastic.co/t/geo-point-for-conection-map/215363)
**Author:** [@Jose\_Campos](https://discuss.elastic.co/u/Jose_Campos)\ **Replies:** 2\ **Last updated:** [January 27, 2020, 3:42pm UTC](https://discuss.elastic.co/t/geo-point-for-conection-map/215363 "2020-01-27T15:42:46Z")
I am currently mapping the data of a snort, but I was trying to convert two fields, which are the IP source and destination to geo\_point. I am doing this in order to be able to create the map connection visualization. O… --- ## [Best approach for updating large amount of documents](https://discuss.elastic.co/t/best-approach-for-updating-large-amount-of-documents/216252)
**Author:** [@Toma\_Popov](https://discuss.elastic.co/u/Toma_Popov)\ **Replies:** 6\ **Last updated:** [January 27, 2020, 3:42pm UTC](https://discuss.elastic.co/t/best-approach-for-updating-large-amount-of-documents/216252 "2020-01-27T15:42:45Z")
Hello, I would like to ask, what would be the best approach when trying to update big amounts of documents. For our use case we have documents, that need to be enriched with additional data a few hour after they have b… --- ## [Getting started - where and how to use POST command example?](https://discuss.elastic.co/t/getting-started-where-and-how-to-use-post-command-example/216588)
**Author:** [@debasisc](https://discuss.elastic.co/u/debasisc)\ **Replies:** 3\ **Last updated:** [January 27, 2020, 12:59pm UTC](https://discuss.elastic.co/t/getting-started-where-and-how-to-use-post-command-example/216588 "2020-01-27T12:59:14Z")
Just recently installed Elasticsearch in Windows 10. Trying to follow "getting started" tutorial. Can you provide working version of curl command or equivalent whereby I can execute this step? I do not have Kibana ins… --- ## [Kibana "error fetching fields" forbidden](https://discuss.elastic.co/t/kibana-error-fetching-fields-forbidden/215851)
**Author:** [@gerard1](https://discuss.elastic.co/u/gerard1)\ **Replies:** 4\ **Last updated:** [January 27, 2020, 3:22pm UTC](https://discuss.elastic.co/t/kibana-error-fetching-fields-forbidden/215851 "2020-01-27T15:22:00Z")
I'm using version 7.5 on Elastic Cloud, and I've created a new user & role, to use instead of global admin "elastic" account, setting the permissions to read from the desired indexes. If that non-admin user access Kiban… --- ## [Logstash not erroring or crashing but not working](https://discuss.elastic.co/t/logstash-not-erroring-or-crashing-but-not-working/216682)
**Author:** [@morpheus](https://discuss.elastic.co/u/morpheus)\ **Replies:** 0\ **Last updated:** [January 27, 2020, 3:21pm UTC](https://discuss.elastic.co/t/logstash-not-erroring-or-crashing-but-not-working/216682 "2020-01-27T15:21:15Z")
I am running Logstash with the command: /usr/share/logstash/bin/logstash --debug "--path.settings" "/etc/logstash2" And getting this DEBUG message \[2020-01-27T15:15:30,902\]\[INFO \]\[logstash.agent \] Successfu… --- ## [Ip2proxy plugin not working](https://discuss.elastic.co/t/ip2proxy-plugin-not-working/216645)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 2:47pm UTC](https://discuss.elastic.co/t/ip2proxy-plugin-not-working/216645 "2020-01-27T14:47:36Z")
Hi, I have ELK Stack v 7.4.2, I get the client ip with %{IP:clientip} in grok filter. I've already installed ip2proxy plugin in logstash. I added this part to logstash filter: ip2proxy { source =\> "clientip" } but in… --- ## [Getting Same Logs while having different ports](https://discuss.elastic.co/t/getting-same-logs-while-having-different-ports/216642)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 2:41pm UTC](https://discuss.elastic.co/t/getting-same-logs-while-having-different-ports/216642 "2020-01-27T14:41:57Z")
I have two logstash conf files. First one is for filebeat. input { beats { port =\> 5044 } } filter{ ...... } } and the other one is for awx: input { tcp { host =\> "10.35.110.86" port =\> 3310 } } But i am… --- ## [How come that my disk available on elasticsearch is stabilized while still ingesting data](https://discuss.elastic.co/t/how-come-that-my-disk-available-on-elasticsearch-is-stabilized-while-still-ingesting-data/216622)
**Author:** [@Haalanam](https://discuss.elastic.co/u/Haalanam)\ **Replies:** 3\ **Last updated:** [January 27, 2020, 2:39pm UTC](https://discuss.elastic.co/t/how-come-that-my-disk-available-on-elasticsearch-is-stabilized-while-still-ingesting-data/216622 "2020-01-27T14:39:51Z")
Weird fact ! I am ingesting data since now 10 days but my elasticsearch node is kind of stabilized to 94 %. What might causes that knowing that i dont delete any data. --- ## [Can't access Kibana after reload, and enabled & started kibana service. HTTP 302 Error](https://discuss.elastic.co/t/cant-access-kibana-after-reload-and-enabled-started-kibana-service-http-302-error/216462)
**Author:** [@kel](https://discuss.elastic.co/u/kel)\ **Replies:** 4\ **Last updated:** [January 27, 2020, 2:28pm UTC](https://discuss.elastic.co/t/cant-access-kibana-after-reload-and-enabled-started-kibana-service-http-302-error/216462 "2020-01-27T14:28:46Z")
Hi there, I installed elasticSearch (7.4.1) on Ubuntu 18.04.1 server in Virtualbox, and it is working fine. I could create mapping, indexes, and use all the cmds(XPUT, XPOST, XGET ...). After installing Kibana(7.5.2) i… --- ## [Too\_many\_buckets\_exception](https://discuss.elastic.co/t/too-many-buckets-exception/216671)
**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\ **Replies:** 0\ **Last updated:** [January 27, 2020, 2:15pm UTC](https://discuss.elastic.co/t/too-many-buckets-exception/216671 "2020-01-27T14:15:46Z")
Hi... I have a too\_many\_buckets\_exception problem. I have read some of the other related questions and although the composite aggregation did help to a certain degree ... it does not seem to support auto\_date\_histogram M… --- ## [Kibana Failed to load indices](https://discuss.elastic.co/t/kibana-failed-to-load-indices/216034)
**Author:** [@Christophe\_Journel](https://discuss.elastic.co/u/Christophe_Journel)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 2:12pm UTC](https://discuss.elastic.co/t/kibana-failed-to-load-indices/216034 "2020-01-27T14:12:14Z")
Hello. When i upgraded Kibana ( and the whole elk stack from 7.4.1 to 7.5.1), everything went fine. Except that now i cannot create a new index pattern The developper console shows: What can i do ? I already tried t… --- ## [High number of refresh threads](https://discuss.elastic.co/t/high-number-of-refresh-threads/216135)
**Author:** [@Christophe\_Journel](https://discuss.elastic.co/u/Christophe_Journel)\ **Replies:** 3\ **Last updated:** [January 27, 2020, 2:11pm UTC](https://discuss.elastic.co/t/high-number-of-refresh-threads/216135 "2020-01-27T14:11:02Z")
Hello, Here is the result of GET /\_cat/thread\_pool/refresh/?v node\_name name active queue rejected node-5203 refresh 0 0 0 node-5202 refresh 10 13676 0 node-5206 refresh 0 … --- ## [Problems with bootstrapping my 2-node cluster. Master node not found](https://discuss.elastic.co/t/problems-with-bootstrapping-my-2-node-cluster-master-node-not-found/216464)
**Author:** [@paul4](https://discuss.elastic.co/u/paul4)\ **Replies:** 9\ **Last updated:** [January 27, 2020, 2:10pm UTC](https://discuss.elastic.co/t/problems-with-bootstrapping-my-2-node-cluster-master-node-not-found/216464 "2020-01-27T14:10:41Z")
Hi all, I googled and searched these forums extenisvely, but unfortunately still no luck with this. I try to bootstrap a new cluster, based on Docker and ElasticSearch 7.5.0 . I keep getting the error: "master not dis… --- ## [How to Count 3 columns together while doing group by in Elastic Transform in Kibana](https://discuss.elastic.co/t/how-to-count-3-columns-together-while-doing-group-by-in-elastic-transform-in-kibana/216405)
**Author:** [@Vijay\_Gupta](https://discuss.elastic.co/u/Vijay_Gupta)\ **Replies:** 2\ **Last updated:** [January 27, 2020, 2:08pm UTC](https://discuss.elastic.co/t/how-to-count-3-columns-together-while-doing-group-by-in-elastic-transform-in-kibana/216405 "2020-01-27T14:08:00Z")
I have below data set in my index and I want to summarize my index via transform feature in kibana (yellow column shows count of available number for reference) I am able to get individual columns count while doing gr… --- ## [Heartbeat keeps failing after upgrade from 7.4.2 to 7.5.2](https://discuss.elastic.co/t/heartbeat-keeps-failing-after-upgrade-from-7-4-2-to-7-5-2/216572)
**Author:** [@Peter\_Steenbergen](https://discuss.elastic.co/u/Peter_Steenbergen)\ **Replies:** 3\ **Last updated:** [January 27, 2020, 1:47pm UTC](https://discuss.elastic.co/t/heartbeat-keeps-failing-after-upgrade-from-7-4-2-to-7-5-2/216572 "2020-01-27T13:47:08Z")
Heartbeat keeps failing after upgrade from 7.4.2 to 7.5.2. This is the stack trace of it. 2020-01-26T15:40:45.261Z INFO \[publisher\] pipeline/module.go:97 Beat name: beat001-fr 2020-01-26T15:40:45.262Z INFO instance/bea… --- ## [File\_completed\_action delete not working for gzip files](https://discuss.elastic.co/t/file-completed-action-delete-not-working-for-gzip-files/216661)
**Author:** [@hukel](https://discuss.elastic.co/u/hukel)\ **Replies:** 0\ **Last updated:** [January 27, 2020, 1:32pm UTC](https://discuss.elastic.co/t/file-completed-action-delete-not-working-for-gzip-files/216661 "2020-01-27T13:32:35Z")
When I read .gz log files, the files are not being deleted after being read. When I use an uncompressed file it seems to delete correctly. logstash-input-file (4.1.11) logstash-7.4.2 input { file { path =\> "/… --- ## [Logstash don't delete Files](https://discuss.elastic.co/t/logstash-dont-delete-files/215127)
**Author:** [@Ramon\_Mateo](https://discuss.elastic.co/u/Ramon_Mateo)\ **Replies:** 0\ **Last updated:** [January 15, 2020, 11:54am UTC](https://discuss.elastic.co/t/logstash-dont-delete-files/215127 "2020-01-15T11:54:09Z")
Hi I have added the field "file\_completed\_action=\> "delete" but logstash don't delete files. This is my logstash.conf and docker-compose input { file { path =\> "/usr/share/logstash/inputlogs/\*.csv" start\_position… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1662) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1664)