# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1664 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1665 --- ## [Netflow protocol version 0 not supported](https://discuss.elastic.co/t/netflow-protocol-version-0-not-supported/214971)
**Author:** [@w33ha-zxc](https://discuss.elastic.co/u/w33ha-zxc)\ **Replies:** 2\ **Last updated:** [January 27, 2020, 12:51pm UTC](https://discuss.elastic.co/t/netflow-protocol-version-0-not-supported/214971 "2020-01-27T12:51:48Z")
Have been trying to ingest Netflow Data from a Fortigate Firewall through Filebeat, but upon running filebeat -e gets me to the following warning - netflow/input.go:240 Error parsing NetFlow packet of length 220 from… --- ## [Elasticsearch state "Invalid" after trying to install plugin](https://discuss.elastic.co/t/elasticsearch-state-invalid-after-trying-to-install-plugin/216296)
**Author:** [@radw](https://discuss.elastic.co/u/radw)\ **Replies:** 2\ **Last updated:** [January 27, 2020, 12:30pm UTC](https://discuss.elastic.co/t/elasticsearch-state-invalid-after-trying-to-install-plugin/216296 "2020-01-27T12:30:42Z")
Hi folks! I did an ECK installation on GKE with v1beta1. After 1 month I've resized the PVs to accomodate the new storage needs. Everything went smooth and the PVs resized correctly and are shown in the monitoring secti… --- ## [Elasticsearch.bat VS elasticsearch service](https://discuss.elastic.co/t/elasticsearch-bat-vs-elasticsearch-service/216653)
**Author:** [@CesarPozo](https://discuss.elastic.co/u/CesarPozo)\ **Replies:** 0\ **Last updated:** [January 27, 2020, 12:02pm UTC](https://discuss.elastic.co/t/elasticsearch-bat-vs-elasticsearch-service/216653 "2020-01-27T12:02:30Z")
(For Windows) Is there any differences between run elasticsearch.bat and install the service elasticsearch-service.bat and start it? I have read here that: "Elasticsearch can be installed as a service to run in the bac… --- ## [Getting exception in threads dump and cpu consuming high in logstash 5.0?](https://discuss.elastic.co/t/getting-exception-in-threads-dump-and-cpu-consuming-high-in-logstash-5-0/216644)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 0\ **Last updated:** [January 27, 2020, 11:09am UTC](https://discuss.elastic.co/t/getting-exception-in-threads-dump-and-cpu-consuming-high-in-logstash-5-0/216644 "2020-01-27T11:09:06Z")
Please let me know, why is this behabiour occuring? Threads dump; "Ruby-0-Thread-40: /home/local1/monitors/local/localagent/vendor/bundle/jruby/1.9/gems/puma-2.16.0-java/lib/puma/server.rb:296" #89 daemon prio=5 os\_pri… --- ## [Why cpu going high when we run logstash 5.0 in server?](https://discuss.elastic.co/t/why-cpu-going-high-when-we-run-logstash-5-0-in-server/216643)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 0\ **Last updated:** [January 27, 2020, 11:06am UTC](https://discuss.elastic.co/t/why-cpu-going-high-when-we-run-logstash-5-0-in-server/216643 "2020-01-27T11:06:18Z")
please help me ? "Ruby-0-Thread-40: /home/local1/monitors/local/localagent/vendor/bundle/jruby/1.9/gems/puma-2.16.0-java/lib/puma/server.rb:296" #89 daemon prio=5 os\_prio=0 tid=0x00007f5c20008800 nid=0x2550 runnable \[0x… --- ## [Unable to output elastalert.log](https://discuss.elastic.co/t/unable-to-output-elastalert-log/215477)
**Author:** [@Sansao](https://discuss.elastic.co/u/Sansao)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 11:03am UTC](https://discuss.elastic.co/t/unable-to-output-elastalert-log/215477 "2020-01-27T11:03:23Z")
I need to remove elastalert information from /var/log/messages, and I'm having trouble creating a log file for elastalert. the default configuration in config.yaml doesn't work and i'm not getting it through the /etc/rs… --- ## [Dashboard not working as expected](https://discuss.elastic.co/t/dashboard-not-working-as-expected/216637)
**Author:** [@Abbas\_Hallal](https://discuss.elastic.co/u/Abbas_Hallal)\ **Replies:** 0\ **Last updated:** [January 27, 2020, 10:53am UTC](https://discuss.elastic.co/t/dashboard-not-working-as-expected/216637 "2020-01-27T10:53:44Z")
Hello, I am new to ElasticStack. I have setup the filebeat on a remote server and the Elastics search logstash and Kibana on another server. I am able to see the log in the Logs section however I am unable to get them i… --- ## [org.elasticsearch.index.query.QueryShardException: failed to create query using kibana](https://discuss.elastic.co/t/org-elasticsearch-index-query-queryshardexception-failed-to-create-query-using-kibana/216305)
**Author:** [@GregoryBrown](https://discuss.elastic.co/u/GregoryBrown)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 10:46am UTC](https://discuss.elastic.co/t/org-elasticsearch-index-query-queryshardexception-failed-to-create-query-using-kibana/216305 "2020-01-27T10:46:36Z")
I have a newly setup Elasticsearch cluster and kibana pointing to it. When I just click on the discovery tab to view the data it just hangs forever and ever, when looking into the ES logs more I see the following error: … --- ## [I have a date field and got the error: 'Fielddata is disabled on text fields by default.'](https://discuss.elastic.co/t/i-have-a-date-field-and-got-the-error-fielddata-is-disabled-on-text-fields-by-default/216335)
**Author:** [@Daniel\_Faria](https://discuss.elastic.co/u/Daniel_Faria)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 10:44am UTC](https://discuss.elastic.co/t/i-have-a-date-field-and-got-the-error-fielddata-is-disabled-on-text-fields-by-default/216335 "2020-01-27T10:44:54Z")
Hello. I have a date field mapping as date and got the error: 'Fielddata is disabled on text fields by default.'' on Kibana query. Fielddata is disabled on text fields by default. Set fielddata=true on \[log\_processed.t… --- ## [Is it possible to return only one result if an exact match is found?](https://discuss.elastic.co/t/is-it-possible-to-return-only-one-result-if-an-exact-match-is-found/216410)
**Author:** [@Aaron\_Pitts](https://discuss.elastic.co/u/Aaron_Pitts)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 10:36am UTC](https://discuss.elastic.co/t/is-it-possible-to-return-only-one-result-if-an-exact-match-is-found/216410 "2020-01-27T10:36:26Z")
Hi guys, I'm building a site with a database of watches. I have an autocomplete search input. I have fuzzy matching for typing in the watch name (post\_title), but I'd like for the user to be able to enter the watch refe… --- ## [Get certain fields from children in has-child query](https://discuss.elastic.co/t/get-certain-fields-from-children-in-has-child-query/216031)
**Author:** [@johnkary](https://discuss.elastic.co/u/johnkary)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 10:29am UTC](https://discuss.elastic.co/t/get-certain-fields-from-children-in-has-child-query/216031 "2020-01-27T10:29:11Z")
Hi all! I have an index with parent-child capability. I managed the has-child query to bring me specific fields from the parent with the command: \_source": \["parent\_field\_1","parent\_field\_2"...\] and it worked. Now i w… --- ## [Cant create index after deleted them all](https://discuss.elastic.co/t/cant-create-index-after-deleted-them-all/216564)
**Author:** [@zilahir](https://discuss.elastic.co/u/zilahir)\ **Replies:** 2\ **Last updated:** [January 27, 2020, 9:58am UTC](https://discuss.elastic.co/t/cant-create-index-after-deleted-them-all/216564 "2020-01-27T09:58:29Z")
So, i have deleted all my indicies, using the endpoint: DELETE \/\* after this, started to add data to Elasticsearch again, which are arriving there successfully. In kibana, when i create index, it seems i… --- ## [Parsing lines that only match a start string](https://discuss.elastic.co/t/parsing-lines-that-only-match-a-start-string/215125)
**Author:** [@whoatemyjam](https://discuss.elastic.co/u/whoatemyjam)\ **Replies:** 3\ **Last updated:** [January 27, 2020, 9:57am UTC](https://discuss.elastic.co/t/parsing-lines-that-only-match-a-start-string/215125 "2020-01-27T09:57:59Z")
hi Please if you can help. How can we get logstash to log only the lines starting with "central-logging": "true" and ignore rest which we dont need. { "central-logging": "true", "log-date": "2020-01-15 11:19:08 UTC",… --- ## [How to query on a specific array index within elasticsearch?](https://discuss.elastic.co/t/how-to-query-on-a-specific-array-index-within-elasticsearch/216557)
**Author:** [@meallhour](https://discuss.elastic.co/u/meallhour)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 9:56am UTC](https://discuss.elastic.co/t/how-to-query-on-a-specific-array-index-within-elasticsearch/216557 "2020-01-27T09:56:51Z")
Mapping: abc-data-type/\_mapping/field/sData.status { "abc\_history": { "mappings": { "abc-data-type": { "sData.status": { "full\_name": "sData.status", … --- ## [Startup freezes after "\[node\] initializing ..." state](https://discuss.elastic.co/t/startup-freezes-after-node-initializing-state/216533)
**Author:** [@lifia](https://discuss.elastic.co/u/lifia)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 9:54am UTC](https://discuss.elastic.co/t/startup-freezes-after-node-initializing-state/216533 "2020-01-27T09:54:33Z")
Hi all, We have a production environment on ElasticSearch 1.6.0. When we start elasticsearch service, although service status is "started", it does not bind to ports 9200/9300 and join the cluster. When I check the lo… --- ## [Elasticsearch query over multiple indexes very slow](https://discuss.elastic.co/t/elasticsearch-query-over-multiple-indexes-very-slow/216520)
**Author:** [@Pedro\_Torres](https://discuss.elastic.co/u/Pedro_Torres)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 9:44am UTC](https://discuss.elastic.co/t/elasticsearch-query-over-multiple-indexes-very-slow/216520 "2020-01-27T09:44:25Z")
Question: I create one index with one shard per day on Elasticsearch. When I perform queries against several days worth of these indices, it is very slow. Would anyone that has implemented a similar architecture give som… --- ## [How to analyze how many documents for specific key's each value](https://discuss.elastic.co/t/how-to-analyze-how-many-documents-for-specific-keys-each-value/216514)
**Author:** [@ryohetoy](https://discuss.elastic.co/u/ryohetoy)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 9:43am UTC](https://discuss.elastic.co/t/how-to-analyze-how-many-documents-for-specific-keys-each-value/216514 "2020-01-27T09:43:27Z")
I have a like\_to\_article Index with 250,000 documents. This index has article\_id key. To analyze how many documents for each article\_id key, how can I do that even if there are 250,000 docs? for incetance... article… --- ## [To run elastic search and logstash on different server](https://discuss.elastic.co/t/to-run-elastic-search-and-logstash-on-different-server/216361)
**Author:** [@amanpradhan07](https://discuss.elastic.co/u/amanpradhan07)\ **Replies:** 3\ **Last updated:** [January 27, 2020, 9:42am UTC](https://discuss.elastic.co/t/to-run-elastic-search-and-logstash-on-different-server/216361 "2020-01-27T09:42:36Z")
Hello everyone, I am using logstash on a linux based server . I am collecting the logs on this server and after processing the logs with logstash i want to send these logs to elastic search which is on an amazon ec-2 in… --- ## [Grok for WebSphere log](https://discuss.elastic.co/t/grok-for-websphere-log/216599)
**Author:** [@swapnalichingonda](https://discuss.elastic.co/u/swapnalichingonda)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 9:17am UTC](https://discuss.elastic.co/t/grok-for-websphere-log/216599 "2020-01-27T09:17:46Z")
Hi, please help me to define grok for below log { "sysdate":"\[08/Jun/2019:00:00:12 -0400\]", "site":"cdbeser.net", "host":"lmw.net", "method":"POST", "request":"/services/servicePath", "querystring":"", "port":"4413", "… --- ## [Table which shows number of events where field exists / not exists](https://discuss.elastic.co/t/table-which-shows-number-of-events-where-field-exists-not-exists/216618)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 8:34am UTC](https://discuss.elastic.co/t/table-which-shows-number-of-events-where-field-exists-not-exists/216618 "2020-01-27T08:34:24Z")
Hi, We modified our log data to extend the information which is available in kibana. So we introduced a new field I need to check if the new field is present in all events, if not I want to have a table where I can see… --- ## [Split json with no seperator](https://discuss.elastic.co/t/split-json-with-no-seperator/216368)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 7:37am UTC](https://discuss.elastic.co/t/split-json-with-no-seperator/216368 "2020-01-27T07:37:18Z")
Hi All, I have a nxlog tcp out marked towards Logstash, Here's the input from nxlog {"EventReceivedTime":"2020-01-21T03:01:37.025293-07:00", "Severity":"INFO", "EventTime":"2020-01-21T03:01:37.025296-07:00", "Hos… --- ## [After update the 7.4.2 too 7.5.1 , don't work](https://discuss.elastic.co/t/after-update-the-7-4-2-too-7-5-1-dont-work/215685)
**Author:** [@econom](https://discuss.elastic.co/u/econom)\ **Replies:** 2\ **Last updated:** [January 27, 2020, 7:21am UTC](https://discuss.elastic.co/t/after-update-the-7-4-2-too-7-5-1-dont-work/215685 "2020-01-27T07:21:10Z")
\[2020-01-20T11:13:39,384\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[c7.lan\] uncaught exception in thread \[main\] org.elasticsearch.bootstrap.StartupException: ElasticsearchException\[failed to bind service\]; nes… --- ## [Sortの仕様について](https://discuss.elastic.co/t/sort/216598)
**Author:** [@Masanori\_Mishima](https://discuss.elastic.co/u/Masanori_Mishima)\ **Replies:** 2\ **Last updated:** [January 27, 2020, 6:12am UTC](https://discuss.elastic.co/t/sort/216598 "2020-01-27T06:12:40Z")
sort":\[{"score":{"order":"desc"}},{"age":{"order":"asc"}},{"average":{"order":"desc"}}\] のように複数のフィールドに対してソートを掛けた際の優先順位などはあるのでしょうか？ 例えばscoreの降順に並べるのが優先され、検索結果としては 1.score:90 age:17 average:85 2.score:89 age:15 average:… --- ## [Elasticsearch security points](https://discuss.elastic.co/t/elasticsearch-security-points/216593)
**Author:** [@shashikant\_swaraj](https://discuss.elastic.co/u/shashikant_swaraj)\ **Replies:** 1\ **Last updated:** [January 27, 2020, 5:00am UTC](https://discuss.elastic.co/t/elasticsearch-security-points/216593 "2020-01-27T05:00:23Z")
HI, we want to deploy elaticsearch on our production server. what security points needs to consider --- ## [Not able to get any results on using bucket aggregations](https://discuss.elastic.co/t/not-able-to-get-any-results-on-using-bucket-aggregations/216576)
**Author:** [@fenster25](https://discuss.elastic.co/u/fenster25)\ **Replies:** 3\ **Last updated:** [January 27, 2020, 1:32am UTC](https://discuss.elastic.co/t/not-able-to-get-any-results-on-using-bucket-aggregations/216576 "2020-01-27T01:32:49Z")
I have some PR data in my ES. This is how the documents are modelled { "Author" : "dheerajrav", "Date" : "2012-10-05T10:16:49Z", "Number" : 2554441, "IsMerged" : false, … --- ## [Suggestion search for autocomplete](https://discuss.elastic.co/t/suggestion-search-for-autocomplete/216585)
**Author:** [@MaTTaDox](https://discuss.elastic.co/u/MaTTaDox)\ **Replies:** 0\ **Last updated:** [January 26, 2020, 10:29pm UTC](https://discuss.elastic.co/t/suggestion-search-for-autocomplete/216585 "2020-01-26T22:29:15Z")
Hey Together, anyone have an Idea how i can suggestions like the "Other Suggestions" in the following image? I found it in this Video. I think they refer to the title of the article but I not been able to find the c… --- ## [How to delete index? Invalid escape sequence \`%\[f' at index 0 of: %\[fields\]\[log\_type\]-2020.01.09](https://discuss.elastic.co/t/how-to-delete-index-invalid-escape-sequence-f-at-index-0-of-fields-log-type-2020-01-09/214509)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 4\ **Last updated:** [January 26, 2020, 8:02pm UTC](https://discuss.elastic.co/t/how-to-delete-index-invalid-escape-sequence-f-at-index-0-of-fields-log-type-2020-01-09/214509 "2020-01-26T20:02:25Z")
I have an index called this in kibana- yellow open %\[fields\]\[log\_type\]-2020.01.09 and when I try to delete it with this command- DELETE /%\[fields\]\[log\_type\]-2020.01.09 I get an error which says- { "error": "inva… --- ## [Switching monitoring towards 'Monitoring cluster'](https://discuss.elastic.co/t/switching-monitoring-towards-monitoring-cluster/216578)
**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\ **Replies:** 0\ **Last updated:** [January 26, 2020, 7:38pm UTC](https://discuss.elastic.co/t/switching-monitoring-towards-monitoring-cluster/216578 "2020-01-26T19:38:16Z")
Hi forum. Following the exploration of the ELK universe, now, since it is strongly encouraged around, I want to learn how to setup the 'Monitoring cluster' scenario. While documentation is quite detailed on every piece,… --- ## [Delete automatically One year old data from elastic search](https://discuss.elastic.co/t/delete-automatically-one-year-old-data-from-elastic-search/216384)
**Author:** [@Abhishek\_Pratap\_Sing](https://discuss.elastic.co/u/Abhishek_Pratap_Sing)\ **Replies:** 2\ **Last updated:** [January 26, 2020, 2:30pm UTC](https://discuss.elastic.co/t/delete-automatically-one-year-old-data-from-elastic-search/216384 "2020-01-26T14:30:48Z")
Hi Team I would like to automatically delete one year old data from Elastic Search, I didn't find any proper way. Please anyone help out me. Thanks!! --- ## [Single Logout using Kibana and Keycloak](https://discuss.elastic.co/t/single-logout-using-kibana-and-keycloak/216094)
**Author:** [@Dennis\_Rietvink](https://discuss.elastic.co/u/Dennis_Rietvink)\ **Replies:** 5\ **Last updated:** [January 26, 2020, 1:18pm UTC](https://discuss.elastic.co/t/single-logout-using-kibana-and-keycloak/216094 "2020-01-26T13:18:48Z")
We are integrating Kibana in our Keycloak identity management solution but have problems getting ‘single logout’ working when triggered from another client. This is the scenario: User enters the portal but has to logi… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1663) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1665)